Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0272769F9311F1AC5899B2CE1D38B0.roa
File:                     9E0272769F9311F1AC5899B2CE1D38B0.roa (raw, json)
Hash identifier:          XWJ8gSL8ay6w5BxGUMQ06i3hY6FR8KWIwpUYFHOKDpI=
Subject key identifier:   7A:FF:1F:46:1C:B9:00:41:F6:F5:DD:84:9E:5D:D6:46:4F:5D:18:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E219
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0272769F9311F1AC5899B2CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:12:59 +0000
ROA not before:           Mon 24 Aug 2026 08:12:55 +0000
ROA not after:            Thu 01 Oct 2026 08:12:55 +0000
asID:                     62240
IP address blocks:        154.196.18.0/24 maxlen: 24
                          154.196.22.0/24 maxlen: 24
                          154.196.25.0/24 maxlen: 24
                          154.196.26.0/24 maxlen: 24
                          154.196.27.0/24 maxlen: 24
                          154.196.28.0/24 maxlen: 24
                          154.196.48.0/24 maxlen: 24
                          154.196.49.0/24 maxlen: 24
                          154.196.50.0/24 maxlen: 24
                          154.196.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123417 (0x1e219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:12:55 2026 GMT
            Not After : Oct  1 08:12:55 2026 GMT
        Subject: CN=6a8bfd0b-125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:b6:6d:3f:90:8b:82:ec:6b:dc:9c:0d:cd:
                    43:9c:51:02:b3:38:1a:53:6e:86:b5:be:bb:79:69:
                    9f:a4:2f:76:c6:2e:3f:b8:19:b8:95:af:a2:be:55:
                    9c:be:7a:02:40:a7:d1:d9:1e:8a:05:d0:c0:b3:18:
                    ca:7a:29:30:1f:fb:37:71:4f:b1:1d:f9:89:ac:9c:
                    2a:57:52:72:69:ad:20:43:1f:54:8e:85:88:19:fe:
                    ae:1a:6e:7a:ea:3f:a2:d0:af:40:a4:c6:49:a1:6b:
                    48:6a:7d:30:29:e4:27:b2:d7:4c:9c:98:db:fa:17:
                    64:b2:a3:37:8d:eb:9a:96:40:e0:76:93:6f:87:91:
                    ff:36:f1:90:26:e1:59:34:fe:1f:56:ac:30:3c:bf:
                    8d:bd:60:88:ee:fa:e9:4e:3c:83:98:f5:06:a7:73:
                    be:e3:34:3e:74:55:04:14:44:73:aa:c9:76:fb:ed:
                    86:8e:40:94:14:85:b0:94:5e:96:db:e4:0c:8e:4f:
                    69:4b:a7:a1:d4:d6:a9:d0:86:8b:41:df:85:82:fa:
                    b5:f8:bb:3c:35:17:57:c5:a9:a8:a0:d7:87:1c:5b:
                    11:16:54:e0:51:2f:de:f8:49:fa:bd:aa:98:21:7d:
                    92:91:1b:10:ee:c0:5a:7e:46:33:d8:dc:6c:48:50:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:1F:46:1C:B9:00:41:F6:F5:DD:84:9E:5D:D6:46:4F:5D:18:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0272769F9311F1AC5899B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.18.0/24
                  154.196.22.0/24
                  154.196.25.0-154.196.28.255
                  154.196.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:ae:77:d3:3a:55:67:00:b3:2c:fc:6c:94:ce:2c:61:06:
         94:d0:99:52:20:2b:63:45:5c:c3:5b:60:21:ec:62:ca:57:7b:
         93:bd:53:07:f0:55:cf:99:1b:7d:3c:b5:d5:33:f3:9d:6a:80:
         dc:dc:c2:4e:98:f5:13:24:1a:fd:f3:96:2a:4a:6f:b0:36:4a:
         79:25:ad:27:c0:c8:a7:cd:4f:46:f9:7d:71:26:d6:18:ff:2e:
         5e:3a:7b:a8:c1:6c:88:fa:5e:e1:cb:98:93:a9:3d:89:be:c4:
         ce:98:21:6c:95:1c:c6:e9:9b:67:ff:cd:00:1f:86:10:66:53:
         66:0b:59:2c:9a:6e:37:fc:cd:1a:c0:8d:7a:b2:83:ac:e1:4f:
         07:c6:d3:22:75:2a:11:95:d8:11:4c:d0:96:6c:b1:76:7c:f8:
         06:a7:aa:58:07:c3:8c:b3:ea:c2:96:ae:19:82:53:de:09:e5:
         48:5b:d7:5e:43:ec:d5:c7:56:ac:6d:69:3d:0b:59:0c:68:5e:
         13:22:e7:55:df:7d:73:b0:21:e1:21:83:aa:f6:15:cd:c2:5d:
         5f:81:e7:6c:ba:fa:2d:43:1d:36:79:93:1e:98:5c:b0:7a:25:
         cb:67:6b:54:a0:4c:eb:ba:12:5a:39:39:42:0a:8e:50:92:21:
         87:a7:af:1a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAeIZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MDgxMjU1WhcNMjYxMDAxMDgxMjU1WjAYMRYw
FAYDVQQDEw02YThiZmQwYi0xMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0bC2bT+Qi4Lsa9ycDc1DnFECszgaU26Gtb67eWmfpC92xi4/uBm4la+i
vlWcvnoCQKfR2R6KBdDAsxjKeikwH/s3cU+xHfmJrJwqV1Jyaa0gQx9UjoWIGf6u
Gm566j+i0K9ApMZJoWtIan0wKeQnstdMnJjb+hdksqM3jeualkDgdpNvh5H/NvGQ
JuFZNP4fVqwwPL+NvWCI7vrpTjyDmPUGp3O+4zQ+dFUEFERzqsl2++2GjkCUFIWw
lF6W2+QMjk9pS6eh1Nap0IaLQd+Fgvq1+Ls8NRdXxamooNeHHFsRFlTgUS/e+En6
vaqYIX2SkRsQ7sBafkYz2NxsSFDNXQIDAQABo4ICvzCCArswHQYDVR0OBBYEFHr/
H0YcuQBB9vXdhJ5d1kZPXRg2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTAyNzI3NjlGOTMxMUYxQUM1ODk5QjJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsQSAwQAmsQWMAwDBACa
xBkDBACaxBwDBAKaxDAwDQYJKoZIhvcNAQELBQADggEBAFbhrnfTOlVnALMs/GyU
zixhBpTQmVIgK2NFXMNbYCHsYspXe5O9UwfwVc+ZG308tdUz851qgNzcwk6Y9RMk
Gv3zlipKb7A2SnklrSfAyKfNT0b5fXEm1hj/Ll46e6jBbIj6XuHLmJOpPYm+xM6Y
IWyVHMbpm2f/zQAfhhBmU2YLWSyabjf8zRrAjXqyg6zhTwfG0yJ1KhGV2BFM0JZs
sXZ8+AanqlgHw4yz6sKWrhmCU94J5Uhb115D7NXHVqxtaT0LWQxoXhMi51XffXOw
IeEhg6r2Fc3CXV+B52y6+i1DHTZ5kx6YXLB6Jctna1SgTOu6Elo5OUIKjlCSIYen
rxo=
-----END CERTIFICATE-----