Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC4DCFACA2511F18E1AD1E9CE1D38B0.roa
File:                     4EC4DCFACA2511F18E1AD1E9CE1D38B0.roa (raw, json)
Hash identifier:          fZnbTrfFzZnHTyWilH896zjJL09HpqIOy2cyuSZlEYE=
Subject key identifier:   44:74:45:C3:9F:FD:54:85:EE:6B:A4:47:A1:1A:45:3F:BB:CE:55:DD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC4DCFACA2511F18E1AD1E9CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 12:21:41 +0000
ROA not before:           Sat 17 Oct 2026 12:21:35 +0000
ROA not after:            Thu 19 Nov 2026 12:21:35 +0000
asID:                     17497
IP address blocks:        154.81.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126639 (0x1eeaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 12:21:35 2026 GMT
            Not After : Nov 19 12:21:35 2026 GMT
        Subject: CN=6ad36855-6778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:c3:41:80:9f:20:ae:bf:fc:f5:1e:a0:58:
                    c7:39:d1:0b:7b:d7:f1:74:a9:11:aa:95:3b:a3:e4:
                    f2:28:31:e5:9d:5a:4a:68:b6:76:0c:ca:5d:1f:e9:
                    ff:3d:74:48:cf:4a:fc:ce:12:17:d2:97:1c:b3:b6:
                    b0:26:df:8a:2e:7f:9b:7e:30:d7:dc:18:fc:f2:ba:
                    d0:f5:1b:93:bb:7d:45:d7:af:3d:fc:78:44:61:65:
                    ac:a4:1e:0e:12:4f:46:ad:1b:a6:12:3c:8a:ec:f3:
                    7e:c8:ba:45:c2:bf:a5:4a:b2:7c:0c:e1:e7:b8:81:
                    4a:f1:98:56:38:1f:ff:12:f6:ec:a8:14:6e:a0:be:
                    8a:9b:9f:11:d7:dc:41:6d:37:e0:32:79:bc:e7:9f:
                    11:5f:f4:e6:8d:2a:c8:e0:f8:be:60:bd:4e:da:10:
                    1f:4a:ac:90:91:0f:b3:01:88:66:76:d8:70:e9:e1:
                    10:72:88:d6:2a:97:54:2d:10:c8:91:ce:89:57:65:
                    bc:ba:a9:0c:fb:47:a8:0e:36:6e:5d:6c:2f:1e:36:
                    6b:fb:0f:f4:18:0f:50:67:20:1a:2c:0f:8b:be:dc:
                    c6:52:14:f6:6b:2a:54:dc:75:a5:38:9f:b9:90:06:
                    a0:5c:f2:18:79:b7:d4:e1:1d:c4:3d:42:97:73:4c:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:45:C3:9F:FD:54:85:EE:6B:A4:47:A1:1A:45:3F:BB:CE:55:DD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC4DCFACA2511F18E1AD1E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:af:3e:23:af:67:7a:2b:a3:cf:8f:d8:d4:96:84:34:b3:
         b6:c3:37:bc:a3:9b:fd:35:e6:78:08:44:a7:a0:59:79:21:b9:
         5a:52:54:7a:00:f0:4b:34:f9:24:4e:42:df:db:a3:bd:d1:93:
         51:e9:05:a0:a3:fa:16:0a:af:aa:f5:2b:3c:d7:ac:fa:85:1d:
         8d:83:40:cf:3e:23:4f:62:b1:9c:28:1b:8e:c5:f7:9d:f6:30:
         da:66:a3:8d:0b:42:b3:b6:d2:6d:ae:1e:ac:0b:dc:f5:ac:8f:
         a8:31:02:89:51:da:2d:07:b1:0e:c4:bd:51:71:5e:0d:2f:96:
         c0:f0:96:80:c3:a7:d3:9f:70:bf:4f:0a:6e:b8:c9:24:15:48:
         ae:5f:fa:bb:a5:a6:a0:3b:08:5d:46:7f:c7:8e:c7:af:44:96:
         b6:76:db:0f:76:30:86:bf:88:84:56:e9:05:d3:f8:6a:0b:b5:
         c0:18:66:8a:1e:27:0d:88:bf:9d:be:6d:97:e9:e4:f7:b1:d2:
         8d:00:b8:66:ec:5a:f8:26:7d:de:48:4c:08:23:83:e6:a4:f4:
         f7:da:b0:c6:92:9a:2c:28:8b:f7:72:86:0b:e7:e3:4a:28:d2:
         31:cd:8f:44:2c:df:31:aa:24:20:db:be:c0:66:8c:9e:1f:f7:
         86:25:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----