Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3F0118BC9D11F1B14E0011CF1D38B0.roa
File:                     FF3F0118BC9D11F1B14E0011CF1D38B0.roa (raw, json)
Hash identifier:          SS5n1GkZ2f4e0DRQ2OIu7QFMsvvXbUehRP4jilWbS7s=
Subject key identifier:   D7:A4:38:DB:C7:CE:CD:70:4D:79:88:F6:5C:B7:43:F8:B0:3E:10:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3F0118BC9D11F1B14E0011CF1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:10:21 +0000
ROA not before:           Wed 30 Sep 2026 07:10:17 +0000
ROA not after:            Fri 06 Nov 2026 07:10:17 +0000
asID:                     49505
IP address blocks:        154.209.221.0/24 maxlen: 24
                          154.209.222.0/24 maxlen: 24
                          154.209.223.0/24 maxlen: 24
                          154.211.9.0/24 maxlen: 24
                          154.211.10.0/24 maxlen: 24
                          154.211.11.0/24 maxlen: 24
                          154.211.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125822 (0x1eb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:10:17 2026 GMT
            Not After : Nov  6 07:10:17 2026 GMT
        Subject: CN=6abcb5dc-050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:65:6a:9c:12:de:f1:65:79:02:78:15:9e:
                    19:6f:ec:ef:cd:37:71:b7:8a:8c:f0:4c:38:16:be:
                    8c:4a:9f:96:c0:4c:37:cc:6c:fc:bf:52:bc:f0:84:
                    86:47:e2:d4:19:82:c9:3b:32:b8:34:ab:27:63:8e:
                    dd:0d:33:d9:33:1f:67:27:51:5b:ff:48:a9:fb:62:
                    60:76:4b:a5:28:1d:5f:11:cb:63:87:0d:e1:76:6a:
                    5b:ba:8b:06:86:26:04:a0:f4:22:b3:9b:97:15:4b:
                    0f:88:96:c7:8c:2c:a2:2f:cd:c0:20:70:c3:dd:08:
                    1a:7a:f2:1a:cd:9c:9b:bf:23:9a:e6:07:b0:7f:fd:
                    8f:eb:54:7c:d2:c7:33:cc:27:43:41:b6:0d:09:c1:
                    18:9c:4a:e2:90:0a:cd:84:20:9a:05:9d:82:43:8c:
                    21:03:5d:8c:12:fb:e4:f9:a9:12:a0:d1:3d:f0:26:
                    c6:0d:87:00:61:46:93:71:48:82:8f:24:a6:27:c1:
                    6e:8e:8e:08:28:01:03:da:01:c3:b3:26:93:3d:e4:
                    1c:22:5d:0c:9e:9c:3c:0b:a7:6d:34:39:ca:a5:3c:
                    93:ef:63:62:ef:5a:b6:98:85:c3:16:4b:84:5b:c9:
                    0b:56:a4:f3:68:bc:fe:6d:77:ce:b0:61:95:56:02:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:38:DB:C7:CE:CD:70:4D:79:88:F6:5C:B7:43:F8:B0:3E:10:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3F0118BC9D11F1B14E0011CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.221.0-154.209.223.255
                  154.211.9.0-154.211.11.255
                  154.211.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:b4:fb:85:34:a2:4f:81:ef:ed:ca:b3:8a:fb:ea:7c:7d:
         cc:8c:d2:9b:e6:59:d7:54:59:fb:a9:d3:ee:56:8e:95:12:0d:
         75:99:63:e7:f8:5f:70:c7:df:b8:5a:b5:9d:d9:0f:84:d9:6d:
         2e:f5:0c:46:ed:c6:ef:66:95:9d:00:cc:d4:b6:9d:47:31:9d:
         f5:19:12:c9:81:73:3c:b2:8e:9f:36:11:f3:57:0c:f0:e4:91:
         ac:da:94:9a:5f:cc:ce:33:35:0c:ab:ae:09:bb:73:98:e7:46:
         98:ed:98:08:3a:59:de:6e:2b:40:6a:3a:aa:cf:77:3d:89:75:
         53:40:40:56:39:8e:cb:3c:c5:43:7c:ad:1b:80:9f:d5:c6:a0:
         2d:a0:23:a0:73:6d:52:d6:67:0f:a2:c6:c4:76:f6:bd:12:80:
         ed:f7:06:8a:3a:c8:f5:e7:ed:84:b1:d4:ee:06:26:a6:2f:f5:
         82:09:6b:13:ce:6f:59:8a:67:6c:e7:c1:49:8b:f2:de:ab:4d:
         5d:0a:f9:ab:6b:ed:61:7c:77:83:fb:11:a8:2d:ec:01:1f:de:
         3b:75:de:28:74:25:e5:e0:50:8f:95:22:20:d3:7d:6d:6b:9b:
         28:90:ee:06:a7:fc:14:e9:e5:37:40:c5:99:69:26:ad:20:f4:
         2f:74:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----