Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A062DD8B4D711F1827E47D4CE1D38B0.roa
File:                     6A062DD8B4D711F1827E47D4CE1D38B0.roa (raw, json)
Hash identifier:          uZAmqacEegBFzMeIMRPKnF7YAjCzIw1HSze6pEq0gZ0=
Subject key identifier:   E6:4E:D3:14:D3:13:41:0D:5D:83:3F:DB:2F:96:1B:8E:8D:74:FB:30
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A062DD8B4D711F1827E47D4CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:41:12 +0000
ROA not before:           Sun 20 Sep 2026 09:41:08 +0000
ROA not after:            Tue 27 Oct 2026 09:41:08 +0000
asID:                     138915
IP address blocks:        154.206.64.0/24 maxlen: 24
                          154.206.65.0/24 maxlen: 24
                          154.206.66.0/24 maxlen: 24
                          154.206.68.0/23 maxlen: 24
                          154.206.70.0/23 maxlen: 24
                          154.206.78.0/24 maxlen: 24
                          154.206.79.0/24 maxlen: 24
                          154.206.80.0/23 maxlen: 24
                          154.206.82.0/23 maxlen: 24
                          154.206.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 19:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125191 (0x1e907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:41:08 2026 GMT
            Not After : Oct 27 09:41:08 2026 GMT
        Subject: CN=6aafaa38-60c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:d9:cb:0b:a0:f5:a4:c1:6a:5c:8a:1a:45:
                    3f:4d:99:b3:48:50:1e:34:94:d1:ae:65:20:b8:81:
                    a1:ac:6b:2b:f0:b0:de:1b:74:14:aa:5d:b3:50:e5:
                    e5:ec:b4:4c:4c:05:7b:40:47:95:5e:20:6f:65:87:
                    21:19:23:96:ae:c1:d4:ca:f8:52:52:01:81:16:49:
                    20:70:c3:23:da:09:2c:1e:1b:d4:2a:d9:54:c4:81:
                    d6:c7:7d:cc:39:7f:e6:97:83:41:92:7e:79:83:bf:
                    39:a9:36:68:69:bd:8f:ed:57:38:cf:ed:fb:8e:b3:
                    15:73:fc:4b:21:9d:16:20:45:ed:85:eb:50:78:1d:
                    a9:83:3a:c8:bc:c8:0a:76:c7:1e:16:e5:ba:ef:f7:
                    e5:af:05:23:2c:72:20:64:bd:f3:9b:86:61:ac:fa:
                    f5:1b:9b:b8:19:e9:12:ab:76:1d:35:9c:89:93:eb:
                    71:21:bf:83:29:30:ab:99:96:ca:dc:10:95:a4:e0:
                    5a:e4:a8:bd:ef:7e:39:aa:6a:67:a2:cc:5b:f4:23:
                    1c:2f:db:19:43:80:1f:36:6f:af:e4:e3:18:79:f8:
                    b4:b9:83:50:de:2e:3b:ac:37:f7:d6:49:de:f9:47:
                    71:9e:d1:ff:99:30:c8:5c:58:68:b5:9e:51:7b:38:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4E:D3:14:D3:13:41:0D:5D:83:3F:DB:2F:96:1B:8E:8D:74:FB:30
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A062DD8B4D711F1827E47D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.64.0-154.206.66.255
                  154.206.68.0/22
                  154.206.78.0-154.206.85.255

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:dc:2f:d5:13:3b:96:cf:f0:b3:8d:c8:bb:c9:8f:d3:a9:
         a3:94:d1:bb:e8:5c:f5:73:16:d9:94:d9:e9:d8:14:a0:07:6d:
         95:b9:b9:2b:cb:d4:c3:73:85:db:98:d5:11:48:5f:76:17:d8:
         4b:ae:18:a3:b9:99:67:a7:b6:e9:3a:3b:6b:6b:2b:97:20:a6:
         5c:e4:92:35:9b:dc:0e:d7:04:28:44:2f:e2:3a:e3:e6:7f:05:
         78:0f:b5:bf:72:c6:17:48:e6:12:3e:be:b0:94:0a:32:09:53:
         bd:f1:e9:47:d9:61:6b:bb:68:4e:9f:ba:40:ef:f3:57:d1:09:
         95:02:a2:40:14:53:68:8e:f6:32:39:2e:88:b8:7b:3e:c9:57:
         55:7a:35:ce:a3:59:79:be:4f:c5:75:de:22:0f:81:4d:21:e1:
         44:98:9c:cc:18:c4:87:1b:4a:13:b6:31:73:32:df:e1:ce:a4:
         c5:19:06:e1:84:e3:ae:59:eb:76:c0:c8:bc:9e:bf:77:c2:af:
         fc:63:8e:e8:4b:ed:7b:1c:46:51:cb:f5:93:56:b7:f4:47:8f:
         8e:0e:cc:8a:71:ac:7b:95:8d:c6:f4:2b:eb:88:49:40:8d:27:
         2e:36:b1:be:6a:47:bc:4e:77:d5:c4:66:41:27:af:31:eb:19:
         3d:68:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----