Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6BB3DCEB3EF11F1881244DACE1D38B0.roa
File:                     F6BB3DCEB3EF11F1881244DACE1D38B0.roa (raw, json)
Hash identifier:          ifq87EVGlpYCnaLK9dylO+T2W+yQot1q0NUPdGaJews=
Subject key identifier:   E4:36:7D:9F:DE:94:65:5F:3E:11:E0:F6:E6:A6:E2:A6:39:23:C0:94
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6BB3DCEB3EF11F1881244DACE1D38B0.roa
Signing time:             Sat 19 Sep 2026 06:04:25 +0000
ROA not before:           Sat 19 Sep 2026 06:04:20 +0000
ROA not after:            Tue 06 Oct 2026 06:04:20 +0000
asID:                     64126
IP address blocks:        154.88.128.0/17 maxlen: 24
                          154.88.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125128 (0x1e8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 19 06:04:20 2026 GMT
            Not After : Oct  6 06:04:20 2026 GMT
        Subject: CN=6aae25e8-f4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:6b:91:26:de:5d:3b:fd:7a:8f:fc:50:15:
                    86:77:6e:73:14:2f:b7:b1:e2:c8:57:78:29:df:a1:
                    53:19:4d:72:b0:b6:d7:f9:c8:b1:51:55:9b:0c:8b:
                    4d:42:eb:c6:a8:20:e6:66:34:3b:35:3c:c7:4d:d3:
                    80:2b:f1:a3:e9:a8:6b:4c:07:17:5b:50:a3:9d:b0:
                    f8:9a:8f:fb:ff:06:0e:14:61:d4:f6:96:7f:21:c8:
                    bb:48:c5:5c:49:26:ab:fe:40:10:96:a0:55:b9:df:
                    12:61:ab:d4:68:a0:26:63:45:7c:80:e5:27:13:e6:
                    b1:68:f2:4f:be:40:83:32:ce:5a:95:94:50:ce:97:
                    8b:d4:6d:f3:2e:96:fe:09:79:01:9c:a9:b2:6a:08:
                    62:12:bd:d6:80:b5:b2:42:c8:5a:4a:d2:0f:52:06:
                    1d:06:6f:57:a0:18:a5:bd:32:f4:da:37:8b:b6:50:
                    3f:2d:e9:24:35:eb:aa:d8:40:8a:0c:2c:47:da:37:
                    2b:43:2f:4b:9a:e2:0e:f3:12:2d:1d:9a:ef:ee:09:
                    37:b4:58:79:4f:d5:82:14:ed:95:a5:37:b5:7f:8c:
                    f2:97:97:21:6e:be:59:1d:38:d9:8a:f7:08:4b:7c:
                    8b:ce:3b:17:ef:bf:4a:80:ee:3a:0c:f5:e5:3a:52:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:7D:9F:DE:94:65:5F:3E:11:E0:F6:E6:A6:E2:A6:39:23:C0:94
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6BB3DCEB3EF11F1881244DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:7d:96:2f:6f:6c:f7:6b:8c:4c:f1:47:74:25:59:62:ca:
         fc:03:90:25:75:91:86:f3:00:39:2e:87:06:43:a6:5e:8e:90:
         6c:ff:28:51:fe:a7:ee:8b:73:10:01:60:61:5c:89:4a:d7:a4:
         2d:27:a7:b9:aa:59:4e:2a:d0:20:f4:ba:dd:84:87:77:f2:e7:
         34:cf:ec:56:6d:5d:00:2e:6c:6e:8c:65:27:92:bf:88:0f:8d:
         d0:f2:80:02:0d:8c:ac:dd:ea:b4:17:41:50:37:9d:ba:e1:ad:
         36:b5:01:d0:32:b9:5d:60:de:4e:86:ee:5c:88:55:dc:a4:c6:
         9f:47:7e:2b:80:34:42:05:e8:23:08:56:43:9f:80:1b:ee:7f:
         c3:36:01:60:e0:25:21:94:dd:bf:92:9b:83:3a:a6:96:1b:82:
         e6:4f:d1:e4:38:84:8a:47:7f:4c:ce:87:da:f4:ed:ad:0d:ea:
         79:1d:9c:ba:1f:83:8e:16:15:42:ae:da:89:4a:67:e0:54:c2:
         30:9d:28:3f:3c:bf:ef:80:57:4d:9e:f2:d1:51:e1:5e:32:4e:
         f2:69:ce:51:89:67:80:22:2c:82:63:9c:ef:99:25:47:64:e0:
         93:90:32:02:6a:04:c4:6f:e3:45:54:16:d4:1e:f4:fe:61:c8:
         66:03:5b:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAejIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE5MDYwNDIwWhcNMjYxMDA2MDYwNDIwWjAYMRYw
FAYDVQQDEw02YWFlMjVlOC1mNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5XxrkSbeXTv9eo/8UBWGd25zFC+3seLIV3gp36FTGU1ysLbX+cixUVWb
DItNQuvGqCDmZjQ7NTzHTdOAK/Gj6ahrTAcXW1CjnbD4mo/7/wYOFGHU9pZ/Ici7
SMVcSSar/kAQlqBVud8SYavUaKAmY0V8gOUnE+axaPJPvkCDMs5alZRQzpeL1G3z
Lpb+CXkBnKmyaghiEr3WgLWyQshaStIPUgYdBm9XoBilvTL02jeLtlA/LekkNeuq
2ECKDCxH2jcrQy9LmuIO8xItHZrv7gk3tFh5T9WCFO2VpTe1f4zyl5chbr5ZHTjZ
ivcIS3yLzjsX779KgO46DPXlOlLu/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOQ2
fZ/elGVfPhHg9uam4qY5I8CUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNkJCM0RDRUIzRUYxMUYxODgxMjQ0REFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmliAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVw32WL29s92uMTPFHdCVZYsr8A5AldZGG8wA5LocGQ6ZejpBs/yhR
/qfui3MQAWBhXIlK16QtJ6e5qllOKtAg9LrdhId38uc0z+xWbV0ALmxujGUnkr+I
D43Q8oACDYys3eq0F0FQN5264a02tQHQMrldYN5Ohu5ciFXcpMafR34rgDRCBegj
CFZDn4Ab7n/DNgFg4CUhlN2/kpuDOqaWG4LmT9HkOISKR39Mzofa9O2tDep5HZy6
H4OOFhVCrtqJSmfgVMIwnSg/PL/vgFdNnvLRUeFeMk7yac5RiWeAIiyCY5zvmSVH
ZOCTkDICagTEb+NFVBbUHvT+YchmA1tO
-----END CERTIFICATE-----