Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70EC99E4B4C711F1A09965EFCE1D38B0.roa
File:                     70EC99E4B4C711F1A09965EFCE1D38B0.roa (raw, json)
Hash identifier:          SaUzf7qct6kbxnCDLNh+dnD2zrKafBeTUztFfg7pLmY=
Subject key identifier:   05:6B:26:2D:8B:67:89:DF:67:23:06:86:0C:0B:E7:BB:29:35:84:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70EC99E4B4C711F1A09965EFCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 07:46:51 +0000
ROA not before:           Sun 20 Sep 2026 07:46:47 +0000
ROA not after:            Sat 24 Oct 2026 07:46:47 +0000
asID:                     58931
IP address blocks:        154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125161 (0x1e8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 07:46:47 2026 GMT
            Not After : Oct 24 07:46:47 2026 GMT
        Subject: CN=6aaf8f6b-247d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:d2:be:f3:e3:71:9b:c8:4a:a2:94:30:aa:
                    e6:63:25:d9:f6:53:ce:5f:be:de:5c:98:8f:af:f5:
                    59:1e:d1:11:86:e9:24:73:e8:61:cd:69:06:29:67:
                    1e:ef:e6:35:5d:03:ec:e7:06:0b:fa:6b:db:4e:3d:
                    b0:03:15:b7:0b:f1:b9:87:88:d5:1a:3b:a8:7d:56:
                    f7:0c:ce:85:0c:12:96:9f:23:44:af:b9:f7:fe:fe:
                    d6:b7:9f:11:0a:98:a1:c4:d9:cf:6b:0d:7e:7b:0b:
                    bf:20:54:d1:e8:70:ab:90:2f:b0:0e:48:8b:87:74:
                    b9:d5:68:d7:a1:4e:0b:b0:8b:ab:d0:6b:37:5a:b8:
                    cc:3b:4c:15:62:9e:f5:76:4f:db:57:38:df:9d:10:
                    8d:2b:94:be:05:8f:4c:b3:30:8f:4d:e8:d8:05:20:
                    0d:84:3e:8d:05:de:ea:8e:b5:be:82:00:40:77:97:
                    96:ad:24:84:48:32:09:4c:97:fc:3c:e5:b0:67:36:
                    a7:b6:33:fb:c3:27:95:de:dd:6e:44:9e:51:6c:a0:
                    0d:90:63:1d:86:8f:f4:36:e2:e3:ec:c8:a6:25:f7:
                    a2:9f:46:16:d1:66:2e:c9:43:cf:51:6f:90:06:20:
                    d2:8d:7b:98:1c:08:f9:b1:b0:79:c7:b3:09:e7:ce:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6B:26:2D:8B:67:89:DF:67:23:06:86:0C:0B:E7:BB:29:35:84:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70EC99E4B4C711F1A09965EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:c5:a9:5a:10:33:b6:11:f3:cb:9f:e6:9f:15:7a:61:7d:
         64:22:1c:c2:0c:d8:4d:98:00:4b:65:66:37:21:87:62:3c:a2:
         0d:0e:d0:00:14:3d:4d:a9:45:c1:bb:a8:17:12:3a:55:d6:07:
         d6:f5:fc:77:02:4e:3f:fd:28:b7:27:37:0c:ca:13:15:85:8a:
         21:8d:a9:79:6a:25:91:94:60:0f:7d:4c:a9:47:82:ab:9b:41:
         d9:01:c5:88:f7:0f:c1:f0:38:9d:11:08:6d:95:74:b8:c2:d5:
         74:4b:2c:8d:65:82:6f:d4:45:e4:1d:73:cb:34:d0:aa:24:46:
         23:f9:b8:79:ba:4a:47:a4:12:27:74:ae:3a:66:33:ee:fe:90:
         aa:e7:84:da:6a:61:02:73:de:6c:f4:16:49:a9:40:35:65:2b:
         0f:6b:3d:a0:af:98:a1:69:7a:df:fd:4d:3f:cf:93:1b:0e:89:
         0b:ec:98:31:05:1c:7e:dc:e0:08:9d:59:7e:e0:b8:08:e3:c4:
         4b:53:d8:89:11:92:d2:4f:7d:1d:10:8a:01:f3:e3:8b:59:dc:
         61:bc:65:8b:a8:cb:9e:56:42:dc:a6:db:ea:9f:21:d9:b1:0c:
         16:7e:3e:5d:7d:25:98:c0:2b:88:e0:82:8d:e2:0d:25:31:75:
         87:e5:ba:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAejpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIwMDc0NjQ3WhcNMjYxMDI0MDc0NjQ3WjAYMRYw
FAYDVQQDEw02YWFmOGY2Yi0yNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5FzSvvPjcZvISqKUMKrmYyXZ9lPOX77eXJiPr/VZHtERhukkc+hhzWkG
KWce7+Y1XQPs5wYL+mvbTj2wAxW3C/G5h4jVGjuofVb3DM6FDBKWnyNEr7n3/v7W
t58RCpihxNnPaw1+ewu/IFTR6HCrkC+wDkiLh3S51WjXoU4LsIur0Gs3WrjMO0wV
Yp71dk/bVzjfnRCNK5S+BY9MszCPTejYBSANhD6NBd7qjrW+ggBAd5eWrSSESDIJ
TJf8POWwZzantjP7wyeV3t1uRJ5RbKANkGMdho/0NuLj7MimJfein0YW0WYuyUPP
UW+QBiDSjXuYHAj5sbB5x7MJ585ygwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAVr
Ji2LZ4nfZyMGhgwL57spNYSsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MEVDOTlFNEI0QzcxMUYxQTA5OTY1RUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQCS2cWpWhAzthHzy5/mnxV6YX1kIhzCDNhNmABLZWY3IYdiPKINDtAA
FD1NqUXBu6gXEjpV1gfW9fx3Ak4//Si3JzcMyhMVhYohjal5aiWRlGAPfUypR4Kr
m0HZAcWI9w/B8DidEQhtlXS4wtV0SyyNZYJv1EXkHXPLNNCqJEYj+bh5ukpHpBIn
dK46ZjPu/pCq54TaamECc95s9BZJqUA1ZSsPaz2gr5ihaXrf/U0/z5MbDokL7Jgx
BRx+3OAInVl+4LgI48RLU9iJEZLST30dEIoB8+OLWdxhvGWLqMueVkLcptvqnyHZ
sQwWfj5dfSWYwCuI4IKN4g0lMXWH5bpH
-----END CERTIFICATE-----