Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C04C38B65D11F19A10B7CDCE1D38B0.roa
File:                     F9C04C38B65D11F19A10B7CDCE1D38B0.roa (raw, json)
Hash identifier:          ed/s5DYJ+dS2wSu50ZtiJcsCkuCjZlCbceDTEyiPBDw=
Subject key identifier:   44:91:AB:99:4C:A0:89:8C:65:FE:0E:B8:AD:1E:0F:FB:A8:E1:25:F5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C04C38B65D11F19A10B7CDCE1D38B0.roa
Signing time:             Tue 22 Sep 2026 08:16:57 +0000
ROA not before:           Tue 22 Sep 2026 08:16:53 +0000
ROA not after:            Sat 07 Nov 2026 08:16:53 +0000
asID:                     401783
IP address blocks:        154.81.162.0/24 maxlen: 24
                          154.81.165.0/24 maxlen: 24
                          154.81.167.0/24 maxlen: 24
                          154.81.168.0/24 maxlen: 24
                          154.81.169.0/24 maxlen: 24
                          154.81.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125432 (0x1e9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 08:16:53 2026 GMT
            Not After : Nov  7 08:16:53 2026 GMT
        Subject: CN=6ab23979-07e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:e0:ef:b6:55:4a:3a:db:00:8c:f4:2c:33:
                    3d:aa:ad:f1:ac:54:cb:fd:7c:57:15:0e:01:ac:2d:
                    fe:9b:44:bd:3b:df:5d:10:f4:cf:3e:ab:1e:4c:15:
                    05:22:d3:0b:10:1c:3c:01:05:4b:37:2a:f0:ad:66:
                    8c:4d:bf:09:74:e7:a2:57:b2:22:99:cb:0f:26:6c:
                    fd:66:7b:ab:2e:8a:c6:45:04:ff:33:62:ce:42:d3:
                    a4:94:46:4d:d8:87:ad:01:11:f9:ed:bf:66:8c:bb:
                    c4:66:17:a9:f4:a3:96:16:0c:68:e5:ca:cd:ca:0f:
                    80:de:e1:d6:89:dd:e0:0f:89:13:f5:06:15:6d:cd:
                    b0:dc:fe:65:00:8a:a5:7d:fc:ca:2c:8b:ca:83:b7:
                    43:ce:1e:69:56:07:4a:8f:4c:53:fb:cf:5f:c2:9b:
                    25:82:63:df:4e:81:8f:12:60:c4:fc:e6:e1:13:c4:
                    ea:88:79:8c:00:fd:0e:9d:03:d3:d4:fb:a4:a0:11:
                    00:66:c2:62:f9:5c:10:54:45:d7:af:12:a2:ba:d5:
                    30:f0:96:d1:13:a5:ba:b3:7a:fa:5d:3f:be:23:53:
                    9e:81:09:06:72:63:5d:27:e8:f7:13:31:92:13:66:
                    33:da:dc:0f:6c:c5:07:9f:95:d9:1d:2f:f5:7e:e1:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:91:AB:99:4C:A0:89:8C:65:FE:0E:B8:AD:1E:0F:FB:A8:E1:25:F5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C04C38B65D11F19A10B7CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.162.0/24
                  154.81.165.0/24
                  154.81.167.0-154.81.169.255
                  154.81.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:39:e2:0b:c4:ad:56:7f:d9:3c:c2:a5:f7:1b:ec:4a:e5:
         f9:8d:3d:62:bb:1e:ac:7a:e4:a7:ea:32:d8:5c:3a:f1:f0:e9:
         c5:65:5a:b4:32:38:73:33:93:87:4f:f1:b2:76:e4:f1:ec:44:
         b3:25:89:a5:10:3b:1a:4e:d7:e1:dc:7b:a4:22:e0:8f:95:1b:
         e5:69:09:4d:26:49:12:80:d7:1a:4f:42:49:03:7c:b3:22:39:
         8e:1c:a6:51:22:26:70:5d:28:50:18:7c:14:bf:a2:c9:a5:ec:
         ed:5e:20:73:43:6b:b3:d8:b0:51:aa:25:ee:9a:09:ac:93:73:
         6b:87:aa:de:f6:4c:1c:dc:1d:f7:c2:b6:33:93:f4:33:11:71:
         1f:ac:e9:e0:53:4c:cf:ff:bb:ed:5e:b1:fa:2e:04:2b:12:e1:
         f8:ea:49:0c:b8:db:3c:c5:46:7d:62:0f:f1:b3:0b:f8:e9:b5:
         7d:94:8a:a7:0f:7f:c1:d6:47:3e:be:17:4d:71:d8:de:c7:8f:
         66:d8:bf:56:db:84:60:37:a1:14:86:1d:38:34:1e:eb:38:c1:
         d5:58:16:96:d2:c3:0e:5c:f7:19:bf:89:63:e3:86:61:b2:50:
         2c:d0:61:b5:1d:a1:44:2a:38:72:cb:d8:2c:81:a9:8e:b9:7f:
         68:d9:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----