Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB1285CC49A11F1B9059CC4CE1D38B0.roa
File:                     9AB1285CC49A11F1B9059CC4CE1D38B0.roa (raw, json)
Hash identifier:          RgaUvy0GmNXoCzO6UDoEuao+f1dCEjZrlvlxnFZjEAM=
Subject key identifier:   A2:87:A7:8C:E8:F0:03:61:03:FD:CF:EC:40:94:BB:FD:01:AE:0C:0C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB1285CC49A11F1B9059CC4CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 11:06:13 +0000
ROA not before:           Sat 10 Oct 2026 11:06:08 +0000
ROA not after:            Tue 17 Nov 2026 11:06:08 +0000
asID:                     22773
IP address blocks:        154.202.15.0/24 maxlen: 24
                          154.202.16.0/24 maxlen: 24
                          154.202.17.0/24 maxlen: 24
                          154.202.18.0/24 maxlen: 24
                          154.202.19.0/24 maxlen: 24
                          154.202.20.0/24 maxlen: 24
                          154.202.21.0/24 maxlen: 24
                          154.202.22.0/24 maxlen: 24
                          154.202.23.0/24 maxlen: 24
                          154.213.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126301 (0x1ed5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 11:06:08 2026 GMT
            Not After : Nov 17 11:06:08 2026 GMT
        Subject: CN=6aca1c25-aa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:ab:68:67:d6:4f:23:39:b7:e0:5b:17:1d:
                    d7:6c:45:d3:3c:de:1d:3c:57:5c:4b:71:ee:50:89:
                    d6:48:50:df:70:b2:36:b3:54:36:bc:7b:fb:d6:be:
                    0a:22:e5:f4:0e:e7:26:65:50:24:88:a4:39:f6:ec:
                    6f:38:10:59:95:d6:d4:c7:d1:a0:0c:a6:2c:ec:af:
                    2e:0c:e8:1a:8c:d1:42:b5:39:60:79:44:fd:3f:df:
                    cc:61:50:59:6f:2e:c8:14:aa:4c:3d:06:9c:26:60:
                    96:1a:ce:da:8f:7d:76:c5:9e:61:0a:df:d7:4c:f1:
                    8d:8d:ff:ce:97:8c:bf:61:5b:8d:67:b7:de:c5:3a:
                    72:c8:27:25:ea:38:04:5d:0f:85:ae:d4:36:9c:79:
                    c2:7f:09:a0:6a:eb:3f:2c:c8:36:a6:4c:5b:84:f9:
                    93:ce:d9:9f:d5:90:2c:7d:7e:81:d1:fd:78:5f:a4:
                    48:9d:25:8d:ff:7f:72:6b:7b:7b:6c:d4:09:d9:c2:
                    2f:cc:28:6f:90:0b:bb:19:b0:66:f9:dd:91:0d:66:
                    e7:d1:f7:1c:2e:e9:0c:c7:9d:e6:26:85:0a:19:2f:
                    fc:57:58:98:da:36:d7:a2:90:32:3f:f3:cf:2e:95:
                    89:2f:8a:59:63:6a:37:88:88:1b:d7:93:43:8c:1b:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:A7:8C:E8:F0:03:61:03:FD:CF:EC:40:94:BB:FD:01:AE:0C:0C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB1285CC49A11F1B9059CC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.15.0-154.202.23.255
                  154.213.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:af:0c:3b:8b:89:42:79:68:80:db:e3:72:3f:73:c8:8e:7e:
         c0:dd:14:65:aa:54:23:4b:cc:9c:fb:3d:92:ac:40:eb:3e:05:
         d9:7c:55:78:03:fd:44:d3:b9:e7:d8:5d:ed:49:40:b1:f1:d5:
         b2:5e:5b:45:8d:df:70:63:2a:2b:d3:77:2a:90:0b:48:22:92:
         ea:82:c6:3d:9b:aa:ed:57:c3:40:af:4a:51:84:b6:0f:48:e1:
         43:05:e2:21:7a:10:21:68:16:b3:77:c4:66:5c:89:a7:92:b8:
         e1:ef:42:2f:01:9e:21:91:82:b5:f4:73:e2:68:8e:7e:3c:23:
         87:99:58:8f:77:46:fa:f9:20:54:7c:e5:54:47:fa:ad:9d:62:
         a7:e1:4a:b8:49:6b:62:f6:48:24:24:5a:42:2a:d5:75:d3:bb:
         01:ad:92:29:2f:d6:49:9d:50:e8:2d:9e:90:af:fa:64:61:d5:
         0d:06:f6:9d:91:fb:2f:e5:1e:29:24:83:d8:46:de:d4:21:2f:
         4d:1a:3f:7f:1f:0d:0d:b4:d4:3b:f3:6d:4f:30:60:f8:48:9b:
         2d:8e:e7:b7:48:3c:a8:4b:1d:d4:ff:2f:31:0d:ef:b9:cb:38:
         ff:60:a2:1a:47:88:62:82:f4:f4:0a:a9:5d:57:8a:a9:8a:80:
         7b:9d:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----