Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73AC4E8C21A11F1BBA09AE2CE1D38B0.roa
File:                     A73AC4E8C21A11F1BBA09AE2CE1D38B0.roa (raw, json)
Hash identifier:          Nb50grLNGD0lm5ZIkKjhymcK98oH7wt9nKJyhS7sBpY=
Subject key identifier:   AD:7F:03:35:10:58:9E:EE:56:54:F9:35:83:FC:6D:43:E2:1C:81:32
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73AC4E8C21A11F1BBA09AE2CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 06:45:16 +0000
ROA not before:           Wed 07 Oct 2026 06:45:11 +0000
ROA not after:            Thu 14 Oct 2027 06:45:11 +0000
asID:                     133847
IP address blocks:        154.83.112.0/20 maxlen: 24
                          154.83.119.0/24 maxlen: 24
                          154.83.120.0/24 maxlen: 24
                          154.83.121.0/24 maxlen: 24
                          154.83.122.0/24 maxlen: 24
                          154.83.123.0/24 maxlen: 24
                          154.83.124.0/24 maxlen: 24
                          154.83.125.0/24 maxlen: 24
                          154.83.126.0/24 maxlen: 24
                          154.83.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126112 (0x1eca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 06:45:11 2026 GMT
            Not After : Oct 14 06:45:11 2027 GMT
        Subject: CN=6ac5ea7c-81fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:5f:1b:0c:db:19:d7:81:a6:e1:7f:09:13:
                    e0:87:f4:bf:2d:ae:de:e9:bd:48:e2:82:ce:d6:88:
                    65:1b:d6:86:af:8e:b3:53:72:c1:4a:79:c8:33:41:
                    20:e1:d8:04:e5:67:9d:c7:2e:1c:a3:48:f9:ca:7d:
                    6b:b6:09:9e:eb:a0:65:38:24:68:c0:d5:1a:b7:ef:
                    48:06:86:0f:af:86:55:f0:fc:96:ee:8f:c7:ad:80:
                    1a:6f:a4:e8:bf:b0:57:87:67:c7:b0:72:cd:9d:8f:
                    b1:c5:f7:c5:15:7c:7e:26:4e:ec:c0:0b:fd:06:26:
                    ea:04:e7:21:0f:1d:47:10:a7:14:1a:be:24:c0:5d:
                    f2:0c:fc:02:37:8b:73:87:a8:9a:c3:4e:b6:1b:9a:
                    20:2d:23:f3:07:84:be:a2:90:ff:16:7a:a7:9c:29:
                    e3:70:1e:52:16:35:b4:ef:9a:4a:ce:91:82:e8:5c:
                    a4:4c:b9:60:83:12:e6:d1:c5:01:bf:80:d4:f2:5e:
                    db:7a:77:ce:71:e7:f5:14:94:a2:6f:f0:7e:65:a9:
                    48:fd:e1:21:12:4d:aa:38:d9:51:55:ca:b9:56:d0:
                    ce:be:85:44:3e:3d:8d:0f:38:1a:82:6a:1b:9a:ed:
                    88:38:ab:c6:c0:d6:6f:d9:ac:e3:31:fc:2e:7d:e8:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:03:35:10:58:9E:EE:56:54:F9:35:83:FC:6D:43:E2:1C:81:32
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73AC4E8C21A11F1BBA09AE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:5e:65:2d:49:44:72:28:1a:35:46:dc:99:01:fb:9f:df:
         38:31:34:e2:a7:fe:20:04:70:24:aa:d6:a9:b7:81:dc:ee:b0:
         08:8f:ae:07:6c:a4:82:5a:ee:b0:54:6d:0c:5b:35:96:8f:f4:
         31:1b:6f:7e:30:32:aa:37:c0:9b:b4:16:c9:52:1b:85:aa:6a:
         69:76:ee:ac:c4:78:12:0a:bb:df:aa:f5:af:10:ca:64:e3:dd:
         c2:98:2a:bb:c9:75:57:ba:c1:20:bb:81:91:de:01:01:a1:97:
         45:ec:f6:28:b0:ae:b1:b1:4c:af:2e:05:b0:37:35:4a:b1:8f:
         66:39:d0:34:dc:e1:c0:0f:5d:5b:66:cc:d8:60:ad:57:d1:2b:
         f7:5f:f0:37:52:16:68:07:ad:bb:a8:e2:53:94:2e:a9:55:94:
         5f:23:eb:a8:f2:2a:74:e6:00:f1:ae:b4:f3:ef:5c:6b:0a:74:
         1e:e0:44:75:20:16:87:cb:bf:99:da:08:51:59:34:de:18:cd:
         38:3b:fd:74:b7:fa:e8:94:d4:05:f7:50:39:5a:8a:45:a2:f8:
         f7:9c:bc:c6:60:d3:e6:7b:6c:c7:2c:de:0a:2d:dd:dc:45:7e:
         6a:3f:b2:4c:a3:ab:fa:eb:ae:1a:41:37:ae:eb:b9:7f:8d:c0:
         8b:3a:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----