Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDCA26AB65611F1BC96AB19CF1D38B0.roa
File:                     1BDCA26AB65611F1BC96AB19CF1D38B0.roa (raw, json)
Hash identifier:          8qcF+u4syb/HYurRYy6eIcHYjlYCy5Arjls8hwocbY0=
Subject key identifier:   E8:6C:DF:23:99:F6:77:99:3B:B9:65:96:91:80:AF:3A:CA:26:BA:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDCA26AB65611F1BC96AB19CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 07:20:38 +0000
ROA not before:           Tue 22 Sep 2026 07:20:34 +0000
ROA not after:            Thu 22 Apr 2027 07:20:34 +0000
asID:                     136222
IP address blocks:        154.205.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125422 (0x1e9ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 07:20:34 2026 GMT
            Not After : Apr 22 07:20:34 2027 GMT
        Subject: CN=6ab22c46-2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:70:c0:83:fb:c0:dc:5e:19:05:39:f4:71:
                    f6:8b:ac:bb:3d:a7:f7:f5:3f:f2:7c:30:12:1d:5d:
                    af:6e:a0:dc:32:17:27:00:ed:16:bc:a8:36:10:81:
                    cc:ad:28:fe:ef:59:d2:15:a3:4a:db:b0:ce:8a:5d:
                    6d:34:db:86:5c:c8:62:23:ff:5e:1a:0f:bb:fc:40:
                    2e:70:8b:d4:e8:57:63:f9:28:96:a5:a4:29:26:ab:
                    b3:37:f3:89:33:36:ec:f3:b1:38:56:c5:d8:6a:c0:
                    89:cd:3e:b7:3a:3b:99:16:53:d6:1c:44:21:e1:b9:
                    c4:d2:63:15:de:06:98:4b:36:99:93:81:e0:e8:cc:
                    52:93:87:34:0c:26:b4:22:b9:9a:0b:57:1a:b0:b2:
                    63:5d:70:7e:79:1c:0d:69:2e:74:e9:ca:2b:25:78:
                    88:38:50:eb:af:94:f6:0d:c6:e0:0a:bd:7c:e0:7c:
                    19:34:d3:a8:a1:32:41:2a:20:96:b0:ed:a0:7a:98:
                    9b:69:b0:f1:35:5e:b0:03:02:d8:bc:30:45:c5:fc:
                    95:b4:07:07:4d:eb:b8:b4:70:74:25:c4:e4:1d:aa:
                    8d:81:15:cc:38:b9:a8:6b:fc:a2:11:53:ed:88:1b:
                    ae:37:2e:ee:88:88:e8:ab:39:ed:65:3f:df:40:43:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:DF:23:99:F6:77:99:3B:B9:65:96:91:80:AF:3A:CA:26:BA:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDCA26AB65611F1BC96AB19CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:04:8d:51:63:a2:47:e8:32:53:59:50:82:b9:b1:60:e6:
         87:dd:c7:12:b2:0b:00:18:f0:d7:39:35:b1:f3:e2:2a:81:95:
         a8:17:9b:ab:ea:f8:34:92:e7:4b:5a:b2:34:8e:8d:55:e8:fa:
         d5:0b:21:d6:2a:11:2c:7a:9e:f4:cc:34:8b:c3:e7:8d:14:f9:
         07:0b:8b:f4:be:b4:20:d5:4e:09:9a:a5:1b:f4:fe:45:44:4a:
         43:32:d9:57:d5:04:be:2b:5b:6d:e2:57:1f:18:7e:44:22:8c:
         02:09:cc:a6:fc:56:72:3b:30:7a:ca:c6:1f:0e:cc:6f:5e:33:
         e8:ab:f1:0c:ed:99:21:08:c7:32:39:fa:c0:90:a5:69:b7:0f:
         cf:e4:c9:5a:5a:9c:79:43:81:a1:67:4c:cc:62:7f:30:25:a5:
         8c:5c:63:6e:33:46:5b:55:72:a0:b3:03:3a:5a:c1:2b:53:99:
         84:41:73:2c:19:4a:74:27:51:56:c3:a8:58:36:dd:84:58:90:
         39:a8:81:d8:91:aa:84:00:56:af:b8:59:08:01:be:2f:4e:34:
         54:57:df:82:77:d5:96:41:0a:fe:56:07:c5:51:25:fc:e4:47:
         a8:48:8f:90:90:ea:20:26:46:e2:fc:de:7b:81:8f:27:cf:7e:
         97:6e:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----