Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0AC66027B111F1A9BF86B6DAE4EC9C.roa
File:                     EE0AC66027B111F1A9BF86B6DAE4EC9C.roa (raw, json)
Hash identifier:          yIsF7y7G9zJXR5dIUIDPxlSt7EIjlYAOSCJcHGdWn70=
Subject key identifier:   D9:57:87:E0:75:35:84:96:14:45:CF:6B:D2:63:4C:D7:EE:44:7C:FC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C0C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0AC66027B111F1A9BF86B6DAE4EC9C.roa
Signing time:             Tue 24 Mar 2026 18:47:39 +0000
ROA not before:           Tue 24 Mar 2026 18:47:33 +0000
ROA not after:            Thu 30 Apr 2026 18:47:33 +0000
asID:                     18013
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114881 (0x1c0c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 24 18:47:33 2026 GMT
            Not After : Apr 30 18:47:33 2026 GMT
        Subject: CN=69c2dc4a-796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:d2:ce:ce:00:d7:ab:f1:60:2a:de:77:91:
                    75:47:36:dc:35:70:3b:98:23:6a:50:9a:9c:d2:df:
                    89:c5:e7:e9:e5:24:0c:1c:f4:2e:58:49:50:d9:fb:
                    dd:f6:a0:50:01:4b:0e:51:52:c6:56:c1:ac:d9:99:
                    f3:04:b3:3f:69:25:e2:46:95:9e:04:d6:39:0a:a8:
                    e5:40:86:d6:3f:4a:80:57:0a:6a:f2:a9:a1:8c:97:
                    a3:57:9d:e9:4f:67:df:05:4e:d7:f4:d3:8d:f4:e5:
                    7f:81:82:46:4b:34:1c:85:25:13:11:0d:22:6e:f8:
                    6f:b1:df:03:32:da:48:f2:50:8a:57:bc:d3:d3:0d:
                    80:be:72:dc:eb:97:01:1b:88:61:2c:1d:93:08:72:
                    d9:3e:a9:f7:86:7b:40:70:e2:f5:b2:c4:9c:35:d1:
                    e6:dd:51:3b:2d:d7:ab:76:f5:46:e7:83:6d:a0:b4:
                    cc:96:ee:e2:84:cc:55:c8:73:2e:ed:f6:25:3e:f9:
                    1f:67:8f:43:dc:db:bf:9e:c1:59:95:3b:71:0d:00:
                    ed:7f:6a:9f:0f:c1:5b:5a:9f:73:e3:86:44:fa:4d:
                    46:0d:84:80:81:86:9a:9b:f3:f5:0e:9b:d5:bb:50:
                    83:17:bf:3c:26:2c:1c:dc:97:42:95:59:48:4f:ae:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:87:E0:75:35:84:96:14:45:CF:6B:D2:63:4C:D7:EE:44:7C:FC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0AC66027B111F1A9BF86B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:be:e2:bb:1a:f3:1e:fc:c8:49:8b:62:1f:46:69:86:bb:
         c2:58:2a:df:d1:f4:95:88:ea:23:44:25:27:cc:48:09:10:8a:
         3f:ba:b3:56:e8:34:51:fb:c9:b8:47:29:3d:61:75:53:db:77:
         e5:92:b4:96:a4:83:e5:c1:10:0c:d4:c5:0c:bf:48:62:89:e9:
         df:97:ef:01:99:9d:8b:7f:08:62:b2:75:44:2b:82:6f:9a:19:
         ed:fa:ab:2a:4b:da:ff:19:4d:65:f1:f8:e1:37:c4:eb:3f:9e:
         34:8d:5e:0d:c7:44:09:90:2a:7b:ae:f8:d0:40:f3:39:ce:5d:
         a1:32:59:43:fe:ca:a3:88:c9:cb:dc:45:9e:f0:d0:b5:6d:8d:
         02:f9:76:48:3d:3c:76:56:24:aa:a7:0d:bb:91:73:32:4d:9f:
         b2:bf:e2:56:52:d6:ed:ff:17:25:1f:85:f7:de:78:22:3b:7d:
         b6:8c:72:ed:14:17:83:8a:83:b6:af:68:57:7d:de:fa:8c:8a:
         8e:34:f3:b3:7f:1f:ef:15:0f:79:dd:01:cf:dd:f4:ac:6c:e5:
         1a:59:79:d6:71:a8:ea:52:f0:89:ea:2e:f1:9d:20:61:2c:dd:
         09:bb:44:c2:55:81:94:62:39:41:90:9d:95:5f:c1:88:16:ed:
         63:17:67:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcDBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MTg0NzMzWhcNMjYwNDMwMTg0NzMzWjAYMRYw
FAYDVQQDEw02OWMyZGM0YS03OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqbrSzs4A16vxYCred5F1RzbcNXA7mCNqUJqc0t+Jxefp5SQMHPQuWElQ
2fvd9qBQAUsOUVLGVsGs2ZnzBLM/aSXiRpWeBNY5CqjlQIbWP0qAVwpq8qmhjJej
V53pT2ffBU7X9NON9OV/gYJGSzQchSUTEQ0ibvhvsd8DMtpI8lCKV7zT0w2AvnLc
65cBG4hhLB2TCHLZPqn3hntAcOL1ssScNdHm3VE7LderdvVG54NtoLTMlu7ihMxV
yHMu7fYlPvkfZ49D3Nu/nsFZlTtxDQDtf2qfD8FbWp9z44ZE+k1GDYSAgYaam/P1
DpvVu1CDF788Jiwc3JdClVlIT67sowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNlX
h+B1NYSWFEXPa9JjTNfuRHz8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRTBBQzY2MDI3QjExMUYxQTlCRjg2QjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqmL7iuxrzHvzISYtiH0ZphrvCWCrf0fSViOojRCUnzEgJEIo/urNW
6DRR+8m4Ryk9YXVT23flkrSWpIPlwRAM1MUMv0hiienfl+8BmZ2LfwhisnVEK4Jv
mhnt+qsqS9r/GU1l8fjhN8TrP540jV4Nx0QJkCp7rvjQQPM5zl2hMllD/sqjiMnL
3EWe8NC1bY0C+XZIPTx2ViSqpw27kXMyTZ+yv+JWUtbt/xclH4X33ngiO322jHLt
FBeDioO2r2hXfd76jIqONPOzfx/vFQ953QHP3fSsbOUaWXnWcajqUvCJ6i7xnSBh
LN0Ju0TCVYGUYjlBkJ2VX8GIFu1jF2ek
-----END CERTIFICATE-----