Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3676A20EC87D11F1A240331CCF1D38B0.roa
File:                     3676A20EC87D11F1A240331CCF1D38B0.roa (raw, json)
Hash identifier:          7qAGVhI+oWurpk7mQmE1pyxCOhePH2EvBofIY/GaS6A=
Subject key identifier:   77:8A:B1:AD:20:A6:90:C1:10:D5:5B:F8:59:8C:F7:80:D6:9C:55:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3676A20EC87D11F1A240331CCF1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:45:54 +0000
ROA not before:           Thu 15 Oct 2026 09:45:49 +0000
ROA not after:            Tue 16 Nov 2027 09:45:49 +0000
asID:                     29684
IP address blocks:        154.91.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126537 (0x1ee49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 09:45:49 2026 GMT
            Not After : Nov 16 09:45:49 2027 GMT
        Subject: CN=6ad0a0d2-9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:a6:ce:66:3e:8b:c0:5a:be:67:fb:96:71:
                    2f:62:28:38:6b:c5:6c:12:67:50:72:ea:7c:84:fb:
                    d2:5b:18:9e:03:45:2d:d0:7e:09:10:de:d6:bd:5e:
                    58:86:7c:ed:ab:b8:5c:69:1a:c9:64:74:0e:fd:c3:
                    40:b8:50:8a:d6:d9:a0:88:bf:a7:56:b0:dc:0c:50:
                    c1:e3:a7:e5:70:73:3a:5a:dd:9a:35:1a:67:30:5d:
                    91:a7:61:86:23:5e:3d:d2:e2:52:8f:3f:97:57:ab:
                    60:49:40:99:d6:ef:f9:f3:91:f9:37:2a:4f:b3:d4:
                    d6:d1:59:1b:85:0a:87:06:94:8b:63:61:8b:bb:64:
                    51:e9:ca:7d:72:07:26:44:11:84:a4:28:41:7f:15:
                    7c:7c:f3:11:3e:31:a3:33:a0:66:f4:2a:5f:86:45:
                    65:e1:dd:5e:15:1b:6a:6f:14:a0:4b:a9:ae:40:dc:
                    ad:ad:69:64:37:cf:98:36:f5:e7:a9:a5:fd:2d:a3:
                    04:0d:09:cc:7a:bb:98:af:04:73:89:d7:0e:30:11:
                    e4:63:e1:9a:04:d6:a2:9e:90:e1:eb:76:ca:c0:0a:
                    92:bd:f1:e1:ba:8e:1b:cb:4f:98:05:cf:6b:3c:cc:
                    37:ab:bd:81:a7:d5:35:7d:7a:bb:0a:f6:7c:6e:e1:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8A:B1:AD:20:A6:90:C1:10:D5:5B:F8:59:8C:F7:80:D6:9C:55:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3676A20EC87D11F1A240331CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:97:e3:2a:5f:63:46:a5:a7:85:6c:4b:93:26:4b:84:84:
         a7:37:03:e1:1e:f5:9b:e9:5f:a9:cc:e6:29:8e:f2:30:de:04:
         e2:99:3a:9b:4f:1e:b3:71:1a:8d:03:b0:87:0c:6e:7a:3b:40:
         39:b5:ec:2a:da:f3:56:64:28:c5:fe:10:c1:20:13:57:e9:7f:
         2c:95:cb:4c:e1:7b:62:d9:3b:6b:5c:dc:57:4f:8f:55:1b:b7:
         6f:ad:7b:3e:66:86:e5:7f:3a:92:26:c5:6d:a7:96:48:4a:b9:
         d0:f7:98:f5:67:a8:30:8a:57:f3:85:c2:36:3a:3c:7f:f7:27:
         bf:86:cb:0e:e9:8c:e9:63:64:3a:47:a0:18:bd:49:a2:d8:d8:
         d7:2d:7f:9f:c6:e9:90:3e:30:f2:c9:02:8c:b5:e5:e8:6b:9c:
         ca:cf:58:41:c2:6a:35:c6:e8:3e:52:9d:c3:b4:66:3c:cf:f9:
         1d:c8:19:d1:1a:0d:86:98:9d:18:96:c9:c7:0d:3b:e5:40:2d:
         67:1d:44:b7:67:b5:e2:3e:2b:a8:e6:b2:25:42:73:78:c7:23:
         72:9f:84:df:66:83:18:5e:92:66:c1:8c:f8:31:36:b0:52:a2:
         49:d1:be:a4:ed:45:a2:3d:a0:7b:13:bc:44:0f:d3:00:fe:09:
         76:bb:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----