Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072C3518CA0811F1A32B10AFCE1D38B0.roa
File:                     072C3518CA0811F1A32B10AFCE1D38B0.roa (raw, json)
Hash identifier:          kOutKfLDd5dms9McrGEDlOWpyO908oatTL3HcXa7mz0=
Subject key identifier:   FB:C5:34:6C:04:69:E0:F1:EC:62:5C:17:E1:82:29:5C:02:96:D0:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072C3518CA0811F1A32B10AFCE1D38B0.roa
Signing time:             Sat 17 Oct 2026 08:52:06 +0000
ROA not before:           Sat 17 Oct 2026 08:52:01 +0000
ROA not after:            Tue 24 Nov 2026 08:52:01 +0000
asID:                     154376
IP address blocks:        154.89.151.0/24 maxlen: 24
                          154.89.152.0/23 maxlen: 24
                          154.89.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 08:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126627 (0x1eea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 08:52:01 2026 GMT
            Not After : Nov 24 08:52:01 2026 GMT
        Subject: CN=6ad33736-7a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:aa:63:a5:bc:8b:5c:40:4d:a1:cd:fb:ab:
                    5d:29:c4:b9:ea:ee:73:9c:fa:7a:7d:7d:b0:8d:18:
                    28:a7:6b:10:9f:16:23:91:90:ad:15:dc:87:c8:5b:
                    30:4c:d5:dd:05:96:bc:83:13:1c:8d:77:58:5e:63:
                    4b:74:70:de:62:f4:93:0b:d1:e3:8a:d7:54:b0:70:
                    0d:d5:bb:c0:e9:2c:c6:a1:28:b6:63:35:36:30:cf:
                    3c:25:9f:3a:0c:6b:97:5f:89:e0:70:c1:8d:33:0a:
                    0e:08:85:9f:9f:b1:4e:7c:e0:c7:1f:e9:7d:39:7e:
                    bd:5a:a3:97:ea:10:57:63:94:12:21:d0:86:ed:43:
                    8c:ed:40:a2:1e:1f:2e:bc:45:93:08:87:42:91:5a:
                    e9:a4:79:3d:2d:96:2a:4a:56:18:99:84:17:03:b8:
                    15:de:a0:23:01:0a:92:f7:b6:fb:86:72:c1:30:bb:
                    f5:d2:20:00:44:58:01:82:fe:33:00:aa:e9:6a:f1:
                    a1:ad:2a:61:09:5f:b6:3e:71:2d:77:af:94:86:34:
                    2b:ad:df:6d:03:b5:2e:83:c6:0b:a6:20:9e:62:0c:
                    b8:69:e6:a0:5e:12:28:55:2e:1c:c8:64:09:e5:94:
                    ee:a8:81:b7:bf:9b:57:37:8a:72:ea:c9:08:c2:a0:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:34:6C:04:69:E0:F1:EC:62:5C:17:E1:82:29:5C:02:96:D0:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072C3518CA0811F1A32B10AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.151.0-154.89.153.255
                  154.89.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:04:0d:bc:95:56:26:c2:28:d4:02:ef:c9:0a:38:2a:21:9d:
         db:a9:ac:f6:b0:47:84:ac:82:fa:1d:00:f5:2c:ef:8f:c5:61:
         ba:0c:13:17:93:e0:1d:c5:c2:e8:e5:e0:00:a8:8e:50:3b:83:
         12:4b:50:c6:ab:22:9e:8c:e5:c3:0c:1c:dd:03:82:cc:28:e4:
         6a:f9:7e:05:ec:64:e8:fc:8e:8a:80:5f:7b:dc:7b:76:17:2f:
         39:90:75:51:49:2c:98:de:12:d8:99:69:38:d0:aa:03:32:c6:
         16:06:a7:a3:67:54:d6:0e:b2:3b:e3:55:e6:5b:4e:62:e9:c5:
         73:68:ae:74:3b:53:b9:71:09:a3:fb:e3:07:80:a4:a4:ed:c0:
         69:d8:5d:18:91:de:c0:ac:4e:bc:38:2d:51:74:f1:a9:25:d3:
         53:c3:3c:e1:ba:32:55:ff:b4:4e:c2:d4:bb:40:04:73:01:e7:
         b6:9b:20:a8:cc:87:e8:50:8f:a8:43:5b:13:5e:76:ca:8e:73:
         c7:5d:5a:c5:07:47:cf:eb:53:53:3b:41:ef:10:ef:43:9c:cd:
         15:cd:75:d3:e6:41:02:6f:80:cc:35:8d:9a:34:ba:b0:99:8d:
         29:a1:19:ad:8f:2c:33:91:94:75:d7:8d:4c:44:ee:9e:6c:d8:
         b6:c2:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----