Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AE01B6C2FB11F1BB4306B3CE1D38B0.roa
File:                     B5AE01B6C2FB11F1BB4306B3CE1D38B0.roa (raw, json)
Hash identifier:          AgMvWyxWcZ845USA6idrEzp/sSqrfkavQmTboobSnLQ=
Subject key identifier:   B5:1C:87:AB:12:47:E7:61:76:3A:33:64:EF:14:61:A3:D0:81:43:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AE01B6C2FB11F1BB4306B3CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 09:36:17 +0000
ROA not before:           Thu 08 Oct 2026 09:36:11 +0000
ROA not after:            Sun 15 Nov 2026 09:36:11 +0000
asID:                     135377
IP address blocks:        154.197.56.0/23 maxlen: 24
                          154.197.56.0/24 maxlen: 24
                          154.197.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126169 (0x1ecd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 09:36:11 2026 GMT
            Not After : Nov 15 09:36:11 2026 GMT
        Subject: CN=6ac76411-a22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:68:31:6c:7c:45:23:d4:92:41:20:4f:16:
                    cd:79:ed:77:db:7f:4e:3f:72:fb:a5:93:52:dd:4c:
                    24:75:1b:dc:41:26:6d:d2:89:c2:c3:d7:cc:98:e9:
                    74:10:de:29:b8:be:6d:51:d8:71:f3:f6:6b:97:d6:
                    14:3f:f7:40:30:29:3f:7e:53:0c:83:9b:60:67:b8:
                    78:f1:29:94:9e:95:78:27:c3:28:68:aa:5a:9d:22:
                    b3:5e:1b:b5:ef:ae:a0:9f:c2:c4:86:38:6a:07:0a:
                    4b:ce:d7:f3:b2:82:60:c7:6a:5f:95:99:9f:84:6b:
                    16:26:26:32:29:e5:2b:2c:81:c3:55:1a:bb:43:8e:
                    7d:58:5a:c5:54:14:bf:8c:8a:d5:35:21:13:8b:ed:
                    b0:2e:fc:38:c5:31:21:4e:0f:42:3c:3b:94:a3:eb:
                    09:45:72:29:5f:88:ad:3a:04:e8:57:13:c1:9b:c9:
                    19:3b:2d:57:1a:71:af:be:da:c9:be:d4:ae:51:a6:
                    ae:80:e7:b9:ea:0a:47:5a:29:20:29:72:e4:40:81:
                    2a:89:98:77:39:7f:6c:92:57:a9:a2:06:24:ee:02:
                    94:0c:64:b4:60:8b:3c:a0:26:10:4d:06:66:c9:1a:
                    b2:8c:e4:3b:98:c7:0c:6f:b1:3e:e1:e6:47:10:95:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:87:AB:12:47:E7:61:76:3A:33:64:EF:14:61:A3:D0:81:43:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AE01B6C2FB11F1BB4306B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:e2:e3:81:30:27:35:11:a9:72:52:1b:25:c4:85:7d:ac:5e:
         07:43:bd:80:0d:02:e7:13:8d:7a:e3:62:c5:5c:06:6b:9d:28:
         c0:0d:e2:c5:85:52:b6:05:9c:07:8a:5b:4d:fc:60:51:ae:f6:
         d2:61:20:76:d0:9b:be:28:6e:47:5d:b0:9d:4a:b7:8b:60:bc:
         32:5c:48:24:73:bd:0f:3d:8c:e6:c3:d5:68:1c:ac:02:b6:e4:
         1d:bd:6e:c9:bc:3b:f2:29:20:2e:06:67:0c:e7:e5:f8:c1:c6:
         09:9d:7a:a2:ed:a0:14:9d:88:e9:dc:06:09:9d:87:f9:af:af:
         93:a9:4f:12:29:d2:0f:6b:90:87:0b:f1:40:5a:ad:bc:75:44:
         8e:4e:65:cc:bc:3e:b2:93:b1:eb:b7:2a:04:a7:5f:58:99:f6:
         6c:5a:63:e1:9c:38:75:32:18:3f:00:14:f6:d1:db:23:f0:c2:
         5d:d1:82:8d:3d:4a:4e:30:f3:f4:cc:9d:24:b4:f6:67:f3:97:
         b6:b2:0a:b7:2c:76:cc:46:6b:07:f0:e4:ef:aa:9c:2d:61:a8:
         8f:81:b7:98:f7:c8:af:7f:b2:a7:5b:39:b8:57:1d:75:fd:5c:
         fa:e7:5c:0d:b3:97:8d:76:d1:53:5b:69:e8:57:ec:8b:b1:5d:
         d6:19:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----