Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F2AC88C6CD11F1BDF9A8A2CE1D38B0.roa
File:                     A0F2AC88C6CD11F1BDF9A8A2CE1D38B0.roa (raw, json)
Hash identifier:          RKuCHm4RolTgqDI0a2tOeGWemlr6iP1vjhvz66pslnw=
Subject key identifier:   69:31:FB:A0:9E:41:21:02:75:8C:35:27:E4:C2:4E:41:32:2C:0B:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F2AC88C6CD11F1BDF9A8A2CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 06:16:30 +0000
ROA not before:           Tue 13 Oct 2026 06:16:24 +0000
ROA not after:            Sun 28 Mar 2027 06:16:24 +0000
asID:                     26617
IP address blocks:        154.202.6.0/24 maxlen: 24
                          154.202.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126396 (0x1edbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 06:16:24 2026 GMT
            Not After : Mar 28 06:16:24 2027 GMT
        Subject: CN=6acdccbe-4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:a4:0f:a1:0e:42:ad:ce:ba:01:c5:e9:04:
                    48:76:ef:8c:a3:14:db:83:e7:2f:59:5b:67:2d:e9:
                    2c:fc:a4:e9:f1:6f:ca:ae:20:5b:d7:ab:7c:68:23:
                    4f:bf:70:e4:10:1c:4b:34:88:12:d3:ef:cd:b5:fa:
                    59:4a:a5:d7:7b:82:0d:7e:8a:e9:00:24:cc:ac:ae:
                    ea:e3:cb:5a:af:bc:c1:b3:63:ce:aa:b4:d4:74:5a:
                    a2:93:fc:be:2d:f7:e9:c0:36:30:7b:32:79:2b:72:
                    5a:83:cb:85:73:70:ce:c0:b4:17:63:61:ec:f1:ab:
                    01:ba:b0:0c:9a:b7:ee:90:9b:84:79:bb:f8:9b:81:
                    a0:f8:81:2f:d9:5c:7c:08:40:98:1a:7f:0a:e8:79:
                    3f:d7:2a:f1:94:67:09:01:59:ab:00:60:80:57:45:
                    d4:bd:35:b3:15:87:47:c4:4c:5e:73:cc:ca:c9:75:
                    28:a3:8e:b4:03:bd:f1:ce:d2:57:40:27:80:8c:58:
                    10:88:69:4b:71:e1:7e:e4:1c:aa:ea:14:d6:7c:bd:
                    e4:f0:91:2b:7d:bd:fb:40:11:7d:ce:b0:d3:9c:9b:
                    17:0c:d6:46:56:b4:1c:80:f5:9c:aa:f9:32:b5:3a:
                    62:5e:9c:95:01:59:d3:68:45:d2:d9:2c:48:4c:2d:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:31:FB:A0:9E:41:21:02:75:8C:35:27:E4:C2:4E:41:32:2C:0B:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F2AC88C6CD11F1BDF9A8A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:4a:1c:62:ed:1a:69:1e:d4:c7:37:76:4d:d4:72:9d:6d:
         23:89:7b:1a:d8:50:cc:9a:16:6c:77:02:8c:0c:c2:de:51:96:
         fa:48:2b:a2:eb:6a:c8:65:d3:19:0e:00:fb:ac:a6:8d:58:f8:
         e3:2c:32:8a:c8:44:b7:73:d6:a6:32:90:fa:c1:69:82:a7:69:
         92:0a:ee:c4:ec:63:07:53:4b:c7:0f:77:6d:4f:90:92:b1:a1:
         71:6f:f8:0d:79:4e:69:52:b0:e7:c6:ed:fc:31:24:1c:4f:4d:
         71:cf:ee:ac:f0:da:27:ea:44:ae:43:ca:b4:89:a7:28:7b:87:
         5d:0c:a6:8a:f8:f6:1d:94:ff:9e:a8:5a:15:14:71:2b:46:48:
         99:c0:9d:c2:da:2b:05:04:a9:8a:25:50:1f:02:2e:5a:71:8d:
         41:db:8b:c3:60:49:77:f3:cf:4d:ec:0f:cd:f9:dc:21:67:fe:
         e4:89:31:58:f1:0c:d3:0a:a2:15:e7:31:b6:6b:83:e7:c2:1e:
         10:56:ba:c6:12:1d:da:48:20:97:23:66:8b:15:15:42:9f:a2:
         a4:c9:af:0c:34:82:35:df:5a:7c:9e:58:83:cf:17:67:96:a3:
         34:69:be:14:d3:83:ad:db:8f:5e:8c:e9:54:2a:79:32:9b:d1:
         e2:62:76:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe28MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDEzMDYxNjI0WhcNMjcwMzI4MDYxNjI0WjAYMRYw
FAYDVQQDEw02YWNkY2NiZS00YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuZGkD6EOQq3OugHF6QRIdu+MoxTbg+cvWVtnLeks/KTp8W/KriBb16t8
aCNPv3DkEBxLNIgS0+/NtfpZSqXXe4INforpACTMrK7q48tar7zBs2POqrTUdFqi
k/y+LffpwDYwezJ5K3Jag8uFc3DOwLQXY2Hs8asBurAMmrfukJuEebv4m4Gg+IEv
2Vx8CECYGn8K6Hk/1yrxlGcJAVmrAGCAV0XUvTWzFYdHxExec8zKyXUoo460A73x
ztJXQCeAjFgQiGlLceF+5Byq6hTWfL3k8JErfb37QBF9zrDTnJsXDNZGVrQcgPWc
qvkytTpiXpyVAVnTaEXS2SxITC1GUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGkx
+6CeQSECdYw1J+TCTkEyLAsKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEYyQUM4OEM2Q0QxMUYxQkRGOUE4QTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsoGMA0GCSqGSIb3DQEB
CwUAA4IBAQA/bkocYu0aaR7Uxzd2TdRynW0jiXsa2FDMmhZsdwKMDMLeUZb6SCui
62rIZdMZDgD7rKaNWPjjLDKKyES3c9amMpD6wWmCp2mSCu7E7GMHU0vHD3dtT5CS
saFxb/gNeU5pUrDnxu38MSQcT01xz+6s8Non6kSuQ8q0iacoe4ddDKaK+PYdlP+e
qFoVFHErRkiZwJ3C2isFBKmKJVAfAi5acY1B24vDYEl3889N7A/N+dwhZ/7kiTFY
8QzTCqIV5zG2a4Pnwh4QVrrGEh3aSCCXI2aLFRVCn6Kkya8MNII131p8nliDzxdn
lqM0ab4U04Ot249ejOlUKnkym9HiYnY3
-----END CERTIFICATE-----