Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A79F268C93711F1B0CCEFDBCE1D38B0.roa
File:                     0A79F268C93711F1B0CCEFDBCE1D38B0.roa (raw, json)
Hash identifier:          XQ+rTs1Os3yOSE1S5XG3wmSv1tnTuKlliwaGZ0czwcg=
Subject key identifier:   ED:AC:47:0A:4E:DF:0A:55:1C:E4:4E:1F:F5:30:95:E8:28:62:71:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A79F268C93711F1B0CCEFDBCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 07:56:06 +0000
ROA not before:           Fri 16 Oct 2026 07:56:02 +0000
ROA not after:            Mon 23 Nov 2026 07:56:02 +0000
asID:                     63969
IP address blocks:        154.89.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126546 (0x1ee52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 07:56:02 2026 GMT
            Not After : Nov 23 07:56:02 2026 GMT
        Subject: CN=6ad1d896-0f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:dd:a1:4b:de:1d:65:5a:7f:12:18:fb:5d:
                    30:be:39:27:c4:c6:bd:ee:d9:fe:2a:8e:17:ee:f6:
                    1c:a3:19:4a:77:af:9a:bc:1a:fe:e8:81:fe:e3:7d:
                    dc:b5:d8:d5:eb:fb:e6:e8:ab:d3:98:9b:8d:ff:d1:
                    0c:f7:2f:bf:d9:eb:de:36:6a:e9:43:5f:f9:d6:66:
                    b0:34:93:fb:02:77:e3:9c:0e:2f:0d:d1:44:19:71:
                    15:88:21:9e:95:3c:5b:38:92:b1:1e:7e:50:0d:12:
                    5b:75:aa:15:59:a4:29:6f:3d:7d:17:9e:dd:d9:d5:
                    58:a5:72:0e:31:55:cd:c3:fd:92:c0:fd:a9:5b:12:
                    21:d6:95:c5:60:76:54:62:e1:16:37:b4:e5:06:30:
                    1a:70:7e:3b:ff:25:4c:8c:1c:19:7c:b7:ac:88:02:
                    f6:f9:28:f2:cb:b8:b3:ab:e4:11:39:9d:4e:ff:c7:
                    4a:62:b1:90:20:94:1f:1a:77:63:b1:19:dc:53:4a:
                    bb:bd:19:cb:21:b6:7c:3b:3f:15:6e:63:65:de:f1:
                    14:d0:2c:1c:e5:65:76:e0:0e:ff:a7:9d:de:44:e9:
                    c4:a0:7a:c3:79:61:57:1c:d5:6c:1d:7b:cb:a1:c9:
                    1b:e7:95:be:c5:09:27:a3:8e:6a:3d:dc:0c:c6:6f:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:47:0A:4E:DF:0A:55:1C:E4:4E:1F:F5:30:95:E8:28:62:71:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A79F268C93711F1B0CCEFDBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:98:f9:19:0f:15:8b:a0:92:32:e2:3d:57:91:1b:1e:5c:
         61:8b:73:0e:2c:f1:e4:d6:dc:5a:bf:5b:d4:a6:fa:01:8d:b9:
         a8:ce:95:42:24:1b:b2:66:01:90:3f:2d:01:71:4c:1d:d8:c6:
         6b:c0:d6:b4:80:1e:18:20:4c:16:eb:73:f6:96:54:6b:75:16:
         5a:62:3a:72:a2:b0:f5:d7:b5:5f:66:ba:c3:c7:ad:31:7b:03:
         83:36:80:0c:01:c0:e1:82:96:e0:b4:e8:52:51:68:71:24:1c:
         51:95:c9:32:74:b1:40:1c:6b:1a:c6:17:6d:c0:f7:94:38:16:
         11:f3:8c:4e:3d:7b:e0:37:f3:aa:37:07:04:e0:f7:4b:ff:47:
         9d:ed:32:4a:70:49:3b:9a:99:21:dd:d0:87:d1:1c:4a:6e:a7:
         73:bb:ed:e7:7a:6a:45:c6:2c:c8:84:40:9c:49:cd:02:c9:01:
         28:47:36:bf:32:f7:46:30:cc:3a:53:30:ec:9c:df:4f:cd:a5:
         e9:1c:59:b1:ea:8d:fc:59:69:6e:f3:32:03:5e:41:6a:16:fb:
         d4:08:07:87:cc:b9:a9:11:08:45:25:ac:26:ab:ae:45:79:ae:
         69:8a:d5:69:7e:35:5e:86:b8:3d:d5:db:d5:35:5a:51:05:4a:
         4a:01:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----