Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D6AC35AC61111F1A3EBD1D5CE1D38B0.roa
File:                     9D6AC35AC61111F1A3EBD1D5CE1D38B0.roa (raw, json)
Hash identifier:          KzQT0ljZbpBuhOB+jSazNm8oW9vMk3mHpUCdnZlAA90=
Subject key identifier:   F1:7B:7C:50:13:13:CB:FA:5E:D2:F6:D8:47:81:51:55:EF:C5:E9:08
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D6AC35AC61111F1A3EBD1D5CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:50:39 +0000
ROA not before:           Mon 12 Oct 2026 07:50:34 +0000
ROA not after:            Tue 01 Dec 2026 07:50:34 +0000
asID:                     149440
IP address blocks:        154.91.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126391 (0x1edb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 07:50:34 2026 GMT
            Not After : Dec  1 07:50:34 2026 GMT
        Subject: CN=6acc914e-e629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:78:b0:62:84:80:df:89:31:3c:cf:a4:f0:
                    07:99:85:57:07:a7:e4:80:14:87:97:76:28:1b:cd:
                    6d:71:df:02:a5:64:02:55:a3:fa:20:46:c7:24:8f:
                    6f:da:be:24:03:90:57:aa:4c:d6:59:12:96:ce:2c:
                    c7:18:5a:7d:7a:4c:42:c5:10:d2:d3:84:c6:09:be:
                    04:90:4c:f9:61:c5:65:46:90:3b:74:c8:7a:bd:ab:
                    2c:d4:21:d4:2a:d5:e7:2f:91:72:b3:7c:86:e9:a1:
                    63:4e:17:fc:e1:e7:fc:ff:29:cc:53:7f:11:38:ae:
                    0b:43:38:c1:5d:17:c7:6a:fa:c2:1f:1a:4a:29:94:
                    16:56:17:7d:c2:9c:4b:8a:c1:d9:75:05:73:04:80:
                    e3:d2:f4:d4:df:08:1d:45:2e:88:e6:52:d7:32:88:
                    c0:20:9f:62:80:15:9b:df:5c:a7:0f:16:d6:06:a0:
                    b5:e3:ac:2c:fe:03:fc:a8:bf:74:d7:8c:75:19:aa:
                    34:c6:24:64:40:7e:12:e0:1f:43:b8:03:00:bd:d2:
                    3e:f7:e0:1d:cc:29:d6:11:9d:78:e5:2d:61:9b:6a:
                    5e:c0:7c:ce:c6:02:36:5f:16:e2:d0:ca:97:1d:6b:
                    9f:77:6f:d7:f8:9c:84:a0:cb:5f:4e:90:a6:a4:2d:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7B:7C:50:13:13:CB:FA:5E:D2:F6:D8:47:81:51:55:EF:C5:E9:08
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D6AC35AC61111F1A3EBD1D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:a8:f7:04:09:2e:7a:9a:6c:b9:e9:d8:7b:07:80:2d:dc:d3:
         26:3a:bf:6f:c7:60:55:c9:59:0b:0c:fe:57:c2:ff:24:4a:ca:
         a6:66:40:14:c3:fb:71:bb:3e:53:47:91:3a:f6:cd:e2:ea:5f:
         3f:7e:25:70:ae:d3:b1:22:1e:18:a9:f6:6b:78:14:d0:51:a4:
         f1:73:e4:c6:81:a0:bf:80:bd:11:21:fc:9e:33:bc:34:c0:58:
         00:eb:29:59:ae:60:e4:1b:f3:b4:ed:60:89:e8:54:5e:37:63:
         72:02:f1:65:af:cb:f7:92:3c:44:0a:6b:e1:c1:77:1b:6c:b5:
         5a:58:1f:c0:63:ac:78:3a:d4:ce:68:54:70:d6:8a:80:d6:35:
         56:45:df:9b:07:a2:d1:3c:92:71:c4:24:c4:b8:7b:ef:63:36:
         e8:68:bc:43:11:dd:b9:9f:71:94:fe:28:03:d2:d1:56:c8:a2:
         5a:a1:ae:be:73:03:e0:a7:be:b6:9d:f6:c3:f3:cf:71:ac:42:
         63:ba:c7:89:ac:6d:8b:08:8b:b1:62:57:bc:e1:70:9f:6b:c0:
         7d:86:f6:80:ca:32:b5:a9:7b:bb:8d:61:ea:99:d5:d3:90:12:
         80:04:95:32:8b:6b:31:4a:34:ec:66:f5:46:83:82:99:a0:e2:
         30:ef:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----