Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FF99DABA3B11F18E5EDF08CF1D38B0.roa
File:                     F2FF99DABA3B11F18E5EDF08CF1D38B0.roa (raw, json)
Hash identifier:          OY8k5vlJsHZ3JJAhHx7XjQw/Yi5igz+CPQXDMR/P6zc=
Subject key identifier:   1C:E1:96:8E:52:84:19:2F:5F:65:21:14:69:5E:7C:D4:53:B6:97:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FF99DABA3B11F18E5EDF08CF1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:23:27 +0000
ROA not before:           Sun 27 Sep 2026 06:23:23 +0000
ROA not after:            Sun 01 Nov 2026 06:23:23 +0000
asID:                     44559
IP address blocks:        154.205.234.0/24 maxlen: 24
                          154.205.235.0/24 maxlen: 24
                          154.205.236.0/24 maxlen: 24
                          154.205.237.0/24 maxlen: 24
                          154.205.238.0/24 maxlen: 24
                          154.205.239.0/24 maxlen: 24
                          154.205.240.0/24 maxlen: 24
                          154.205.241.0/24 maxlen: 24
                          154.205.242.0/24 maxlen: 24
                          154.205.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125676 (0x1eaec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:23:23 2026 GMT
            Not After : Nov  1 06:23:23 2026 GMT
        Subject: CN=6ab8b65f-7a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:c6:ff:20:20:32:aa:d3:08:c1:62:70:d8:
                    1f:cf:2c:45:8b:fd:9b:30:07:79:e4:ea:f6:c3:c2:
                    cb:61:77:e0:a2:dd:11:80:61:57:c4:f4:68:c4:b4:
                    53:a3:0a:13:2d:03:d9:e6:2a:9b:19:0e:68:d0:56:
                    35:4e:28:73:db:c4:f7:f6:45:91:74:46:35:fb:05:
                    b5:1a:24:d7:50:a3:81:92:b3:b3:c0:c3:46:05:73:
                    21:c8:6b:49:4a:97:7e:b5:cd:1c:fb:15:20:d7:02:
                    36:92:a0:39:e1:a4:61:b6:e3:ec:6e:a7:06:5d:ee:
                    d5:56:47:64:67:f0:17:2d:05:ad:99:bf:34:1c:c6:
                    b7:f2:5b:14:d4:41:c8:7e:13:c5:88:29:ad:d6:63:
                    cb:5f:c0:df:a4:d0:60:d8:2d:06:5b:34:4f:40:26:
                    15:7a:a6:46:dc:c7:f3:3c:8c:07:b3:15:77:6c:70:
                    31:d0:6b:2d:50:84:93:a1:ba:53:1f:93:26:a8:e3:
                    72:8c:7c:ba:cd:d4:5b:76:f4:80:d3:c8:1a:f4:c7:
                    c2:4d:71:bf:c5:4b:e4:a6:00:50:ed:be:79:e9:9d:
                    79:21:6f:5e:2f:62:fd:43:f4:19:2a:4a:c0:da:e3:
                    f1:f6:a0:5a:09:f6:7d:61:01:53:61:30:72:3d:c0:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E1:96:8E:52:84:19:2F:5F:65:21:14:69:5E:7C:D4:53:B6:97:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FF99DABA3B11F18E5EDF08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.234.0-154.205.243.255

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:97:87:86:e2:78:c2:02:6f:1f:9a:c0:f3:79:65:d5:ec:
         d2:a7:0e:44:6f:02:11:66:d4:06:de:e4:a4:b3:57:4a:41:5b:
         f3:e0:e8:e7:54:52:a3:d5:10:66:71:d1:f3:5e:44:4b:17:14:
         ed:e8:d4:2b:65:83:13:3c:90:5d:5c:60:0c:b8:4e:ea:bc:bf:
         63:6d:74:0d:02:15:74:19:19:e6:b2:5f:5e:3d:9c:f6:13:4a:
         52:7e:7d:ee:27:ad:4f:65:ee:e6:e4:09:07:50:08:8b:32:3b:
         07:f3:28:73:d2:89:71:e2:3c:cd:e2:5a:01:53:b2:8d:cf:60:
         4f:73:8f:45:cf:b3:ca:0c:d1:93:fa:60:92:f8:15:ff:1d:94:
         84:7f:d8:b4:41:9e:b5:79:3f:44:2d:3f:9f:c3:d0:59:36:f5:
         4b:98:c3:13:c1:96:af:33:52:57:0c:71:92:49:76:89:f6:d4:
         ba:dd:13:94:7f:ce:77:0e:95:85:aa:5e:62:23:c0:e1:4d:0e:
         45:a2:d4:cd:5a:e2:15:c5:28:11:6c:18:7b:58:b4:7b:48:25:
         3c:94:46:bb:f4:9b:90:f6:11:18:ce:e6:99:9c:58:24:1d:54:
         15:93:0c:75:a3:67:ab:0d:20:04:bb:41:04:01:9a:ef:1c:15:
         64:36:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----