Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A4E5DECC5011F1ABFDAB15CF1D38B0.roa
File:                     90A4E5DECC5011F1ABFDAB15CF1D38B0.roa (raw, json)
Hash identifier:          RYLh3UEgeOKmd/EoOPFpKhxhbnu/3seNRCWKTaHZPqo=
Subject key identifier:   2C:60:8E:5C:4D:34:D5:55:C7:05:A9:B8:86:C3:05:12:37:05:16:0D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A4E5DECC5011F1ABFDAB15CF1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:36:22 +0000
ROA not before:           Tue 20 Oct 2026 06:36:18 +0000
ROA not after:            Fri 06 Nov 2026 06:36:18 +0000
asID:                     40115
IP address blocks:        154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
                          154.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126694 (0x1eee6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:36:18 2026 GMT
            Not After : Nov  6 06:36:18 2026 GMT
        Subject: CN=6ad70be6-f7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:ff:2e:cc:b0:fb:36:fc:09:7a:c1:29:81:
                    cf:29:c3:1d:19:a1:6e:86:24:e8:2c:e1:c8:01:18:
                    97:10:be:f4:f3:6e:cc:78:80:cc:03:2f:68:a0:ae:
                    87:f8:44:46:41:f8:78:bf:86:32:85:1b:04:df:98:
                    24:36:52:de:54:1a:ce:6e:ed:8b:53:0a:9b:03:88:
                    b5:34:64:06:6f:c0:4c:4d:17:5c:d9:23:bf:7b:9e:
                    31:71:3f:57:6e:b6:68:f7:1a:c4:7e:d9:8b:de:f5:
                    f2:f1:23:13:34:10:77:1b:51:94:31:6d:d5:7d:6d:
                    e7:a3:8b:73:ad:a2:7d:72:93:f7:d4:6e:e8:82:d2:
                    c9:27:39:a9:9d:8e:a7:eb:15:65:5c:bb:a1:87:7b:
                    e2:82:2a:15:48:a0:a3:ce:d2:f7:0b:37:02:d2:ae:
                    1e:f0:3e:1e:4b:2c:b8:ea:54:49:a6:1a:da:73:70:
                    43:80:f4:10:32:06:5a:c9:75:8e:50:c4:05:29:bd:
                    51:a9:05:ec:a4:f2:67:3f:1f:70:25:03:68:fd:2b:
                    37:3c:b9:18:85:e4:c0:98:6c:cb:a5:1b:6a:a9:77:
                    ba:11:5e:42:29:6d:ae:eb:d7:27:a0:50:1d:ec:57:
                    72:ab:fa:2f:75:47:4b:e4:5d:8d:d8:bc:bc:d0:c5:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:8E:5C:4D:34:D5:55:C7:05:A9:B8:86:C3:05:12:37:05:16:0D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A4E5DECC5011F1ABFDAB15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.25.0-154.86.31.255

    Signature Algorithm: sha256WithRSAEncryption
         74:43:99:7a:02:df:98:5b:71:9b:61:76:42:fb:60:d9:19:9b:
         4f:ff:bc:a8:72:bb:bd:0b:82:b5:f6:f9:5c:35:35:e6:87:2b:
         91:f4:18:ca:fe:56:c9:0c:9e:f9:4f:a0:af:79:ad:dd:f9:f5:
         85:5a:26:88:4f:bf:86:19:ca:24:97:18:10:3b:fa:2c:0d:9d:
         eb:92:ff:ef:f3:32:83:c2:c4:b7:45:68:3e:e7:ac:fe:e4:68:
         5c:0f:82:53:c0:73:56:00:e3:64:52:b7:b3:ba:e9:2d:fc:65:
         6c:70:5a:40:34:7c:6d:cb:ff:f8:a5:66:60:cf:c6:fa:70:d0:
         9d:49:fb:df:ba:fc:4f:be:b5:84:ac:9d:8f:58:7e:a7:0a:fe:
         06:24:12:87:5e:df:8e:32:e3:a9:74:8f:ec:08:c0:c2:ad:80:
         d6:ca:9a:6a:67:ba:4d:8e:40:fa:4b:a9:2a:cc:ca:d2:72:5e:
         86:00:97:37:95:f0:91:7b:20:40:fb:4c:aa:38:b2:0e:a5:15:
         29:96:90:22:3f:18:54:cc:da:c9:64:0c:60:0c:17:2c:3a:6c:
         2f:3c:ee:1d:b1:e5:a6:0b:6b:c2:26:39:39:0d:49:95:27:26:
         04:dc:d7:39:b4:21:30:c0:df:90:0b:87:1a:53:86:93:e1:91:
         0a:cc:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----