Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5CFF8B58811F1B2F3F7DCCE1D38B0.roa
File:                     C7C5CFF8B58811F1B2F3F7DCCE1D38B0.roa (raw, json)
Hash identifier:          ndJBz1CysbUVJMOFTKYmFyQASehP8bKVXHvz+vjiC+s=
Subject key identifier:   0C:63:56:AA:50:DF:88:3E:35:D3:B3:9B:47:B5:2C:CD:B0:FD:7B:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E972
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5CFF8B58811F1B2F3F7DCCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:50:50 +0000
ROA not before:           Mon 21 Sep 2026 06:50:46 +0000
ROA not after:            Mon 28 Sep 2026 06:50:46 +0000
asID:                     209242
IP address blocks:        154.218.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125298 (0x1e972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 06:50:46 2026 GMT
            Not After : Sep 28 06:50:46 2026 GMT
        Subject: CN=6ab0d3ca-27b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:26:20:ee:d4:8b:6a:8a:9b:12:b8:39:82:
                    5e:62:0f:51:e6:b3:f5:a1:62:fa:86:53:f7:c4:84:
                    ea:6f:57:0b:e5:4b:ec:0b:ba:eb:58:f7:b3:a8:31:
                    aa:42:97:b9:04:44:2d:d8:7c:83:07:87:62:03:01:
                    51:92:ee:78:d0:83:8a:2a:94:f8:50:54:f6:df:04:
                    ac:d4:3c:25:7a:5b:74:5b:26:83:ea:55:5e:c9:3c:
                    be:39:32:31:01:92:79:52:12:44:93:d4:40:93:b3:
                    5b:6b:a6:f1:ec:39:8f:45:bd:52:3a:d5:5f:7c:32:
                    61:80:3a:c4:c3:78:1b:84:1c:52:b3:d7:e3:6c:99:
                    0b:5f:c1:f7:07:6a:c2:41:d1:f0:56:c9:ae:11:cd:
                    52:71:3b:20:c5:2d:34:51:14:13:c7:bb:c3:74:97:
                    13:a0:23:03:e6:7f:eb:f5:e2:56:e4:6e:46:d4:77:
                    dc:f9:28:6a:bb:41:7c:08:9b:f4:18:f5:2a:98:06:
                    46:b6:50:29:8b:74:b4:22:52:56:4f:70:c4:17:a5:
                    a2:6b:ae:67:8a:e4:a7:0f:c7:7c:5e:39:bf:69:75:
                    50:0e:2a:ec:19:d0:e8:93:6c:83:e2:74:89:2f:15:
                    d7:40:be:93:43:5c:e6:49:f0:ac:5a:6a:d0:9e:4b:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:63:56:AA:50:DF:88:3E:35:D3:B3:9B:47:B5:2C:CD:B0:FD:7B:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5CFF8B58811F1B2F3F7DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:d7:27:ea:56:d1:85:d5:c2:66:52:12:b3:8a:27:f0:d7:
         c1:8b:af:89:1c:8b:81:56:b9:1c:3e:f3:81:30:d9:4f:e0:bf:
         c8:29:69:9c:dc:68:ec:f3:60:85:69:f1:94:3e:be:42:3b:0a:
         40:c3:bb:df:fd:b1:c0:00:c4:70:bf:a7:98:97:a5:68:9f:5a:
         cf:b7:29:de:fc:05:83:f1:69:fa:be:dc:d3:96:d9:76:7b:33:
         c1:37:5a:21:84:41:8b:ae:e1:49:62:8f:59:dd:82:e2:8f:d8:
         41:34:eb:6f:5c:94:20:0b:78:d1:a5:96:54:17:9d:8a:a6:5a:
         b1:9f:47:db:20:c7:6b:80:c5:cf:37:c0:62:06:80:58:eb:2d:
         eb:c4:37:92:e9:cc:2c:a0:c4:a7:e3:51:24:ef:b8:08:31:93:
         1a:68:66:7d:33:51:91:a4:1e:73:69:f0:24:ed:60:51:73:9b:
         de:c9:0c:c8:0d:5b:69:39:bc:20:09:fa:d8:0c:18:2a:f0:46:
         80:e8:70:7f:dd:73:c6:92:1e:01:90:92:91:36:c5:08:b4:c2:
         9e:b1:0b:6d:1a:57:61:2a:dd:e8:b2:0c:a9:b2:45:2b:02:83:
         8c:11:e9:5e:4e:99:ef:e7:00:99:4e:83:87:7c:5f:ac:1e:d0:
         61:1e:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----