Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18363A0B65A11F187943FB8CE1D38B0.roa
File:                     F18363A0B65A11F187943FB8CE1D38B0.roa (raw, json)
Hash identifier:          QVG5VccAkTVW3JOfCj58yObD2juVVP7AUccXjZTsfkk=
Subject key identifier:   E7:B7:7B:F4:55:28:6C:D8:96:EB:E4:D2:AA:6D:8B:93:47:7D:92:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18363A0B65A11F187943FB8CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 07:55:14 +0000
ROA not before:           Tue 22 Sep 2026 07:55:10 +0000
ROA not after:            Fri 09 Oct 2026 07:55:10 +0000
asID:                     136897
IP address blocks:        154.86.156.0/24 maxlen: 24
                          154.86.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125428 (0x1e9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 07:55:10 2026 GMT
            Not After : Oct  9 07:55:10 2026 GMT
        Subject: CN=6ab23462-705a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:00:c7:88:40:4d:de:d2:90:e4:86:bc:da:
                    1e:75:e9:81:19:52:ca:1f:af:33:d6:1e:45:43:cb:
                    0f:b5:50:a6:27:0d:de:4c:cc:b7:5f:8c:a8:09:a0:
                    ef:c3:90:93:ea:5c:0c:dd:52:1d:18:1f:9c:32:d8:
                    94:0b:d8:b7:ee:93:4c:84:48:8f:27:e6:5d:ff:57:
                    1e:5e:99:22:30:17:15:49:d4:a7:10:89:21:66:59:
                    2c:33:82:22:41:1d:91:49:ff:43:45:38:ca:03:8e:
                    c8:9e:35:01:0a:86:35:f6:28:f4:81:ea:6a:18:23:
                    28:82:ba:c6:f8:ae:5d:30:c9:af:93:3b:0d:8d:3e:
                    ec:db:31:fc:c9:90:ad:0f:32:77:ed:0f:d9:02:f9:
                    63:7e:12:22:5e:70:24:3f:ac:34:73:0d:0c:5c:12:
                    dd:d4:5b:d5:1f:86:8a:ee:f1:08:c5:c9:e1:a7:be:
                    57:b9:84:bd:57:26:c7:4b:a4:db:bb:45:91:90:ee:
                    cc:c0:31:80:57:bd:c1:37:c1:71:fd:16:62:ae:5a:
                    4a:87:0e:23:6f:5e:14:93:7f:96:01:cb:59:ed:0d:
                    7b:96:f6:a0:59:0a:41:72:fe:2a:88:4e:82:a8:7e:
                    ca:76:83:59:90:a1:c1:4c:ba:3a:3a:8c:fd:6e:1e:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:7B:F4:55:28:6C:D8:96:EB:E4:D2:AA:6D:8B:93:47:7D:92:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18363A0B65A11F187943FB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:12:f2:8c:cb:2f:31:6f:b9:cd:90:e0:ef:e6:e8:8a:99:6b:
         8d:09:37:bf:c9:4c:c4:1d:c0:e7:0b:d3:1d:68:7a:c8:9b:2a:
         ba:3f:a0:48:a9:e6:0d:d3:d6:6f:64:f1:94:08:33:a7:23:0c:
         b2:0d:ec:50:88:87:44:9c:4d:17:d0:0b:f0:5e:86:40:94:25:
         54:e3:4f:c0:19:cf:28:5f:9d:e5:ef:90:0e:e7:7e:bc:fe:0f:
         61:46:0f:4d:a3:12:fd:fe:9e:0c:36:7e:ae:65:32:94:c1:af:
         67:47:95:af:25:f9:c6:00:6e:ed:7a:9b:2c:53:a0:a1:c8:89:
         15:1c:8e:fb:24:06:89:da:96:84:f7:ff:06:95:0e:0a:79:7a:
         6a:5b:2b:88:2f:da:b9:bd:26:cb:b7:4e:02:ee:b9:d2:4a:79:
         63:b4:7c:ff:84:f9:cd:79:0f:5d:d6:2b:f9:18:57:41:a0:cd:
         52:8b:7d:56:28:80:f6:ec:1d:b2:43:8c:77:01:d9:10:3b:1e:
         dd:73:9b:51:69:8d:fe:33:8b:2f:24:6d:3a:b8:50:69:0f:74:
         64:73:0c:62:d2:d4:06:45:67:b2:ef:29:09:36:d8:85:b4:f9:
         f3:c2:03:ad:5f:ba:27:56:47:c0:f3:48:2d:9a:a6:c8:65:ad:
         31:5e:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----