Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466FEAC3B411F1A041DBE8CE1D38B0.roa
File:                     8F466FEAC3B411F1A041DBE8CE1D38B0.roa (raw, json)
Hash identifier:          YeWTL/GKp/Nt0bsWyr6UGa6zLdJ+tdmi/BTCuAOlvxA=
Subject key identifier:   7F:0C:7A:1C:00:87:BC:45:EF:CA:7C:3C:EE:81:39:B7:1F:70:2B:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466FEAC3B411F1A041DBE8CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:39:29 +0000
ROA not before:           Fri 09 Oct 2026 07:39:25 +0000
ROA not after:            Thu 05 Nov 2026 07:39:25 +0000
asID:                     271988
IP address blocks:        154.88.160.0/20 maxlen: 24
                          154.88.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126206 (0x1ecfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 07:39:25 2026 GMT
            Not After : Nov  5 07:39:25 2026 GMT
        Subject: CN=6ac89a31-95d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:c8:2b:f2:8c:e1:33:fe:44:5d:99:38:bb:
                    e6:4a:bc:31:03:4a:2d:d7:f4:5f:b3:c9:12:b2:fd:
                    5f:6d:d1:23:eb:fe:bf:81:f0:f1:ca:a5:c3:8f:53:
                    80:e6:65:0c:d0:7e:29:51:13:7b:17:13:bb:da:7a:
                    b0:01:90:63:77:4f:99:e2:7b:58:2e:44:32:ad:93:
                    ff:b0:38:0e:d3:34:0e:7f:14:b3:47:5e:02:51:90:
                    ca:c8:86:07:69:b6:43:65:3d:5e:b7:12:05:7f:98:
                    e2:70:9c:2e:6b:6e:c7:d4:73:78:75:88:cc:12:af:
                    b7:c9:0f:46:73:fd:8f:76:9e:8b:39:bd:42:cb:eb:
                    50:32:b0:53:2e:c3:45:41:44:fa:6c:61:a4:04:11:
                    b0:a5:4d:fd:fd:3d:af:c7:ea:57:78:b3:72:83:96:
                    47:64:9f:49:2a:94:cc:0d:f5:d0:3f:29:ca:a5:de:
                    ec:fd:10:06:b8:4b:d5:23:1e:b8:4c:e5:c7:0a:87:
                    e6:64:ca:0c:eb:df:a8:24:0d:2f:86:bd:6c:b9:14:
                    02:50:95:26:59:14:fb:91:49:08:bf:f7:f8:7f:75:
                    16:52:99:3c:7d:d8:e7:56:4b:dd:b0:b7:a3:99:a3:
                    da:5a:2d:27:1b:0e:61:1b:2c:23:e8:00:45:42:2b:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0C:7A:1C:00:87:BC:45:EF:CA:7C:3C:EE:81:39:B7:1F:70:2B:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466FEAC3B411F1A041DBE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.160.0-154.88.179.255

    Signature Algorithm: sha256WithRSAEncryption
         03:54:40:f6:a5:f6:26:c7:29:fb:03:3c:e6:8a:18:45:51:a8:
         43:c4:ca:69:d2:1a:ff:b9:be:17:78:0f:bd:ec:09:ff:be:4f:
         4d:92:05:87:f3:96:fd:76:69:de:71:b4:7a:c1:e3:9e:dc:8d:
         1a:4b:a0:ad:df:74:f5:b1:be:66:ce:bc:9e:98:6b:7c:40:a0:
         f5:46:26:31:0e:41:78:66:68:b9:bf:62:3a:9d:88:4f:b2:11:
         c9:19:46:0c:af:db:c6:79:4d:43:d4:59:47:1b:b3:8c:c9:67:
         91:cb:b5:12:a3:6c:74:b3:f1:b9:4d:10:2b:9d:c8:4d:4d:6d:
         54:68:3f:de:21:08:a8:f3:33:33:89:74:48:88:56:c8:61:14:
         75:f6:a7:c1:27:65:d5:38:bd:0e:03:c1:41:37:51:e5:f3:32:
         35:5d:d7:58:80:55:cf:14:de:1b:d1:90:92:3c:36:2e:b2:5b:
         7a:e5:86:ff:cf:93:32:f9:9c:2d:b3:56:9f:c6:8b:35:79:f5:
         f4:dd:fd:55:10:6a:93:45:17:44:21:b2:70:41:28:2e:c0:cb:
         30:3c:18:ea:06:f8:73:7a:8e:c3:70:39:b9:81:5c:5c:cd:3f:
         b3:96:24:d5:01:6b:31:c7:60:ea:9c:69:1f:6f:de:81:f6:10:
         bd:df:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----