Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA10947AC22711F1BB096DB7CE1D38B0.roa
File:                     EA10947AC22711F1BB096DB7CE1D38B0.roa (raw, json)
Hash identifier:          7KiyRTW1ApmEzUsKq51Dewqh6iSQfCWOVdjskaTsOV4=
Subject key identifier:   E7:BA:29:04:C4:6D:44:33:A6:CD:C0:C5:1D:31:D7:BB:8B:CB:5A:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA10947AC22711F1BB096DB7CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 08:20:11 +0000
ROA not before:           Wed 07 Oct 2026 08:20:07 +0000
ROA not after:            Sat 17 Oct 2026 08:20:07 +0000
asID:                     153517
IP address blocks:        154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126134 (0x1ecb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 08:20:07 2026 GMT
            Not After : Oct 17 08:20:07 2026 GMT
        Subject: CN=6ac600bb-c6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:9f:c5:47:c0:09:e3:eb:fe:f8:ee:d5:5a:
                    97:71:f6:da:7c:3d:c2:24:0c:65:2a:d8:25:27:8d:
                    c9:a3:1a:65:56:da:75:b9:50:85:27:8a:dd:4b:6b:
                    4b:10:1f:f3:d4:c5:59:50:aa:0b:34:8d:16:31:78:
                    1b:f5:1a:95:fb:8c:c2:d3:21:f3:b3:96:ce:2b:1d:
                    e8:28:64:d7:3b:e0:20:f9:81:69:21:30:ff:76:b2:
                    6f:15:53:4e:2c:c3:a9:5c:19:a4:63:20:dc:db:fd:
                    0b:c1:e9:48:6c:2e:ab:47:c7:74:fc:93:f7:21:25:
                    6a:a4:e8:4c:01:6f:5b:1c:29:b9:e6:91:c1:5b:df:
                    52:40:ae:ed:71:ed:1e:cf:04:e3:89:6f:e2:97:cf:
                    a5:dd:6a:66:a1:50:46:b1:08:ac:e2:81:92:9d:ce:
                    3e:a4:4c:3c:f5:d6:9b:51:ee:27:fe:5a:5e:9f:f1:
                    d9:cd:fe:eb:7b:21:e4:14:0d:ea:da:b4:2b:e2:fc:
                    68:dd:ce:59:af:c0:a3:e6:7a:44:94:d5:1a:d0:f7:
                    2e:ab:06:99:ce:2d:69:a5:cf:80:b1:3d:fb:1c:eb:
                    41:00:1f:49:e9:43:f1:4a:de:44:f4:66:ec:2f:92:
                    93:a7:57:41:2c:a0:21:80:71:2a:02:6a:76:89:d4:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:29:04:C4:6D:44:33:A6:CD:C0:C5:1D:31:D7:BB:8B:CB:5A:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA10947AC22711F1BB096DB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.21.0-154.86.30.255

    Signature Algorithm: sha256WithRSAEncryption
         74:30:0f:cd:50:be:d1:ec:8f:32:93:93:78:b6:66:23:af:08:
         a0:87:81:19:11:80:37:1e:72:47:ce:80:93:d4:1a:a2:56:1f:
         9d:6c:40:c9:4c:b8:18:7c:1f:bc:03:46:9a:ca:99:4f:5e:2f:
         be:c3:ee:70:6c:34:b9:59:46:d5:75:17:49:a5:02:f3:ef:bf:
         66:c5:de:26:62:f5:89:48:38:aa:4e:11:da:13:3a:cd:92:3b:
         32:c0:d2:fd:56:a2:e3:e3:27:fd:89:94:6b:7f:51:24:b8:ea:
         06:cf:21:ce:2a:a5:a0:7a:2d:4c:e3:02:2e:e0:00:d5:a4:db:
         cc:f3:8b:96:a2:d2:23:ba:fd:dd:77:83:a6:db:58:10:1e:5c:
         61:22:9e:86:35:33:d5:ce:92:e9:e1:25:4a:bd:5b:93:13:ef:
         90:bb:8c:4e:19:9c:d7:6d:a9:a1:ff:4b:21:d8:f1:c3:0e:a9:
         9a:18:12:e3:73:b6:7e:9e:18:42:74:10:7f:df:10:16:48:4d:
         ff:67:45:ad:09:76:5b:0c:66:82:c2:66:da:3d:96:05:70:b4:
         cf:3a:0c:ed:4a:e2:c4:ba:42:50:7f:4e:7a:14:ad:26:82:c4:
         7e:bd:21:05:cc:af:5d:d3:9e:20:4e:58:2c:92:27:64:d5:cd:
         d5:ce:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----