Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD6FC32C53711F1AE6CA4CBCE1D38B0.roa
File:                     DCD6FC32C53711F1AE6CA4CBCE1D38B0.roa (raw, json)
Hash identifier:          C+WlEKCq/dOp5j7YDTsKOPsqzlE+n5882kTrHWE/KlU=
Subject key identifier:   E3:27:D6:5C:0C:4D:8C:EA:BF:8F:D7:24:F2:3D:13:54:AF:2A:02:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD6FC32C53711F1AE6CA4CBCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:51:55 +0000
ROA not before:           Sun 11 Oct 2026 05:51:50 +0000
ROA not after:            Sun 25 Oct 2026 05:51:50 +0000
asID:                     147281
IP address blocks:        154.86.99.0/24 maxlen: 24
                          154.86.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126330 (0x1ed7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 05:51:50 2026 GMT
            Not After : Oct 25 05:51:50 2026 GMT
        Subject: CN=6acb23fb-096b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:1e:26:63:80:ce:40:56:a2:da:e8:c2:e9:
                    36:e7:14:51:b1:43:49:29:bb:45:be:34:e4:c4:6b:
                    39:fb:bc:39:6b:71:82:33:d3:c6:06:b8:74:74:16:
                    37:aa:22:cf:6a:cf:fb:5c:2b:9a:97:7d:9f:75:f2:
                    a1:9d:5f:e5:b5:5b:6a:ec:b9:ca:d9:80:71:c2:f4:
                    ff:9e:2c:92:6f:a5:37:13:a2:0b:e2:ab:47:48:b3:
                    b6:b8:28:15:04:c4:20:dd:5a:85:fa:b2:ac:0c:11:
                    12:72:c3:44:a4:5a:0a:92:85:f1:57:36:61:a7:e7:
                    04:2b:ad:50:5a:52:11:49:84:3b:4d:27:b8:40:ab:
                    ff:06:d3:8c:a9:a7:05:e6:59:6d:fd:f9:c5:0e:f2:
                    20:79:9a:5e:85:6d:94:87:28:d5:51:17:32:50:71:
                    83:ea:3a:3b:58:43:92:10:d9:d7:fe:59:2b:3f:bb:
                    26:74:43:d6:8d:2f:5f:cf:cc:c6:82:72:d1:4e:55:
                    c7:69:eb:62:ed:3e:93:00:02:e6:55:82:11:14:d5:
                    fc:40:30:31:17:91:8f:ad:5e:e2:f4:73:58:03:5b:
                    99:4b:55:ef:d5:59:ad:ff:b1:2c:8e:a9:2b:2f:c8:
                    e2:71:22:d5:0b:a2:c2:7f:1f:9d:e3:1a:c9:38:61:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:D6:5C:0C:4D:8C:EA:BF:8F:D7:24:F2:3D:13:54:AF:2A:02:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD6FC32C53711F1AE6CA4CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.99.0/24
                  154.86.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:4e:d8:56:db:c5:20:e1:88:95:93:c3:7a:b5:fd:cf:06:
         fa:92:91:3b:3b:5e:5b:c1:7d:39:01:77:ae:68:e8:a1:19:e4:
         2d:18:ea:2a:50:ea:eb:3f:ac:ad:66:bd:80:d7:26:8b:8f:09:
         da:e3:31:74:f3:a4:61:d5:fb:08:89:c9:25:00:78:d3:ee:05:
         f4:34:2e:55:b7:a7:2e:2e:ff:4e:42:ac:fb:b8:c9:b3:7d:b7:
         97:e4:90:e0:52:62:a4:7e:89:51:7c:6e:7a:3a:19:98:5f:7b:
         f6:42:89:42:79:b7:63:d6:8e:de:25:94:7b:95:29:c5:32:92:
         b7:c3:a4:30:0d:ec:ec:d0:9b:b7:99:41:33:b1:be:64:a5:f9:
         dd:a3:bb:a1:72:e0:80:23:35:5e:95:fd:eb:0c:04:23:15:f7:
         ce:b6:45:90:62:50:76:e5:98:f6:bd:50:48:ae:43:51:f6:ec:
         dc:b7:a5:59:1b:e3:29:b1:95:63:f5:35:b0:90:7e:ad:99:d4:
         f9:8c:64:6a:3f:20:eb:f3:f7:f3:1e:46:d7:b7:06:54:a3:f9:
         99:c3:e0:2f:71:dd:2a:e8:99:96:17:33:35:e3:0d:b3:2d:60:
         31:b6:3a:b4:a0:16:5f:58:99:26:3d:d9:c2:12:04:e9:3b:71:
         2e:4a:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----