Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B10E76C3B111F195185CD7CE1D38B0.roa
File:                     C5B10E76C3B111F195185CD7CE1D38B0.roa (raw, json)
Hash identifier:          dadXBvd+0gz/TWXm+ku9uRXkcxN+rp0wKGyzASO3Wa4=
Subject key identifier:   B5:CA:0A:6E:DD:29:29:79:92:27:21:66:0B:69:32:13:0A:99:31:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B10E76C3B111F195185CD7CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:19:32 +0000
ROA not before:           Fri 09 Oct 2026 07:19:28 +0000
ROA not after:            Thu 05 Nov 2026 07:19:28 +0000
asID:                     274964
IP address blocks:        154.88.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126198 (0x1ecf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 07:19:28 2026 GMT
            Not After : Nov  5 07:19:28 2026 GMT
        Subject: CN=6ac89584-c7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:3e:b9:bb:e0:71:a0:8b:27:f2:12:fd:30:
                    df:eb:46:5f:eb:6b:9a:c6:ab:a0:15:a8:27:4c:fb:
                    cf:f9:85:b0:1c:05:10:cc:fc:63:50:2a:91:c5:ad:
                    cb:78:46:29:52:b9:69:dc:ea:d9:26:00:55:97:9d:
                    ad:76:8c:a2:71:f0:3b:fa:1f:6d:27:15:51:d5:77:
                    4c:e0:a6:a7:d4:29:70:69:c9:09:cd:df:34:01:9a:
                    be:c6:93:7d:11:36:48:65:78:ff:7e:1f:bf:60:0a:
                    0e:e5:25:79:3a:ca:6e:d9:53:19:e3:82:3b:31:cd:
                    d5:d8:b8:ce:d7:8f:49:27:49:84:62:73:37:80:a4:
                    65:54:e0:62:52:bc:1c:0b:b9:d4:51:08:3e:b5:1f:
                    34:01:02:dc:2e:69:e1:28:9b:3c:3b:17:9c:fb:76:
                    63:2e:94:cc:c0:04:5c:2c:a7:b3:6d:55:6f:68:af:
                    e3:a8:da:89:b5:61:d9:7d:db:83:59:8b:ea:1d:65:
                    62:83:82:78:e4:74:a9:34:e1:bf:ab:fb:ae:b1:71:
                    f1:99:ab:77:0a:15:24:09:e1:f8:7f:3d:6e:bf:d7:
                    f7:92:67:71:60:5c:38:7c:b3:4a:e2:ed:03:20:a7:
                    87:79:20:03:f4:83:dd:8e:c5:ae:70:4d:84:a5:96:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:0A:6E:DD:29:29:79:92:27:21:66:0B:69:32:13:0A:99:31:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B10E76C3B111F195185CD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:37:8e:3a:1f:5d:9a:61:8f:bb:f2:7b:b8:60:2f:5c:4d:
         45:25:1d:be:23:a9:7a:3c:ad:76:8d:58:74:a4:86:8a:3f:02:
         ee:87:b0:2c:32:51:93:5e:98:60:91:f0:1a:c8:05:b7:70:50:
         99:7b:1c:ef:b7:14:b8:a6:18:f5:c7:ec:45:39:f5:c9:63:de:
         f3:2c:eb:0e:06:bf:51:63:42:96:10:27:16:38:73:77:96:f2:
         41:31:a9:73:1e:97:6e:50:cc:d3:02:7b:e4:a3:76:d7:7e:9c:
         2d:38:96:1d:5c:6f:f8:dc:70:a5:d3:86:35:82:52:4f:85:55:
         9c:52:73:45:52:b2:92:1a:dc:0a:e2:f9:53:e8:cc:f7:54:da:
         f3:7f:59:1d:2c:86:25:8a:39:b7:50:0c:a7:22:99:b9:f4:69:
         57:fb:d3:50:2b:5e:8e:46:da:c8:3e:47:e4:74:fa:23:cb:66:
         3f:de:61:2c:d0:4b:43:95:ee:f5:50:51:c5:67:f6:d8:53:b4:
         23:c7:4c:4d:ff:23:f4:e2:65:21:e6:64:ab:3b:03:b8:b8:12:
         58:7a:dc:45:5d:c1:33:1c:87:f2:af:f2:17:99:e1:6d:cc:01:
         9c:d8:e1:15:eb:86:30:61:12:38:84:b3:6b:44:71:94:69:a9:
         c1:dd:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----