Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9A9E38BB0811F1A0A0AABFCE1D38B0.roa
File:                     9B9A9E38BB0811F1A0A0AABFCE1D38B0.roa (raw, json)
Hash identifier:          B+NXVlm1SyR0KZhs6PCb6gvP0OMqJ9zKOzzft4gG6i8=
Subject key identifier:   E6:3F:B5:AD:1B:57:DA:E9:23:E1:01:13:4A:E7:A2:86:63:A3:25:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9A9E38BB0811F1A0A0AABFCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 06:48:27 +0000
ROA not before:           Mon 28 Sep 2026 06:48:23 +0000
ROA not after:            Tue 27 Oct 2026 06:48:23 +0000
asID:                     147176
IP address blocks:        154.83.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125706 (0x1eb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 28 06:48:23 2026 GMT
            Not After : Oct 27 06:48:23 2026 GMT
        Subject: CN=6aba0dbb-2a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:7f:73:09:35:b1:5f:a2:86:5c:37:13:f9:
                    ec:5c:76:5e:ce:ee:16:6e:0e:27:80:37:b6:e7:c0:
                    f6:1f:cc:8a:14:77:c4:7b:f9:13:b8:a9:3f:6a:46:
                    a5:7c:1f:f9:95:3d:13:85:fe:f2:b5:b8:76:36:72:
                    27:45:29:9a:70:b6:33:77:36:15:f3:bf:1c:01:58:
                    39:63:43:69:27:e8:18:34:76:56:50:8d:21:e6:a9:
                    77:69:83:46:e7:eb:5d:38:92:97:97:20:10:24:31:
                    39:34:21:2b:16:81:ce:5d:25:e9:7c:fe:f8:d8:19:
                    ae:e2:d1:32:33:93:b7:1c:9f:ed:0a:50:e2:39:98:
                    31:a8:e8:13:c5:83:65:cb:23:4d:48:cd:f0:61:e8:
                    08:c2:db:b7:65:79:4c:70:99:dc:c2:88:e2:ed:b4:
                    a4:f4:9a:16:9c:9b:87:6e:f4:1b:e7:11:6a:92:0e:
                    3d:52:ca:b5:0d:f5:67:de:6d:c0:f2:c0:8f:0e:e5:
                    ef:ee:8f:f0:ec:86:54:2f:f8:6a:17:d4:6e:e5:65:
                    1c:19:f8:da:ea:c2:e1:94:0f:fc:39:e0:a0:85:46:
                    56:a9:9b:05:88:63:d4:35:2b:b4:68:fd:36:11:06:
                    cc:dd:f4:20:c2:2a:04:00:ff:eb:61:a7:72:61:fe:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:B5:AD:1B:57:DA:E9:23:E1:01:13:4A:E7:A2:86:63:A3:25:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9A9E38BB0811F1A0A0AABFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:55:56:bb:d5:b8:a0:44:fa:f1:69:61:de:22:b8:5d:9a:96:
         d6:c2:e3:a8:c3:08:2e:2a:87:71:9d:30:17:78:74:34:b2:f3:
         4b:22:65:23:ac:a4:44:fe:0c:23:63:f3:35:0f:05:aa:9f:94:
         b8:e6:71:e5:15:4d:01:3a:a6:d2:5a:18:5b:c9:53:2a:e4:3d:
         7e:f4:1b:01:2f:9e:d7:72:80:32:22:07:be:f8:49:68:0c:fa:
         e8:a6:c5:32:12:6b:3f:c7:da:e5:3f:5f:58:4d:8e:f1:b4:cb:
         fa:2d:8e:e8:62:8a:be:54:7d:e2:8e:69:6d:da:7b:7f:af:6c:
         e5:22:63:06:9b:da:ca:8d:58:73:4d:d9:29:f0:4f:62:23:a2:
         23:65:de:ab:94:92:b3:c5:8c:1d:de:8a:ef:f2:ac:7f:0c:82:
         b7:dc:66:45:66:00:70:a8:98:5d:38:8e:48:67:65:0e:97:69:
         84:d9:e9:0c:86:6e:35:85:d4:5d:35:db:ea:27:10:83:e7:c4:
         b3:cb:d6:70:e7:17:23:7b:ef:98:fe:b7:b7:de:5c:ec:1d:66:
         2e:1f:e3:35:14:9a:39:fb:3c:85:de:7e:54:c0:b6:10:8b:a8:
         5b:ef:47:ac:b0:14:77:28:12:3d:2e:0f:93:26:87:74:ef:4d:
         b3:f1:4d:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAesKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI4MDY0ODIzWhcNMjYxMDI3MDY0ODIzWjAYMRYw
FAYDVQQDEw02YWJhMGRiYi0yYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxMN/cwk1sV+ihlw3E/nsXHZezu4Wbg4ngDe258D2H8yKFHfEe/kTuKk/
akalfB/5lT0Thf7ytbh2NnInRSmacLYzdzYV878cAVg5Y0NpJ+gYNHZWUI0h5ql3
aYNG5+tdOJKXlyAQJDE5NCErFoHOXSXpfP742Bmu4tEyM5O3HJ/tClDiOZgxqOgT
xYNlyyNNSM3wYegIwtu3ZXlMcJncwoji7bSk9JoWnJuHbvQb5xFqkg49Usq1DfVn
3m3A8sCPDuXv7o/w7IZUL/hqF9Ru5WUcGfja6sLhlA/8OeCghUZWqZsFiGPUNSu0
aP02EQbM3fQgwioEAP/rYadyYf4ZJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOY/
ta0bV9rpI+EBE0rnooZjoyUxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjlBOUUzOEJCMDgxMUYxQTBBMEFBQkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMZMA0GCSqGSIb3DQEB
CwUAA4IBAQAwVVa71bigRPrxaWHeIrhdmpbWwuOowwguKodxnTAXeHQ0svNLImUj
rKRE/gwjY/M1DwWqn5S45nHlFU0BOqbSWhhbyVMq5D1+9BsBL57XcoAyIge++Elo
DPropsUyEms/x9rlP19YTY7xtMv6LY7oYoq+VH3ijmlt2nt/r2zlImMGm9rKjVhz
Tdkp8E9iI6IjZd6rlJKzxYwd3orv8qx/DIK33GZFZgBwqJhdOI5IZ2UOl2mE2ekM
hm41hdRdNdvqJxCD58Szy9Zw5xcje++Y/re33lzsHWYuH+M1FJo5+zyF3n5UwLYQ
i6hb70essBR3KBI9Lg+TJod0702z8U03
-----END CERTIFICATE-----