Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C315EBC4B8B611F1B0D4AA1BCF1D38B0.roa
File:                     C315EBC4B8B611F1B0D4AA1BCF1D38B0.roa (raw, json)
Hash identifier:          hWDnDrlyacbAS6EJ+WmUWOzo81/wL6ohovhXMEwb6qI=
Subject key identifier:   29:06:3E:D2:2C:F5:71:9A:50:65:47:35:E9:06:4B:A1:1E:59:22:C2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C315EBC4B8B611F1B0D4AA1BCF1D38B0.roa
Signing time:             Fri 25 Sep 2026 07:57:32 +0000
ROA not before:           Fri 25 Sep 2026 07:57:28 +0000
ROA not after:            Sat 31 Oct 2026 07:57:28 +0000
asID:                     204770
IP address blocks:        154.194.204.0/24 maxlen: 24
                          154.194.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125632 (0x1eac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 25 07:57:28 2026 GMT
            Not After : Oct 31 07:57:28 2026 GMT
        Subject: CN=6ab6296c-282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:cb:e6:3d:0d:82:7b:db:a6:b5:de:89:08:
                    15:74:fa:c2:e4:3c:32:ed:95:6c:88:fc:37:80:f7:
                    d7:c1:6a:f1:fe:17:61:6f:ad:0d:0a:d9:2b:42:57:
                    17:db:24:63:88:76:8d:47:2f:95:61:4f:e4:bc:51:
                    bf:22:04:01:83:6b:80:77:4d:dc:40:8f:32:0e:c5:
                    8e:6c:56:cb:c2:9b:b4:53:2a:35:a2:37:1c:ed:9f:
                    0b:54:b4:19:37:b8:b3:93:c8:bc:55:61:3b:03:f1:
                    d5:0a:d1:8b:47:a0:ad:00:84:24:66:cf:4f:27:65:
                    38:e7:a2:b9:af:04:10:dd:ac:38:e6:74:ad:90:da:
                    ec:24:df:e1:3d:29:86:ca:d8:d5:7a:8b:93:e4:2e:
                    05:31:ea:99:0d:ac:82:4d:ca:8d:3e:b5:fa:4a:f1:
                    16:eb:63:c8:8b:b2:28:58:ce:8e:cf:1c:6d:fd:50:
                    f6:7d:da:c1:17:af:43:da:bf:5e:6e:9e:7a:72:f4:
                    a9:73:04:ba:6f:fe:e0:2d:9d:40:fd:c3:a1:d0:e4:
                    e1:90:17:2d:98:19:4e:b3:ba:70:0b:d6:bd:a1:a2:
                    05:91:d7:83:7b:37:3e:5c:16:2d:15:05:17:51:45:
                    f4:ad:0a:ca:2e:fd:80:85:92:88:f3:c6:e6:2e:30:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:06:3E:D2:2C:F5:71:9A:50:65:47:35:E9:06:4B:A1:1E:59:22:C2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C315EBC4B8B611F1B0D4AA1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:29:83:e4:3c:10:44:86:ee:de:99:46:91:85:be:65:ed:6d:
         fc:39:9d:22:cb:9f:15:6d:8f:f2:f3:5e:18:61:b4:8e:48:72:
         a0:64:cb:70:dd:4c:6c:55:c0:c7:25:07:3b:60:35:a2:f1:8f:
         54:1a:58:9f:b3:ec:81:3c:b1:64:47:94:dc:d2:7b:ec:5c:40:
         05:2c:60:37:3c:58:a7:de:d9:dd:15:a8:f8:29:be:2b:72:f5:
         58:ce:eb:71:3d:47:1c:73:77:c6:02:24:1d:ba:35:a4:db:d8:
         0e:38:1c:9a:77:36:05:18:06:fa:ba:ef:6e:c6:a4:63:16:0d:
         08:7b:3e:e3:7c:b6:1e:d7:e7:88:e7:3b:26:30:10:af:b2:0d:
         8b:bb:f6:b3:a4:cb:90:72:d2:5a:30:81:e3:4e:fc:d5:be:b6:
         64:c8:aa:24:36:90:d5:e9:de:31:d6:a3:d1:1a:39:a9:b0:7c:
         b8:79:e8:f5:a9:72:d4:f0:cf:47:41:06:33:db:36:db:15:95:
         ba:ac:31:12:93:38:0c:5a:8d:fa:49:ed:74:71:99:8f:82:75:
         ba:f3:a4:30:55:3a:c1:fb:c4:4a:fa:b3:a4:94:c7:32:de:fe:
         6d:2c:8a:63:38:78:a2:0e:c8:33:19:1a:4a:1a:17:8c:e0:cc:
         00:87:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----