Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A591919ECC6A11F1830CD2BCCE1D38B0.roa
File:                     A591919ECC6A11F1830CD2BCCE1D38B0.roa (raw, json)
Hash identifier:          fhJRs9z1ykXm/G3pCQAC+E5S7h7e1RVz7Z2bjyEfrx4=
Subject key identifier:   50:F7:09:A6:EB:54:04:C4:C6:14:69:00:A7:09:B1:DC:6B:45:3B:41
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EF3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A591919ECC6A11F1830CD2BCCE1D38B0.roa
Signing time:             Tue 20 Oct 2026 09:43:05 +0000
ROA not before:           Tue 20 Oct 2026 09:42:59 +0000
ROA not after:            Tue 17 Nov 2026 09:42:59 +0000
asID:                     153671
IP address blocks:        154.81.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126783 (0x1ef3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 09:42:59 2026 GMT
            Not After : Nov 17 09:42:59 2026 GMT
        Subject: CN=6ad737a8-29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:1a:85:cb:ba:82:d9:06:b7:e0:b7:35:dc:
                    ec:fe:24:a3:e4:1b:df:9b:89:b3:e4:53:64:f2:fa:
                    87:b4:54:ae:a8:6b:f8:e3:fc:5c:e5:bf:2b:4a:53:
                    3a:1c:c0:0e:7c:56:26:14:88:91:ab:a8:be:be:3f:
                    50:27:b7:f6:38:c4:74:19:78:38:18:5d:e2:e6:86:
                    08:28:f8:eb:06:0d:19:a7:d0:94:36:13:53:d5:f5:
                    92:0f:a7:87:59:1d:16:ad:51:7e:08:48:79:c2:cb:
                    06:f9:5c:5c:e2:8c:58:01:ec:e6:c4:c2:a1:e8:51:
                    49:52:78:a8:c0:7b:17:6e:e9:2a:46:34:cc:ff:1b:
                    f7:87:dd:6a:c4:fe:7f:f5:6e:ac:60:f0:cf:32:5c:
                    58:30:c4:c4:65:a9:26:3d:46:2d:8d:0b:62:49:45:
                    37:36:2f:82:0b:7f:e2:2f:ce:c5:2f:75:d3:c2:50:
                    51:aa:46:09:24:00:d9:32:dc:91:77:52:88:46:24:
                    6f:2c:a2:3e:eb:3d:55:ad:7e:5e:1f:c9:3c:8c:58:
                    da:8e:18:3e:36:35:6a:fe:ec:f3:a8:b4:82:46:51:
                    9b:ee:8d:12:76:3b:cf:02:9a:fd:2d:77:fe:a8:cb:
                    69:95:1e:33:fc:8a:ae:0a:9d:b2:54:85:29:ec:7d:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F7:09:A6:EB:54:04:C4:C6:14:69:00:A7:09:B1:DC:6B:45:3B:41
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A591919ECC6A11F1830CD2BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:92:ff:bc:c9:a4:54:99:91:23:7a:1a:73:30:d2:27:7b:71:
         07:cd:1d:2d:f4:8f:b2:ad:af:50:58:bc:08:90:91:8e:d7:38:
         15:71:a8:ff:0f:3f:06:13:80:1c:0f:92:11:68:6b:2f:c5:77:
         8b:0d:fc:a9:ab:d0:4b:08:2d:99:77:dc:a9:cd:d5:68:7c:db:
         c8:f2:17:4f:e0:12:dd:5a:a0:d0:e6:c7:45:80:0f:eb:9b:56:
         16:86:0c:53:0c:14:b5:cb:9a:7a:81:ab:bf:2e:91:53:90:7a:
         9d:9a:f7:55:3b:7f:54:94:3d:e2:e2:9f:7a:ba:f4:e0:58:fc:
         08:02:06:2e:7b:a9:1b:7a:6a:f5:fd:6a:c8:0d:ca:9f:02:80:
         c1:26:95:48:54:83:96:cd:aa:03:8f:15:f7:32:09:f8:c6:25:
         32:ab:2d:da:e5:bf:bb:a2:3b:5b:d5:d2:80:9c:84:60:1a:d9:
         fb:50:f1:65:8b:f7:06:77:69:28:00:85:35:a0:b4:60:73:11:
         1f:4e:ec:e7:90:fe:86:af:77:2f:71:8f:12:c8:1e:2a:c7:5d:
         7f:67:3a:7e:e3:5f:2b:4a:33:b1:8e:7c:26:6d:2d:5e:ae:f5:
         6b:b9:09:4b:18:67:88:ed:47:96:a8:f5:e7:39:81:4b:a9:cf:
         f9:e2:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----