Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6F994EC9EE11F1A8F4B10ACF1D38B0.roa
File:                     BB6F994EC9EE11F1A8F4B10ACF1D38B0.roa (raw, json)
Hash identifier:          H4Clgh7GizjIPNkl+oB0tf3YrFEGk7J2TAYZdSwlxN8=
Subject key identifier:   CE:44:35:D5:C9:E4:1B:2D:3F:E3:4B:4B:B4:14:AF:73:F8:C3:86:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6F994EC9EE11F1A8F4B10ACF1D38B0.roa
Signing time:             Sat 17 Oct 2026 05:51:01 +0000
ROA not before:           Sat 17 Oct 2026 05:50:56 +0000
ROA not after:            Mon 16 Nov 2026 05:50:56 +0000
asID:                     17497
IP address blocks:        154.196.216.0/21 maxlen: 24
                          154.196.216.0/24 maxlen: 24
                          154.196.217.0/24 maxlen: 24
                          154.196.218.0/24 maxlen: 24
                          154.196.219.0/24 maxlen: 24
                          154.196.220.0/24 maxlen: 24
                          154.196.221.0/24 maxlen: 24
                          154.196.222.0/24 maxlen: 24
                          154.197.26.0/24 maxlen: 24
                          154.197.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126579 (0x1ee73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 05:50:56 2026 GMT
            Not After : Nov 16 05:50:56 2026 GMT
        Subject: CN=6ad30cc5-8c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:9f:7b:b0:8d:bd:dc:d0:19:c2:87:e7:55:
                    d5:39:36:07:c9:3e:cb:4c:0f:e8:49:38:7e:92:a2:
                    d7:98:74:50:90:c4:f1:71:b0:a3:da:52:67:ee:ab:
                    ac:0d:fe:cf:9b:15:d5:0e:a3:3d:f5:13:a0:ae:c1:
                    f4:76:5c:88:26:d5:7b:20:40:ec:7e:89:9e:80:6c:
                    35:6d:2a:08:80:f3:de:dd:aa:bd:85:96:28:a9:b2:
                    df:6a:52:cd:59:ce:51:ba:57:44:a2:1d:f5:98:1f:
                    41:cf:e9:a3:d4:60:8d:3f:ed:ee:5f:e5:62:37:7a:
                    d4:46:dd:ee:71:07:ac:1d:b2:dd:b4:3c:d8:7d:c0:
                    bb:ec:53:ff:e7:bb:48:cd:38:7c:a6:99:f7:80:bf:
                    26:c1:f9:71:c2:e7:3b:9e:3f:9d:16:40:aa:ee:78:
                    a1:c4:44:ff:8b:9a:28:ee:39:b8:14:27:81:50:ad:
                    17:d1:cd:cb:83:a8:9f:90:7b:3c:d2:6d:39:45:21:
                    4c:56:ae:68:13:63:06:1a:be:2e:f8:2e:fa:be:6f:
                    3b:63:ba:8e:26:7d:e9:25:e5:ba:4a:9a:78:bc:6c:
                    60:92:04:15:02:06:25:27:59:26:f5:54:c6:18:34:
                    e3:e8:6d:3a:d1:e3:60:a1:ca:69:dd:43:25:cb:2c:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:44:35:D5:C9:E4:1B:2D:3F:E3:4B:4B:B4:14:AF:73:F8:C3:86:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6F994EC9EE11F1A8F4B10ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.216.0/21
                  154.197.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:10:85:ac:2d:38:ee:22:18:d3:58:b3:20:82:2e:0f:d1:71:
         7d:b1:c4:e3:d4:40:5e:8f:36:9c:59:a9:7f:80:72:b3:7b:be:
         88:bf:11:fa:53:e4:22:ed:3d:5f:68:b9:10:11:df:cd:44:8c:
         9e:7d:f2:f1:c3:9d:7c:33:d1:19:f1:ba:1c:38:a1:d8:51:f0:
         fc:41:c9:00:2a:92:fd:88:aa:e0:96:a6:11:4d:69:f0:b5:08:
         07:08:df:dd:14:c8:e2:ce:4c:e9:cc:d8:71:20:4d:65:ae:ed:
         f4:be:84:fd:0e:bc:41:c2:c0:a5:5d:80:2a:1b:c2:98:15:e9:
         df:50:8c:fd:e7:ad:7a:87:2e:15:7b:aa:ec:20:4e:cc:5f:5b:
         4d:a9:78:57:ab:6a:00:48:54:c6:ea:76:ce:0c:ac:7d:f3:cf:
         88:26:8a:17:57:cd:95:c4:42:25:9c:d9:c0:1b:1c:0f:59:1d:
         e4:16:7f:54:bd:c5:f3:64:3c:38:6d:b3:b9:5c:a3:74:ad:a1:
         b7:94:68:2c:aa:40:71:9f:7b:f1:fa:d7:b6:dc:23:af:6c:3e:
         42:41:ca:7c:ed:0c:ac:b1:92:fa:73:37:8e:0a:c3:a4:10:07:
         5e:4b:fb:b8:89:6a:f9:b6:59:ab:80:83:eb:c3:33:04:7b:cc:
         96:9c:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----