Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF49DEEC9FF11F1964604F5CE1D38B0.roa
File:                     0DF49DEEC9FF11F1964604F5CE1D38B0.roa (raw, json)
Hash identifier:          /bQxu5wvp6qi0Ql5mKzbmopbBorsHNZfppyfrYaD5FM=
Subject key identifier:   B2:00:77:8D:5F:E0:1A:FF:70:77:C5:ED:A1:FD:7B:94:95:E9:D8:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF49DEEC9FF11F1964604F5CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 07:47:52 +0000
ROA not before:           Sat 17 Oct 2026 07:47:46 +0000
ROA not after:            Tue 24 Nov 2026 07:47:46 +0000
asID:                     54600
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126613 (0x1ee95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 07:47:46 2026 GMT
            Not After : Nov 24 07:47:46 2026 GMT
        Subject: CN=6ad32827-05d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1c:2d:43:06:a1:53:2c:aa:cc:e1:a5:7c:cf:
                    03:51:32:01:7a:99:68:82:42:7b:22:45:d9:66:f0:
                    66:19:45:15:bc:ba:7b:cb:1f:a8:51:b3:90:48:9b:
                    d3:3b:42:f2:07:d9:c6:ac:62:17:b6:d4:7e:65:f1:
                    d5:bd:5d:fe:c5:e1:aa:a6:ca:4e:1b:12:e3:2d:42:
                    d8:bd:6c:01:a5:00:49:b6:22:84:31:07:68:c5:a2:
                    7a:9a:32:95:fd:bc:13:e3:89:21:5a:62:01:27:34:
                    23:61:c9:c3:aa:b8:5c:e7:6f:9e:8d:17:ff:47:e5:
                    25:7b:5e:b4:7f:a5:b6:a4:01:c5:ef:79:d4:21:e7:
                    0b:8b:45:6e:03:87:57:7d:42:b0:f9:fa:b9:19:4a:
                    57:2b:38:04:8c:3b:ee:d2:89:10:cb:6f:01:50:53:
                    b6:e5:af:bd:80:ee:1e:92:7f:85:03:04:52:c6:52:
                    4e:20:38:86:39:9f:d2:45:3e:8c:00:ac:05:67:7b:
                    c3:49:45:b3:fa:d2:c5:fd:28:30:54:da:94:00:c5:
                    fa:df:78:62:27:fd:d8:e3:68:bc:27:bb:65:fa:a5:
                    2a:91:ca:88:5c:08:e4:a8:91:07:0d:8f:49:6c:9a:
                    42:d7:3d:32:e2:c6:63:b0:95:96:9a:8a:24:e6:8c:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:00:77:8D:5F:E0:1A:FF:70:77:C5:ED:A1:FD:7B:94:95:E9:D8:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF49DEEC9FF11F1964604F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:20:61:c8:2c:dd:25:3e:73:f3:5c:8a:7c:2b:30:a8:6d:
         df:59:7d:8a:3c:76:d5:d7:e9:45:7f:6b:bc:bb:ca:62:65:b0:
         7c:4c:ec:0c:14:0d:01:e3:9d:cf:1f:07:42:3e:d6:fa:40:c0:
         90:8e:67:cb:b1:62:d8:c4:3d:1d:6c:19:1f:5e:2d:90:a0:42:
         d9:15:52:5f:b5:f7:83:8b:c4:39:84:0e:b1:00:4f:4f:39:7f:
         ca:a8:a4:ff:4e:c2:06:d4:bc:a4:ac:d2:2a:ce:e9:99:0d:cb:
         95:43:d7:35:70:86:b8:a2:38:5b:f7:a8:23:4b:17:ce:68:a2:
         cd:41:61:d9:e8:14:9a:6c:5f:cb:c2:73:68:0b:ee:06:26:a5:
         d9:8b:55:4f:0d:91:cf:e7:88:a3:6b:71:5b:48:a8:de:48:c0:
         5b:35:ec:f7:43:59:d2:9f:e9:b1:72:a4:41:6e:40:ca:38:64:
         98:ca:8b:be:f3:29:84:a4:46:89:f0:4c:b1:fa:5b:b9:f2:fc:
         01:9e:6a:55:c3:56:b7:3a:75:7b:b5:cb:a9:64:29:b2:f6:12:
         7d:35:60:8b:b5:29:da:f1:04:85:01:18:1c:3e:a1:10:ef:d4:
         20:50:d7:17:5d:87:0d:c3:e7:68:b8:b2:33:bd:45:87:28:ae:
         b7:bf:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----