Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFF9E92A9D011F1ADFB74B5CE1D38B0.roa
File:                     CFFF9E92A9D011F1ADFB74B5CE1D38B0.roa (raw, json)
Hash identifier:          t6grs447WUoHSMjUpTppO1UL9gRAUnqCsXaJn1t/R1s=
Subject key identifier:   EB:99:18:77:E9:89:94:55:BD:82:A1:6C:79:A9:4E:96:EC:20:84:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFF9E92A9D011F1ADFB74B5CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 08:56:14 +0000
ROA not before:           Sun 06 Sep 2026 08:56:09 +0000
ROA not after:            Wed 07 Oct 2026 08:56:09 +0000
asID:                     40115
IP address blocks:        154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
                          154.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124395 (0x1e5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 08:56:09 2026 GMT
            Not After : Oct  7 08:56:09 2026 GMT
        Subject: CN=6a9d2aad-9e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:0a:e1:9c:42:4e:e3:27:00:d5:25:7b:e8:
                    c7:7c:4a:f2:6a:53:33:dc:75:3c:a7:b5:ed:e4:ba:
                    e5:7b:ac:59:d4:31:70:ac:52:d2:fd:78:f3:5d:0e:
                    b6:36:0a:af:22:0f:20:ec:8e:24:51:ae:92:6b:b7:
                    8f:dc:2d:80:7d:2b:49:d7:87:78:f8:d3:d9:38:c9:
                    40:27:e2:66:2a:7a:8b:94:a1:e9:86:96:24:7e:3e:
                    d0:55:a9:5e:d9:25:97:03:41:81:30:12:10:31:15:
                    88:a6:3e:00:84:34:5d:ab:bf:20:fb:72:b3:7c:af:
                    46:f0:e2:31:f3:d7:72:f6:dc:01:9b:5b:3f:af:e3:
                    ee:d8:6d:e9:41:b8:7b:00:48:87:e6:71:8a:06:24:
                    3f:94:7f:a4:86:6a:79:fa:24:77:a2:f5:55:bd:cd:
                    16:eb:2a:44:ce:8f:2b:ef:61:90:03:ef:d7:6d:ec:
                    5e:a9:a8:02:be:21:8d:92:26:c7:9c:a4:2c:1e:80:
                    3a:e6:d1:0c:bc:af:a6:ca:aa:ae:7a:d7:b6:24:f0:
                    31:4c:c2:09:b0:ff:25:5e:d7:1f:36:88:d1:ee:24:
                    e3:38:5b:83:2d:fe:05:a0:ec:2e:a3:10:0e:cb:ba:
                    e3:f5:53:66:81:48:5f:37:80:dc:57:92:e2:6d:1b:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:18:77:E9:89:94:55:BD:82:A1:6C:79:A9:4E:96:EC:20:84:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFF9E92A9D011F1ADFB74B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.25.0-154.86.31.255

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:5e:d8:1c:52:8f:a5:0b:b4:98:a2:3d:98:00:43:64:c9:
         ec:bd:21:8c:42:c9:25:31:43:44:e5:f3:36:38:a1:00:65:dc:
         78:ee:9d:a0:c7:ec:8f:d4:0d:23:af:09:aa:47:89:3f:16:56:
         e0:cb:43:63:16:5c:f4:80:58:47:18:ed:0f:fb:2b:95:af:a9:
         c7:42:9b:96:bd:72:4a:b2:d1:6d:f9:44:b9:08:af:86:d0:67:
         e6:4b:08:a5:97:7c:78:54:a7:d1:22:fe:2f:45:9d:b2:b1:b6:
         20:76:21:15:c0:46:c9:e8:d0:f7:2d:4b:d2:67:fe:c0:52:ab:
         ef:1a:c9:9d:3f:8a:bf:04:99:f4:88:16:1d:a6:4d:08:68:b9:
         ff:79:18:ca:cf:89:a0:e1:31:ba:c6:ee:3e:99:a1:2c:f3:99:
         8b:dd:0f:b3:3a:33:bb:d4:bc:c7:43:7a:50:64:85:02:24:91:
         dc:18:79:dd:89:2e:cf:13:5f:d3:ea:11:f1:2b:6a:e9:00:93:
         17:39:f0:53:06:4a:43:1f:8a:a5:54:5c:88:66:14:22:d1:82:
         cf:da:5f:f0:f3:86:db:84:3f:83:5b:ec:ae:e3:e4:d3:8e:4b:
         cd:70:ea:b7:01:6c:24:fc:e7:c6:b0:4f:16:d5:4e:00:d7:bf:
         78:38:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----