Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776DFF88C86811F1A9F83318CF1D38B0.roa
File:                     776DFF88C86811F1A9F83318CF1D38B0.roa (raw, json)
Hash identifier:          2OEpPN5NsrZCwGRubMjR459e7yaGTICEYNtzIMb5vP4=
Subject key identifier:   CB:BD:DE:8E:47:89:BA:11:AB:14:68:E2:55:2D:33:D2:FF:D8:28:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776DFF88C86811F1A9F83318CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:17:23 +0000
ROA not before:           Thu 15 Oct 2026 07:17:19 +0000
ROA not after:            Tue 24 Nov 2026 07:17:19 +0000
asID:                     214413
IP address blocks:        154.194.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126489 (0x1ee19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 07:17:19 2026 GMT
            Not After : Nov 24 07:17:19 2026 GMT
        Subject: CN=6ad07e03-4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:be:4f:2f:a5:98:bb:61:70:69:43:41:48:
                    5e:0f:8b:46:30:9a:d4:71:3d:b7:01:d7:e2:99:2c:
                    c3:80:87:9a:73:a1:a8:d0:83:bb:cd:9f:bc:24:26:
                    a9:39:fd:ea:2b:73:83:c4:d3:48:85:0c:88:10:17:
                    52:52:e0:60:f6:0a:01:d3:62:92:5b:4c:fe:6f:96:
                    62:c7:98:a8:ba:5d:e9:af:18:fc:79:80:ec:80:1d:
                    c4:98:05:08:ba:39:52:ca:68:fa:11:09:1f:46:62:
                    ff:43:bb:3f:24:50:4a:8e:bc:74:0c:b0:1b:38:f8:
                    b4:d8:81:95:e2:9e:11:b9:86:35:3a:ac:a9:6d:ba:
                    d3:5a:46:dd:33:52:d2:e5:ea:9f:36:66:7d:c2:dc:
                    bc:77:13:26:2e:14:2d:f6:f1:24:ec:9c:6b:42:87:
                    03:2e:ec:32:a8:ee:f4:5b:56:7a:be:28:07:ee:05:
                    27:90:c6:f6:6b:5d:e6:db:da:f6:c5:b6:31:bd:21:
                    1f:08:2a:21:cf:be:fb:f8:56:2e:28:a4:fb:72:aa:
                    d9:4c:f5:5a:2e:3b:46:5c:ad:5d:aa:9a:0c:59:37:
                    39:01:67:63:17:5e:cb:ee:fa:e3:41:72:84:3d:d9:
                    4d:84:aa:74:a9:7b:a8:81:7b:ed:53:98:71:62:8e:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:DE:8E:47:89:BA:11:AB:14:68:E2:55:2D:33:D2:FF:D8:28:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776DFF88C86811F1A9F83318CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:1b:aa:19:fe:99:76:31:16:56:b0:76:6a:6e:ef:0d:fb:
         44:e7:88:b9:8f:9e:b2:b8:40:0f:0f:23:04:e7:ec:cc:51:10:
         b2:d7:ce:c1:aa:e5:58:96:1f:02:1b:31:db:40:e0:8a:9a:4f:
         08:21:06:47:f4:f1:29:7a:e1:4f:a1:fb:5b:72:2a:3a:c9:62:
         7d:1a:d9:5b:b2:13:13:83:d4:64:5c:47:f2:67:a8:37:5c:43:
         b3:81:3b:2d:43:bb:af:94:75:68:85:14:7f:c7:37:6b:0f:bc:
         dc:0b:b0:5f:df:42:9f:c3:d8:ec:2f:a9:9f:ea:c5:d7:ff:84:
         f4:4d:5d:a0:59:0c:6f:9e:fc:42:0c:fd:da:d4:53:a7:bf:d1:
         90:41:bd:91:cd:7f:77:02:df:62:40:a8:0a:7d:e1:c0:86:8d:
         61:13:04:60:68:0f:50:d3:22:77:f4:ee:d0:ce:95:a6:59:38:
         11:68:2a:b0:27:33:2d:1a:dd:30:dc:fe:63:b1:b3:9f:c4:92:
         b2:db:d2:ff:c4:dc:3a:bd:02:12:a3:63:15:35:fa:53:88:0d:
         4e:6c:ff:ce:0a:c7:68:57:c2:c4:7e:9d:59:ee:1f:de:76:9a:
         7a:7a:af:65:9b:b5:2e:d0:6b:74:92:29:79:9c:09:cd:be:d6:
         50:f8:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----