Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ADE432CEB411F1B316EFEDCE1D38B0.roa
File:                     E7ADE432CEB411F1B316EFEDCE1D38B0.roa (raw, json)
Hash identifier:          sNSEyyuVCmpkLGbUE03DCXUq/GAWHXp8Hn1JzecdE/Y=
Subject key identifier:   71:B0:C1:64:A5:03:6A:A8:0D:3E:96:D4:D8:21:4E:9A:88:DB:AB:6E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EF9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ADE432CEB411F1B316EFEDCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:39:40 +0000
ROA not before:           Fri 23 Oct 2026 07:39:36 +0000
ROA not after:            Mon 30 Nov 2026 07:39:36 +0000
asID:                     18013
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126876 (0x1ef9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 07:39:36 2026 GMT
            Not After : Nov 30 07:39:36 2026 GMT
        Subject: CN=6adb0f3c-0929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:ce:e2:6e:a3:fd:19:3a:4d:27:d9:a5:5e:
                    38:86:4e:d2:c8:29:3c:f0:a6:d6:a7:de:7e:6e:06:
                    78:8a:3c:67:57:4c:33:70:e7:ca:85:8d:ac:ea:6c:
                    ec:5f:a6:c7:7e:99:34:55:e9:47:bd:9f:61:d9:9d:
                    9a:5f:b3:1e:de:8f:1c:50:7c:35:dd:cb:82:7a:fc:
                    b4:ec:a4:30:35:fb:3d:ce:a4:a9:59:e4:8a:ff:09:
                    7b:ae:b2:5d:b3:6b:25:b7:c7:e6:ee:b6:01:a6:e5:
                    27:f5:ee:61:bf:b2:90:75:eb:f5:d0:5e:10:8f:b2:
                    71:cc:8e:19:55:59:5a:35:a4:59:20:04:db:ad:bb:
                    b0:b5:9e:79:6b:fa:f1:f9:14:aa:d2:17:6a:1b:73:
                    4e:94:c9:59:a9:6a:85:fa:1d:30:8b:5f:8a:f2:87:
                    13:b5:14:2a:af:78:97:7a:68:8a:6a:45:f1:26:68:
                    bd:57:09:08:bc:83:e6:c9:3b:c1:b6:5d:a5:67:ef:
                    6b:9d:bd:0c:87:c4:85:c7:19:db:93:62:1c:c0:9f:
                    6e:aa:13:62:eb:7c:d6:c4:2f:d4:a9:f4:99:75:24:
                    91:c5:f6:2c:17:b4:fa:12:af:83:2e:da:70:44:03:
                    b1:c6:7d:2f:a1:9c:f5:cd:bd:83:02:c1:8f:6c:c2:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:C1:64:A5:03:6A:A8:0D:3E:96:D4:D8:21:4E:9A:88:DB:AB:6E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ADE432CEB411F1B316EFEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d3:62:e5:be:b5:14:4a:b7:db:a5:95:aa:e5:72:a3:06:ee:81:
         be:83:0d:fc:05:30:a5:2b:0d:dd:95:c1:2c:da:27:67:55:3b:
         ee:a2:55:1e:ba:e3:53:0f:5c:b6:a6:e1:12:58:5c:39:c0:ab:
         3f:97:9e:bb:e4:9a:e0:70:c8:83:ea:ad:8d:5d:21:9e:46:5e:
         41:aa:14:33:d3:c3:82:55:07:7f:04:57:5e:ad:f0:c9:72:cf:
         35:07:7e:37:77:53:86:4d:ef:41:24:75:b5:cc:6b:09:a0:3a:
         a9:e2:9e:23:45:10:70:73:2b:6e:85:ca:03:2b:1a:03:5e:07:
         cb:a8:c6:53:5d:e7:9b:02:9c:70:b4:82:f5:31:36:26:8d:4a:
         1f:90:de:53:aa:1e:0e:77:f9:d8:cf:1e:7a:6e:c0:fb:c0:90:
         9c:52:1c:1e:0f:6a:9c:2d:1a:1e:56:bc:36:4a:80:2f:99:69:
         62:ee:95:17:20:53:41:38:6b:fc:19:95:08:f0:80:80:eb:ea:
         73:b5:d9:66:0f:83:de:cc:d1:ea:3f:5c:f9:33:8b:bc:ff:a8:
         0e:19:1f:14:8c:a0:68:0b:76:94:e1:d9:95:12:a7:30:6b:94:
         3f:05:07:25:6c:bd:0b:30:ab:ba:7c:7c:1b:b2:55:5f:2a:fb:
         37:1d:5a:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe+cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDIzMDczOTM2WhcNMjYxMTMwMDczOTM2WjAYMRYw
FAYDVQQDEw02YWRiMGYzYy0wOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAolvO4m6j/Rk6TSfZpV44hk7SyCk88KbWp95+bgZ4ijxnV0wzcOfKhY2s
6mzsX6bHfpk0VelHvZ9h2Z2aX7Me3o8cUHw13cuCevy07KQwNfs9zqSpWeSK/wl7
rrJds2slt8fm7rYBpuUn9e5hv7KQdev10F4Qj7JxzI4ZVVlaNaRZIATbrbuwtZ55
a/rx+RSq0hdqG3NOlMlZqWqF+h0wi1+K8ocTtRQqr3iXemiKakXxJmi9VwkIvIPm
yTvBtl2lZ+9rnb0Mh8SFxxnbk2IcwJ9uqhNi63zWxC/UqfSZdSSRxfYsF7T6Eq+D
LtpwRAOxxn0voZz1zb2DAsGPbMINzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHGw
wWSlA2qoDT6W1NghTpqI26tuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0FERTQzMkNFQjQxMUYxQjMxNkVGRURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQDTYuW+tRRKt9ullarlcqMG7oG+gw38BTClKw3dlcEs2idnVTvuolUe
uuNTD1y2puESWFw5wKs/l5675JrgcMiD6q2NXSGeRl5BqhQz08OCVQd/BFderfDJ
cs81B343d1OGTe9BJHW1zGsJoDqp4p4jRRBwcytuhcoDKxoDXgfLqMZTXeebApxw
tIL1MTYmjUofkN5Tqh4Od/nYzx56bsD7wJCcUhweD2qcLRoeVrw2SoAvmWli7pUX
IFNBOGv8GZUI8ICA6+pztdlmD4PezNHqP1z5M4u8/6gOGR8UjKBoC3aU4dmVEqcw
a5Q/BQclbL0LMKu6fHwbslVfKvs3HVqI
-----END CERTIFICATE-----