Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86B78629AE211F1841D9A04CF1D38B0.roa
File:                     A86B78629AE211F1841D9A04CF1D38B0.roa (raw, json)
Hash identifier:          henHtij5jg7/Dz7VsdivX6lyT5ww3ZU7ATEUkJhw/bk=
Subject key identifier:   26:FE:7E:C8:B1:1C:03:9F:BD:10:DD:82:5D:5B:A5:55:73:B1:22:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86B78629AE211F1841D9A04CF1D38B0.roa
Signing time:             Tue 18 Aug 2026 08:56:11 +0000
ROA not before:           Tue 18 Aug 2026 08:56:07 +0000
ROA not after:            Fri 02 Oct 2026 08:56:07 +0000
asID:                     21859
IP address blocks:        154.197.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122761 (0x1df89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 18 08:56:07 2026 GMT
            Not After : Oct  2 08:56:07 2026 GMT
        Subject: CN=6a841e2b-fd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:e4:15:43:cc:0c:79:a4:e7:1a:5d:60:63:
                    1d:c4:83:91:08:97:13:dd:a0:2e:4a:11:ca:09:ff:
                    88:13:75:cc:0f:dc:d3:77:bb:e3:05:d8:dc:71:d1:
                    e6:be:b8:b3:88:f1:70:73:82:68:2d:d3:43:cf:64:
                    12:6d:a9:e3:bb:76:a5:56:c8:ad:91:cc:8b:d8:a0:
                    2d:df:38:5e:8e:0e:59:c8:1a:36:c1:20:7e:c5:46:
                    1d:2c:ca:ee:7e:8c:05:e8:1a:0b:79:51:1b:54:7f:
                    bf:c0:c1:d3:96:33:52:2e:9e:cf:ba:11:92:50:72:
                    2f:e3:c5:bb:12:d1:1e:fa:a3:0e:84:f0:b4:7b:a6:
                    80:2e:f6:da:fa:80:ed:ea:1f:85:33:a7:ed:09:fa:
                    c2:f8:d9:a8:73:8e:af:49:fc:ff:f2:c1:92:92:e1:
                    45:ff:e5:72:58:2a:a9:80:f9:50:ba:9c:3a:c3:ac:
                    1b:a6:20:2b:d7:97:35:08:37:d0:8d:23:02:b0:f5:
                    d0:c9:3e:09:1c:76:66:68:63:dd:46:a4:7a:6c:9e:
                    9b:e5:ce:d6:64:ed:cf:82:54:97:9f:71:0c:b0:bd:
                    0e:2a:1f:f7:aa:83:cf:ef:76:4e:8d:5d:e6:02:5f:
                    e0:14:6d:c8:1a:c1:4e:da:cd:dd:7d:a5:e1:cf:ce:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FE:7E:C8:B1:1C:03:9F:BD:10:DD:82:5D:5B:A5:55:73:B1:22:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86B78629AE211F1841D9A04CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:79:a8:c8:22:9d:78:b2:38:2b:3d:29:1a:db:fa:84:62:84:
         0b:53:23:31:41:5f:d5:bf:91:4b:c5:84:4e:c8:e5:b6:7a:c2:
         d3:64:68:b4:96:88:74:cf:f4:08:4a:f4:7a:0a:28:c5:0a:c1:
         3a:ae:a8:90:cc:05:bc:75:54:3f:59:c5:3b:50:df:1e:b0:e3:
         7f:1c:95:27:49:0a:4c:eb:ee:13:86:f3:53:dd:76:3c:21:cd:
         cc:42:3c:c3:52:3e:77:f4:c0:94:d2:97:b5:cf:1b:ec:51:e1:
         59:0a:d0:58:88:9c:05:50:9d:79:17:67:39:93:b8:62:fd:69:
         8f:8d:86:1e:08:57:d7:00:cb:f0:81:35:61:ab:e5:64:31:c1:
         0e:61:15:b0:4a:50:32:69:3b:53:a7:a0:a2:4d:e6:66:49:2c:
         fe:ee:62:4c:6f:16:27:9a:ed:2d:2e:2d:ef:cc:be:6f:6f:6b:
         0d:a6:7d:7d:48:01:68:88:e3:47:f2:42:96:7b:56:54:fa:9b:
         fb:79:49:ae:36:ca:9c:d9:64:e4:3d:11:da:26:d1:02:65:6a:
         ce:67:c7:2f:64:4d:18:41:be:92:b8:e8:71:5a:71:cc:be:3a:
         8e:69:79:64:a5:5d:1b:7e:32:c1:14:f5:8c:ad:5c:ef:33:c0:
         7d:ec:ee:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd+JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE4MDg1NjA3WhcNMjYxMDAyMDg1NjA3WjAYMRYw
FAYDVQQDEw02YTg0MWUyYi1mZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMHkFUPMDHmk5xpdYGMdxIORCJcT3aAuShHKCf+IE3XMD9zTd7vjBdjc
cdHmvriziPFwc4JoLdNDz2QSbanju3alVsitkcyL2KAt3zhejg5ZyBo2wSB+xUYd
LMrufowF6BoLeVEbVH+/wMHTljNSLp7PuhGSUHIv48W7EtEe+qMOhPC0e6aALvba
+oDt6h+FM6ftCfrC+Nmoc46vSfz/8sGSkuFF/+VyWCqpgPlQupw6w6wbpiAr15c1
CDfQjSMCsPXQyT4JHHZmaGPdRqR6bJ6b5c7WZO3PglSXn3EMsL0OKh/3qoPP73ZO
jV3mAl/gFG3IGsFO2s3dfaXhz86pTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCb+
fsixHAOfvRDdgl1bpVVzsSJlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BODZCNzg2MjlBRTIxMUYxODQxRDlBMDRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUtMA0GCSqGSIb3DQEB
CwUAA4IBAQCGeajIIp14sjgrPSka2/qEYoQLUyMxQV/Vv5FLxYROyOW2esLTZGi0
loh0z/QISvR6CijFCsE6rqiQzAW8dVQ/WcU7UN8esON/HJUnSQpM6+4ThvNT3XY8
Ic3MQjzDUj539MCU0pe1zxvsUeFZCtBYiJwFUJ15F2c5k7hi/WmPjYYeCFfXAMvw
gTVhq+VkMcEOYRWwSlAyaTtTp6CiTeZmSSz+7mJMbxYnmu0tLi3vzL5vb2sNpn19
SAFoiONH8kKWe1ZU+pv7eUmuNsqc2WTkPRHaJtECZWrOZ8cvZE0YQb6SuOhxWnHM
vjqOaXlkpV0bfjLBFPWMrVzvM8B97O70
-----END CERTIFICATE-----