Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8A01DA2C1B511F18869E9C2CE1D38B0.roa
File:                     F8A01DA2C1B511F18869E9C2CE1D38B0.roa (raw, json)
Hash identifier:          GTjOt6V5YwUlcIZQ6iOSmnvunpepWpHnMGJKkpfmCGQ=
Subject key identifier:   9A:4A:51:74:81:1E:F0:10:A1:B7:CD:04:CA:2A:F0:71:5D:F0:54:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8A01DA2C1B511F18869E9C2CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 18:44:33 +0000
ROA not before:           Tue 06 Oct 2026 18:44:27 +0000
ROA not after:            Fri 13 Nov 2026 18:44:27 +0000
asID:                     212238
IP address blocks:        154.193.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126097 (0x1ec91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 18:44:27 2026 GMT
            Not After : Nov 13 18:44:27 2026 GMT
        Subject: CN=6ac54191-49bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:d6:50:2b:a8:96:1a:3a:26:61:9e:b4:f8:
                    99:70:2b:c4:60:75:5f:e3:0c:f8:69:71:f5:9d:59:
                    e4:d5:14:c8:bf:74:9d:6b:dd:0b:c0:99:39:2f:fa:
                    ab:c4:2d:11:e7:2e:aa:18:91:8b:9d:84:b4:94:36:
                    e5:1e:23:b5:e7:57:87:e5:af:2c:5d:b2:98:db:bf:
                    d7:f0:f4:8e:d6:f0:65:da:2c:12:61:aa:9b:d6:5c:
                    06:28:7e:90:6a:92:f7:17:a9:4c:0e:de:e9:05:6c:
                    2f:d4:f7:40:92:95:81:10:e2:49:9b:d6:8a:4d:3d:
                    4b:22:9f:d2:6b:2a:27:a9:fa:dc:7e:68:f8:d8:9b:
                    cb:20:c2:b8:ca:14:c0:3a:62:c2:88:ea:bc:96:e0:
                    8c:17:4f:dd:4b:74:23:83:af:98:a6:26:f1:23:ca:
                    4b:c3:7f:f1:36:36:eb:f0:94:a9:12:c2:aa:77:a8:
                    3f:54:8c:b3:1e:00:32:56:e1:63:7c:1e:e3:88:d6:
                    e1:0a:1a:b1:bb:ab:8d:89:e2:7c:79:36:48:ac:dc:
                    7c:59:fb:c3:fc:b1:d0:ad:47:1d:3d:b8:88:18:62:
                    f5:c9:1c:82:b4:0a:2f:52:1f:59:93:86:6c:ed:8b:
                    09:7b:e4:eb:3b:2b:d2:cd:30:57:43:72:7f:07:84:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:51:74:81:1E:F0:10:A1:B7:CD:04:CA:2A:F0:71:5D:F0:54:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8A01DA2C1B511F18869E9C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:f8:82:2c:20:01:e3:93:b5:32:92:7b:8b:9c:9f:02:d3:
         f5:26:46:c3:34:73:ca:da:d9:6c:06:c2:cc:d3:c7:2f:6b:b5:
         3e:53:ca:70:5f:5b:6e:54:72:28:2d:d0:eb:16:57:f1:a7:5a:
         99:a8:42:c1:57:47:f9:21:89:2e:02:4c:3a:7f:44:0a:28:9d:
         df:2e:84:d7:c6:c2:ab:a8:75:aa:99:49:29:83:ee:65:f4:c7:
         a3:ca:14:d7:32:3f:6d:36:bb:6a:8f:99:17:77:79:51:fa:8e:
         fe:d6:a6:46:f7:68:4c:98:22:1c:22:3e:3b:3c:b5:51:83:9d:
         89:ed:93:65:fb:a2:59:bb:a9:ce:5b:e3:94:2b:68:77:36:91:
         33:ee:96:99:ab:6e:bf:5e:08:17:98:d0:e8:23:10:2e:4a:34:
         82:dc:c5:2c:9d:a4:56:91:d0:89:e4:f0:33:64:d9:66:b6:f1:
         e7:73:b5:d0:5a:46:3b:17:ef:25:16:84:13:bf:c5:b3:8e:01:
         dd:72:fa:7f:67:87:b8:1c:3b:01:b7:79:5a:c7:f2:b6:a4:81:
         2a:74:0d:6a:41:8b:1a:22:2f:69:2b:d8:d6:f0:81:16:b9:5e:
         f5:2b:e8:9d:d1:48:6a:fe:8e:15:f4:7f:85:0c:eb:d0:a3:e8:
         78:71:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----