Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BA7D76D98511F1B01598FECE1D38B0.roa
File:                     F9BA7D76D98511F1B01598FECE1D38B0.roa (raw, json)
Hash identifier:          PjYjv1VPrVqx0PxLF9NahZ/TmLFTxdHf+eVlzp2qqZc=
Subject key identifier:   E3:1F:77:B5:BC:26:9B:F9:24:AA:B3:35:9F:42:05:5B:A3:BC:26:D3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F34E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BA7D76D98511F1B01598FECE1D38B0.roa
Signing time:             Fri 06 Nov 2026 02:01:27 +0000
ROA not before:           Fri 06 Nov 2026 02:01:23 +0000
ROA not after:            Sun 21 Oct 2029 02:01:23 +0000
asID:                     17561
IP address blocks:        154.216.138.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127822 (0x1f34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 02:01:23 2026 GMT
            Not After : Oct 21 02:01:23 2029 GMT
        Subject: CN=6aed34f7-c555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:84:c0:7f:6a:a6:3d:2c:be:cd:3f:40:e7:
                    31:ce:1a:b0:29:2b:35:0c:ab:c1:ad:98:76:09:b1:
                    21:a6:0b:76:ce:e8:c8:0b:72:30:92:3c:d8:b5:5f:
                    0f:3f:67:06:04:29:24:2b:e3:cd:da:17:15:50:e3:
                    fd:52:bf:cf:d4:83:b6:2c:be:cc:5a:ed:43:c7:f4:
                    1d:e3:93:83:57:c2:7d:35:fd:d1:9e:b0:9d:2f:9c:
                    3d:ff:2c:a9:bd:b3:f4:16:ef:1e:95:39:eb:70:35:
                    07:85:c6:9d:ad:2f:50:0a:e0:00:f5:cc:6a:0d:ee:
                    47:de:a1:0e:a8:5b:52:3b:f9:a4:91:f2:a5:4b:7b:
                    1e:e4:90:cb:cb:be:ee:11:4c:49:ce:7d:c8:eb:c0:
                    7d:45:66:72:6e:da:d0:f2:52:ff:84:03:5a:8d:7c:
                    b2:93:f7:cd:d7:04:1d:36:ec:fd:5c:bc:f7:42:07:
                    d3:d5:3b:1c:40:60:fa:f5:23:e2:b7:92:36:12:b1:
                    2d:31:76:a1:99:e7:8f:df:92:a9:29:cf:8a:d3:b7:
                    de:70:b9:ad:b3:89:0d:7a:c9:19:8a:2e:a7:09:1a:
                    9a:d8:ef:1b:be:75:e7:39:e5:3b:85:cc:bd:6f:8f:
                    88:b2:ae:bc:ef:06:82:f9:d5:e8:13:f0:40:c7:ff:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:77:B5:BC:26:9B:F9:24:AA:B3:35:9F:42:05:5B:A3:BC:26:D3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BA7D76D98511F1B01598FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:50:1f:31:10:b8:06:52:92:2f:4d:43:c7:50:4b:d7:99:39:
         a0:d1:1f:06:65:01:b8:7b:ae:3f:2a:44:1a:10:00:62:d1:ea:
         ac:fe:7f:3e:24:61:fe:14:56:88:06:a3:ac:65:b6:e9:93:7a:
         f0:eb:d7:41:cc:e0:d9:3f:43:73:07:5c:77:14:a3:8a:57:17:
         be:b3:88:11:7b:c7:27:ce:3f:bf:0d:1f:6e:c1:0f:f0:74:37:
         04:76:0d:fa:99:63:cd:3a:7f:ea:01:a1:ed:f1:0a:66:6e:43:
         92:51:17:dd:fa:58:89:0e:c5:54:7c:58:ab:29:4f:a4:a4:eb:
         3d:19:97:7d:fb:6a:0f:45:51:02:8d:48:d1:01:36:ee:39:1a:
         d1:9d:fa:b4:e3:dc:5d:fc:aa:7e:08:de:15:ee:95:58:2e:31:
         62:3e:2d:bd:d5:3d:73:87:97:0a:07:e9:46:30:05:b7:cc:33:
         65:42:d1:96:c3:2b:c7:2d:26:d1:4d:7f:a2:93:50:71:d2:e2:
         8d:fa:3c:78:07:22:cb:56:a9:8c:09:1c:e8:ca:95:1d:73:63:
         1b:54:97:61:73:ef:e9:ea:ec:bd:17:b5:02:4f:a7:75:b2:57:
         f8:80:34:b9:9d:77:ff:d4:25:8a:39:90:24:8a:99:d9:8d:e5:
         84:2c:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----