Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E6CB78BC9B11F1B798AD01CF1D38B0.roa
File:                     93E6CB78BC9B11F1B798AD01CF1D38B0.roa (raw, json)
Hash identifier:          nYYUplVN+2Jq61O/cw2Vth9vffax6alg9scwVC22Mjs=
Subject key identifier:   95:D5:A6:E6:69:01:C6:47:AF:08:A8:A1:ED:B0:CD:B5:E8:B8:5E:15
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E6CB78BC9B11F1B798AD01CF1D38B0.roa
Signing time:             Wed 30 Sep 2026 06:53:02 +0000
ROA not before:           Wed 30 Sep 2026 06:52:58 +0000
ROA not after:            Fri 06 Nov 2026 06:52:58 +0000
asID:                     44559
IP address blocks:        154.209.95.0/24 maxlen: 24
                          154.209.132.0/24 maxlen: 24
                          154.209.133.0/24 maxlen: 24
                          154.209.135.0/24 maxlen: 24
                          154.209.136.0/24 maxlen: 24
                          154.209.137.0/24 maxlen: 24
                          154.209.138.0/24 maxlen: 24
                          154.209.139.0/24 maxlen: 24
                          154.209.140.0/24 maxlen: 24
                          154.209.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125812 (0x1eb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 06:52:58 2026 GMT
            Not After : Nov  6 06:52:58 2026 GMT
        Subject: CN=6abcb1cd-2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:8c:01:d4:d9:ad:74:24:e8:09:a7:22:e4:
                    6f:c0:7b:68:26:83:dc:25:e0:f2:59:29:ff:e3:40:
                    b2:3f:ac:84:42:c6:75:ed:29:2b:0b:50:fd:8c:15:
                    a0:54:e6:e9:7a:3c:0f:a0:a7:7e:64:a2:fe:64:06:
                    67:cb:79:66:af:2d:a1:36:6e:fc:b4:10:3d:72:63:
                    e3:e0:59:49:50:2a:c9:0f:56:a1:d9:24:c0:b6:e6:
                    e5:eb:61:47:8c:b1:ef:fa:7b:c7:18:e4:90:da:81:
                    70:58:f6:ff:c0:a5:56:84:34:67:0e:66:67:78:9e:
                    18:da:e9:0c:8c:e4:ec:df:e6:a5:45:53:56:53:78:
                    60:5d:ad:b1:e1:00:cf:f8:5d:6c:7c:f0:8c:6e:a4:
                    84:39:8b:51:f6:40:05:8b:29:d7:d6:1f:fe:88:7e:
                    f1:bb:59:4c:c5:88:9f:be:b3:01:f2:5e:29:2a:58:
                    ae:3f:27:76:19:53:86:d8:54:2c:61:c2:20:a7:79:
                    5b:4c:71:da:c7:e5:b9:1a:78:0b:fd:7e:ce:cb:8e:
                    bf:19:bd:a8:1d:1b:da:a0:20:9f:1a:f5:38:65:4a:
                    f5:1d:0c:05:15:88:12:a4:fd:b7:7a:59:0c:73:6e:
                    69:2a:e5:0b:3a:ea:7d:c5:bb:20:78:01:b6:a6:b3:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D5:A6:E6:69:01:C6:47:AF:08:A8:A1:ED:B0:CD:B5:E8:B8:5E:15
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E6CB78BC9B11F1B798AD01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.95.0/24
                  154.209.132.0/23
                  154.209.135.0-154.209.141.255

    Signature Algorithm: sha256WithRSAEncryption
         d6:a5:ed:72:51:2d:a3:cc:69:e0:65:5e:2c:21:d7:89:9d:3b:
         10:d9:1e:dc:fa:bf:88:a9:07:60:6c:6a:fb:ed:68:c6:1f:26:
         f9:11:6c:ce:1c:f7:cd:de:cb:bb:96:a5:86:02:98:3a:16:dc:
         1f:e1:61:5a:b8:f8:98:30:be:60:51:fb:25:e5:55:47:d1:ed:
         09:26:cc:46:ec:15:57:54:ff:6f:a1:d8:b6:b3:c5:d6:b7:5d:
         49:7d:69:b1:1a:7d:54:3a:57:14:2f:2b:cc:9f:d6:7f:9e:2f:
         f0:19:25:b5:35:02:aa:b2:29:c3:b4:b3:0a:f3:30:53:8a:f2:
         7c:3e:80:c1:67:62:3d:c5:f7:ed:04:f8:81:84:fc:f9:93:f7:
         97:66:72:d3:fd:9a:22:36:d8:ff:97:8c:ac:63:2a:26:35:6c:
         9b:1d:01:44:81:c9:4b:5e:19:62:9c:3d:33:d5:15:02:a7:d1:
         94:1c:4f:9d:d8:39:ef:6e:25:9b:c0:25:f5:f2:a4:a8:c3:33:
         e1:0b:31:1c:7c:a3:06:c8:52:ad:cc:1d:c7:99:87:ed:ca:75:
         d7:e4:e3:a3:3a:ca:5a:8d:dd:f7:a0:1e:95:75:24:7b:d4:ed:
         08:32:0f:2b:88:38:bb:42:62:2f:f8:fe:ac:b7:a5:33:12:a6:
         81:14:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----