Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C384FD14D43D11F1BE7A720ECF1D38B0.roa
File:                     C384FD14D43D11F1BE7A720ECF1D38B0.roa (raw, json)
Hash identifier:          ViqQAc1hPcMr+9rEAQ9tnDliU0MdvT+ZYgDx7KXMNP0=
Subject key identifier:   CA:F7:F8:38:FA:78:B9:0A:EC:1A:5B:80:B9:B7:0A:E4:91:DD:78:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F171
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C384FD14D43D11F1BE7A720ECF1D38B0.roa
Signing time:             Fri 30 Oct 2026 08:41:57 +0000
ROA not before:           Fri 30 Oct 2026 08:41:52 +0000
ROA not after:            Mon 07 Dec 2026 08:41:52 +0000
asID:                     219202
IP address blocks:        154.80.129.0/24 maxlen: 24 (superfluous maxlen)
                          154.80.130.0/24 maxlen: 24 (superfluous maxlen)
                          154.80.131.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127345 (0x1f171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 30 08:41:52 2026 GMT
            Not After : Dec  7 08:41:52 2026 GMT
        Subject: CN=6ae45854-d8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:62:3d:91:e7:38:fd:54:49:10:bb:15:1f:
                    8a:01:8b:91:7c:9f:21:36:f2:75:e0:77:51:7b:9a:
                    d0:48:07:65:a6:da:f2:09:c7:7a:27:1f:af:97:00:
                    2c:e9:df:3b:07:2b:f6:ca:f7:1a:b2:c8:e1:cd:34:
                    7c:0e:57:4e:36:00:98:ca:e2:82:35:0c:5c:ba:cf:
                    9c:76:f3:4b:bc:84:b9:9d:f9:51:ec:b3:72:98:4b:
                    9a:59:10:ad:28:1a:dd:88:e3:97:11:6c:58:bb:49:
                    93:25:12:cf:fa:e4:ab:7a:fc:56:3f:b3:d9:ab:38:
                    ec:e8:87:9e:3d:82:91:49:77:4c:92:a0:4d:7c:79:
                    d3:61:82:6e:8e:9e:07:bb:81:7e:6e:44:02:18:43:
                    0b:05:15:3f:13:f4:9d:ae:a5:e8:d4:a3:a7:cd:23:
                    cc:9f:78:17:c9:7e:1b:1c:b4:3b:d7:df:20:d6:e0:
                    3f:1c:b0:a9:f1:01:52:21:a0:cb:9c:34:5c:a7:7d:
                    71:34:4f:62:c1:2a:a1:79:06:89:83:a7:e2:f3:7e:
                    b0:b9:0c:cc:3f:27:d3:e7:df:42:cd:f9:77:40:59:
                    c6:55:3d:c3:3d:ce:63:22:a3:40:e4:46:90:f7:25:
                    3c:88:48:4e:59:64:fc:d4:62:24:eb:bb:cf:46:4b:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:F8:38:FA:78:B9:0A:EC:1A:5B:80:B9:B7:0A:E4:91:DD:78:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C384FD14D43D11F1BE7A720ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.129.0-154.80.131.255

    Signature Algorithm: sha256WithRSAEncryption
         cc:ef:c4:cf:f3:d9:82:0a:ab:4c:fc:3f:57:21:af:f4:81:43:
         b9:5f:7e:7a:89:58:42:db:1a:59:11:68:4f:f7:ef:b9:14:ee:
         8e:92:8d:ee:df:60:6e:4e:4b:02:96:92:0e:4a:2c:b3:92:e0:
         4f:17:1f:97:34:95:bd:83:d8:fd:27:d4:0c:48:b0:a5:c8:b0:
         67:70:8b:a0:35:4f:1a:94:ff:b0:0f:3b:a9:cd:98:15:73:66:
         5e:c9:dc:47:ed:49:90:b4:c1:19:eb:82:57:fd:ef:85:9c:da:
         25:a9:b3:b2:73:1f:b5:ab:6f:e4:2b:72:05:fc:f7:14:51:f5:
         0f:eb:23:5d:cb:e0:41:d2:74:37:a1:c0:ee:c9:74:18:17:33:
         bf:ca:06:d0:b4:f0:d8:9d:68:73:a1:a4:66:e1:64:71:91:56:
         92:c7:63:a0:ff:e6:15:27:28:46:3a:1c:c9:9b:9d:c3:67:e5:
         04:b1:02:dc:30:89:b3:33:56:0a:9e:5a:af:54:db:f6:40:0b:
         8f:95:44:98:84:74:14:f1:19:96:a4:90:a8:f2:63:a0:66:27:
         e9:ad:92:e8:3d:a5:18:10:61:91:ed:66:8b:88:6f:d2:a4:bb:
         2f:6b:c9:89:9d:95:20:98:23:42:8f:90:0d:5a:79:98:02:b5:
         79:2b:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----