Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD429374B5AD11F1BFA1EDCACE1D38B0.roa
File:                     CD429374B5AD11F1BFA1EDCACE1D38B0.roa (raw, json)
Hash identifier:          vkaugiQ4PZguxy1usDOVzF+4SkJ4AxbpU0mS0Ouene4=
Subject key identifier:   A4:28:44:EA:E3:86:FB:F0:36:CD:7A:2E:3F:F6:89:D8:C6:12:9A:2B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD429374B5AD11F1BFA1EDCACE1D38B0.roa
Signing time:             Mon 21 Sep 2026 11:15:51 +0000
ROA not before:           Mon 21 Sep 2026 11:15:47 +0000
ROA not after:            Tue 05 Jan 2027 11:15:47 +0000
asID:                     150008
IP address blocks:        154.206.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125370 (0x1e9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 11:15:47 2026 GMT
            Not After : Jan  5 11:15:47 2027 GMT
        Subject: CN=6ab111e6-4e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:b0:4b:68:05:8d:ce:0c:f8:5c:6f:11:2b:
                    94:9b:79:65:7d:ee:2e:bb:22:f1:95:7a:e7:c0:14:
                    d4:dd:1a:fb:f8:c2:ab:3a:0b:f0:21:f9:40:0a:3d:
                    04:d5:f2:1f:6b:f2:e5:e9:40:fd:00:8d:f8:ed:aa:
                    39:ca:2f:9b:7f:ed:f5:9c:b3:87:ed:d9:c0:0a:81:
                    89:e1:10:1e:d3:b1:12:7e:45:50:92:69:5a:f4:3c:
                    2a:c0:92:66:da:3e:d7:34:1c:04:77:34:7f:f6:94:
                    52:bc:56:ac:54:6f:dd:c7:ad:c1:9d:92:73:eb:80:
                    9a:42:f1:ed:dc:af:b4:40:70:7a:c6:3a:32:1d:c6:
                    b1:4c:08:fe:23:6f:21:53:c6:8d:35:83:95:b8:a9:
                    f2:36:92:79:29:dd:87:3c:2e:cf:2c:2a:15:e1:97:
                    ff:00:58:06:b1:60:18:18:df:2b:f0:d5:f7:50:f2:
                    a1:af:c1:a4:e1:9a:e7:b8:4d:04:25:07:36:7e:7f:
                    5c:e9:e7:c0:1d:7c:33:19:b2:75:dd:00:16:de:2e:
                    f8:cc:6c:31:21:c5:b6:c0:5b:93:90:a5:1d:4e:92:
                    3a:6e:44:8f:65:3d:35:ff:25:34:88:45:13:de:43:
                    76:0b:00:6a:8c:90:09:48:00:4e:44:08:1f:fd:9b:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:44:EA:E3:86:FB:F0:36:CD:7A:2E:3F:F6:89:D8:C6:12:9A:2B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD429374B5AD11F1BFA1EDCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:aa:a0:a2:a4:e5:e4:31:c8:61:da:43:3c:61:5a:e5:9a:
         4e:1d:25:8b:fc:53:42:8e:9f:73:a8:82:ae:c9:22:08:80:e8:
         16:d8:f0:ed:94:07:a8:34:65:3e:bd:3e:ee:7e:99:f6:25:9d:
         a8:c2:ee:31:39:df:70:4c:ff:7c:ed:37:9e:b4:e0:20:8b:c2:
         02:d6:56:db:88:4c:c2:f4:a3:7a:83:1c:32:ca:40:14:c4:30:
         45:ef:1d:e5:d6:47:25:f9:cd:03:98:70:31:39:00:dc:0c:7d:
         53:7b:5e:49:99:09:86:74:49:16:cf:b5:13:b6:db:a3:29:6a:
         33:3e:05:f1:0a:77:84:37:40:2d:4e:fd:5b:ca:c6:52:50:1b:
         53:e9:cb:fd:a6:7f:26:79:f9:be:46:bc:60:8b:51:a9:05:34:
         55:d3:ec:37:e7:e7:fe:68:71:f0:33:ce:1b:18:58:c9:01:ee:
         4a:02:dc:d3:0d:95:be:1d:d9:4f:2a:6c:a6:e6:17:a6:d5:67:
         b9:84:84:a5:09:77:7b:26:6c:c3:23:6e:ad:a7:a5:1d:07:3f:
         71:51:bd:c4:83:09:7c:e4:3b:ab:e5:83:07:5e:8a:1a:dd:6d:
         ab:cd:d5:37:b1:f1:62:d8:e4:ad:a6:32:f1:e0:ff:50:c3:6d:
         76:bb:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----