Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75F3EC4C20311F18E85D4C4CE1D38B0.roa
File:                     B75F3EC4C20311F18E85D4C4CE1D38B0.roa (raw, json)
Hash identifier:          BTUn5MWm4oNyIjOiCfxA/Gsd2GVxyJdy0SRKegV7YaQ=
Subject key identifier:   8B:CD:5C:9E:BB:04:47:D0:12:36:F5:EE:A3:E7:10:21:6C:81:2B:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75F3EC4C20311F18E85D4C4CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 04:01:04 +0000
ROA not before:           Wed 07 Oct 2026 04:00:59 +0000
ROA not after:            Sun 15 Nov 2026 04:00:59 +0000
asID:                     401650
IP address blocks:        154.90.64.0/24 maxlen: 24
                          154.90.68.0/24 maxlen: 24
                          154.90.76.0/24 maxlen: 24
                          154.90.77.0/24 maxlen: 24
                          154.90.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126100 (0x1ec94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 04:00:59 2026 GMT
            Not After : Nov 15 04:00:59 2026 GMT
        Subject: CN=6ac5c400-d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:a3:00:ef:2c:ff:7a:82:19:97:b2:02:9b:
                    53:09:68:83:d6:57:ea:c7:c8:e8:25:ab:a1:e9:80:
                    f7:2d:d9:0c:6e:15:dd:5d:fa:e2:de:ed:c1:95:14:
                    0e:28:62:47:23:e9:ba:dc:a2:52:a1:18:6b:a6:82:
                    38:01:4c:e0:f1:4c:33:69:92:fc:6c:ab:d8:0c:8c:
                    f4:1d:a0:62:e4:f2:b5:22:6a:cf:69:e5:98:39:42:
                    b5:91:49:29:34:3d:c4:ba:bd:4b:23:6e:d4:d5:89:
                    10:5f:e5:36:48:25:3d:b8:b7:31:cb:35:85:e8:f8:
                    06:9b:2d:b8:62:cf:db:27:68:eb:81:ad:3c:b3:b3:
                    3c:cd:55:14:3d:d0:c4:a4:df:9a:8a:08:98:67:02:
                    b5:3f:f2:b5:c1:92:7b:ae:ec:b8:2b:be:29:da:74:
                    ce:e4:e9:7a:3b:75:fc:77:82:25:46:bb:f5:5a:e9:
                    1c:a7:20:35:cd:3c:87:a2:3d:5f:21:2a:69:d0:9d:
                    ee:fb:a5:4d:28:16:0f:4f:a3:88:19:37:20:ad:73:
                    ce:23:ad:b4:65:bb:8a:91:95:6a:62:68:a1:4b:29:
                    1c:ef:06:5e:8c:a1:8a:e7:22:fd:91:45:ec:3a:e5:
                    7b:d5:3d:55:30:68:73:39:66:1e:ff:7e:a8:b1:fb:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CD:5C:9E:BB:04:47:D0:12:36:F5:EE:A3:E7:10:21:6C:81:2B:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75F3EC4C20311F18E85D4C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.64.0/24
                  154.90.68.0/24
                  154.90.76.0-154.90.78.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:54:37:30:8c:13:80:13:2a:51:1e:74:90:b7:54:d4:e3:
         e0:e6:09:a9:94:da:11:47:d7:85:f5:a7:61:44:9a:bb:48:4c:
         d3:1b:a9:50:75:9c:af:51:4f:fb:a1:15:b3:60:a6:80:83:17:
         70:6f:d7:a4:18:30:22:8a:63:0f:f7:e5:48:aa:d0:b5:e3:5c:
         b2:f5:42:1c:7f:bf:00:f1:bb:49:18:83:1a:fc:a3:2e:33:50:
         de:08:11:34:ab:e5:7c:74:6f:d0:1a:b1:e3:90:70:c2:ce:94:
         e2:28:e0:1f:85:19:ff:dd:ef:f7:f6:8a:6e:9a:9c:15:9d:f4:
         39:b0:5e:03:8f:f3:69:35:84:d5:a5:4b:8a:a3:18:ca:61:81:
         15:8c:86:07:40:b3:24:cd:92:c2:89:ae:d5:f0:00:09:d9:0c:
         65:f1:c5:bc:9e:ad:03:a4:38:01:e7:0f:e7:77:8d:5d:08:08:
         1e:ad:10:68:7d:3c:3c:51:ab:c5:8b:ef:26:1e:ba:72:d3:4a:
         13:fd:d6:81:07:e4:68:4d:21:35:e0:5c:61:7c:13:0c:f0:ef:
         a7:90:3a:c9:ce:fd:87:d9:54:cb:5c:a7:26:5d:c1:99:1e:82:
         40:73:f8:2c:af:9b:50:ce:b5:56:69:55:bb:37:e6:1c:41:aa:
         e9:8b:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----