Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9649AE5AC09011F1B110B7D5CE1D38B0.roa
File:                     9649AE5AC09011F1B110B7D5CE1D38B0.roa (raw, json)
Hash identifier:          LOPe0gaiPbn9JVfCtVx4iqRxL57pdH6+4vkXFeKReBY=
Subject key identifier:   12:18:5F:04:B0:F4:DC:18:2A:6F:B4:9D:5C:17:E6:E2:E9:4E:8E:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9649AE5AC09011F1B110B7D5CE1D38B0.roa
Signing time:             Mon 05 Oct 2026 07:44:26 +0000
ROA not before:           Mon 05 Oct 2026 07:44:22 +0000
ROA not after:            Wed 14 Oct 2026 07:44:22 +0000
asID:                     17497
IP address blocks:        154.196.142.0/24 maxlen: 24
                          154.196.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126018 (0x1ec42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 07:44:22 2026 GMT
            Not After : Oct 14 07:44:22 2026 GMT
        Subject: CN=6ac3555a-fd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:de:3c:83:59:25:3e:58:ca:a6:a1:e8:49:
                    d6:ea:76:8d:49:81:46:7d:75:21:1b:1f:1f:f6:0e:
                    60:70:02:6f:e7:65:a2:7e:4e:9a:03:82:d4:3a:1f:
                    47:bc:d5:d2:b0:d1:7c:96:46:36:65:1d:c2:d4:95:
                    af:b3:fb:6d:50:74:01:85:40:2d:03:c0:b0:18:65:
                    ef:47:d4:8c:5b:45:75:1a:65:08:d5:53:32:e5:17:
                    89:89:81:f5:0f:36:f7:35:62:91:45:55:a9:5d:4a:
                    c2:78:d1:d4:50:46:4a:f5:bd:11:12:ac:4d:82:4c:
                    ef:09:55:5e:f5:fa:1a:2c:eb:87:8d:b9:41:ea:eb:
                    1c:72:0a:00:44:e1:7d:6f:61:8e:2b:55:23:50:c7:
                    df:ac:15:85:7a:5c:cf:dd:6f:29:70:3d:0e:f6:c8:
                    95:da:eb:45:4a:51:6b:ef:70:8e:68:2f:7f:e8:e8:
                    f0:ab:2d:92:e6:32:43:b6:7f:13:3c:d9:c9:37:cf:
                    6c:e1:69:4f:65:42:18:a6:48:a9:8a:c6:a3:b0:89:
                    7e:f4:59:07:0b:42:54:65:ee:bd:f3:68:ae:97:30:
                    fe:14:73:11:91:0a:4b:af:d5:b7:33:49:0b:0e:c4:
                    7a:39:d5:c5:17:48:6b:58:ee:0f:15:b8:68:ab:bd:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:5F:04:B0:F4:DC:18:2A:6F:B4:9D:5C:17:E6:E2:E9:4E:8E:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9649AE5AC09011F1B110B7D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:1e:ed:3d:9b:fb:97:6e:5c:fe:04:39:7e:5c:fb:12:d1:
         72:1f:19:e2:73:d8:d8:3e:8a:f6:56:66:9d:02:72:7e:f9:3d:
         4b:9f:ed:91:87:0f:12:c5:62:31:66:d4:99:dd:24:2b:30:4b:
         a1:11:4f:4c:14:6e:ed:78:05:68:28:15:9c:83:c2:62:86:7b:
         0b:47:55:cb:97:99:91:38:3a:1e:b0:9a:b4:2d:1f:5d:2c:0e:
         4c:ad:f5:0e:78:cc:02:e6:4b:f9:57:4d:a5:b2:cf:64:35:c5:
         f6:33:c7:1d:a3:c8:c0:30:92:63:aa:fd:a1:01:82:fe:d4:c1:
         e6:73:94:5d:d5:8f:44:7c:a9:7f:99:c8:3b:fa:6f:1f:82:2f:
         9c:c5:82:47:a0:c6:41:4b:97:b6:a7:ad:66:ce:37:8f:c6:05:
         aa:f3:65:ac:0b:5b:43:b8:0e:98:9f:c4:19:eb:da:98:99:9c:
         d1:9d:81:35:2d:f7:4c:48:cb:9b:cf:d2:2f:76:d6:51:45:6a:
         46:13:ef:dd:a0:a1:ea:71:50:24:4e:d7:7c:22:81:33:01:c6:
         a7:8c:99:15:a1:8c:79:f4:86:54:87:52:29:a5:13:cb:3f:4c:
         16:d2:77:11:38:df:bb:fb:62:3f:4b:83:db:d5:40:da:e7:fa:
         6f:8c:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----