Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D11262C86A11F194D8AEA4CE1D38B0.roa
File:                     39D11262C86A11F194D8AEA4CE1D38B0.roa (raw, json)
Hash identifier:          LMiqHji2STud9R3Ly7LoDuStMzrY8kx/mVwGPJdKyOE=
Subject key identifier:   CA:51:59:AE:60:1E:09:BF:DE:91:5F:98:F5:47:EA:F0:70:D8:EB:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D11262C86A11F194D8AEA4CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:29:59 +0000
ROA not before:           Thu 15 Oct 2026 07:29:55 +0000
ROA not after:            Sun 22 Nov 2026 07:29:55 +0000
asID:                     395886
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 18:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126493 (0x1ee1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 07:29:55 2026 GMT
            Not After : Nov 22 07:29:55 2026 GMT
        Subject: CN=6ad080f7-c30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:9e:81:56:71:39:9d:93:a5:21:56:71:88:
                    99:fe:be:37:55:27:7a:c3:06:bb:25:0f:55:4c:3e:
                    ec:45:53:06:ef:a1:82:fb:a2:52:af:4c:91:fb:a2:
                    e8:b0:2d:aa:0f:26:64:08:6d:d7:fc:0d:05:e1:6c:
                    b8:07:97:58:ae:39:d1:7c:89:40:a6:a7:41:18:f0:
                    9c:ab:81:77:80:4c:71:a8:8b:ea:44:b9:71:60:84:
                    5b:0d:9e:d0:9f:a7:7f:3c:aa:fe:a7:ef:cb:25:31:
                    38:d5:a4:8a:a9:16:1b:bd:58:75:1f:80:d9:b0:ac:
                    27:d2:2e:ee:e6:0d:3f:5d:98:9d:cb:e5:c8:0f:7a:
                    41:8c:2f:c7:ed:55:62:db:1a:b8:c9:07:e4:18:af:
                    19:d2:5b:49:c7:ab:f6:ac:a3:d1:80:85:8a:5d:70:
                    b1:21:10:8e:8d:8e:e3:01:89:fb:e1:11:13:65:b5:
                    98:98:f0:63:27:f0:67:e8:e2:8e:d9:e3:b1:2d:d4:
                    78:63:04:04:68:6a:9c:ff:3f:e2:98:52:7c:d5:5b:
                    f9:66:d9:03:58:5e:3e:43:fa:31:23:d1:a3:1f:0c:
                    16:bb:95:dc:db:a5:a8:e0:91:f4:ce:56:f5:1d:15:
                    1a:56:13:83:12:3a:7f:69:a9:45:31:55:07:87:0e:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:59:AE:60:1E:09:BF:DE:91:5F:98:F5:47:EA:F0:70:D8:EB:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D11262C86A11F194D8AEA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:99:1e:01:8e:0f:79:99:e1:87:8a:a3:a0:a4:98:71:dd:
         fb:b2:b8:0b:1f:77:b9:55:ab:51:a9:cc:8a:a4:25:14:f6:7a:
         1f:f4:98:0c:83:46:56:96:b8:85:3e:e5:cd:2e:2f:39:f7:19:
         0f:22:d2:c0:4c:6f:d9:be:ce:d3:5d:5e:5f:8d:80:06:ac:f7:
         c9:d2:39:16:c0:7e:ab:58:e0:26:30:09:85:f2:ce:1b:6b:e9:
         72:92:7f:13:ad:90:28:2f:e3:b5:92:e0:1c:4e:f2:80:ea:3c:
         8b:24:9f:ca:cc:f3:c1:33:ec:7e:98:ac:e4:75:ce:fe:94:07:
         e2:d9:19:de:a2:a0:a4:10:ab:a2:50:24:d7:e0:d3:eb:0b:0a:
         a7:39:cf:8d:14:bb:aa:15:b6:34:9b:38:48:66:c2:33:35:39:
         a5:29:a7:f7:14:76:ea:a4:72:fd:29:9f:f0:78:d0:2f:56:01:
         05:16:b8:db:c5:a5:d4:57:45:19:4c:07:1d:13:3f:fe:36:f4:
         60:5b:42:7d:b8:5b:72:a5:7c:54:e7:6c:92:20:5b:2d:4f:e2:
         73:b4:b8:b4:d0:78:4d:71:6d:59:f4:dd:f1:a2:01:ad:71:3a:
         2b:ed:03:1a:fc:ea:a3:4c:e0:c6:98:fc:f7:18:a4:bc:d9:26:
         00:77:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----