Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A7D91EB00711F1BBA4AAD4CE1D38B0.roa
File:                     06A7D91EB00711F1BBA4AAD4CE1D38B0.roa (raw, json)
Hash identifier:          5YgKWipEfZMfmXxJSVIbmfWd6q1xyXJneI49S3AaIuk=
Subject key identifier:   8D:6E:AB:12:D3:85:2D:A4:7E:32:49:CE:76:1E:96:A2:E9:03:E3:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E802
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A7D91EB00711F1BBA4AAD4CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 06:39:25 +0000
ROA not before:           Mon 14 Sep 2026 06:39:21 +0000
ROA not after:            Thu 22 Oct 2026 06:39:21 +0000
asID:                     8796
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124930 (0x1e802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 06:39:21 2026 GMT
            Not After : Oct 22 06:39:21 2026 GMT
        Subject: CN=6aa7969d-3636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:e4:35:fa:30:17:be:d0:c7:fa:e6:31:6f:
                    15:82:76:3c:21:89:80:c7:10:22:7e:d6:3e:70:c3:
                    ba:f3:7e:69:4d:05:e3:ae:91:c5:8f:3f:aa:84:53:
                    80:b0:6e:53:9e:f5:27:f5:2d:58:31:ff:60:03:69:
                    42:79:ac:c0:f1:85:4a:f2:e9:20:a6:5a:22:4b:bb:
                    df:31:36:02:07:c8:62:85:ff:4b:d4:6f:83:09:bc:
                    fa:42:8f:a1:5c:8f:8a:bd:17:35:77:4b:f3:6a:fc:
                    ed:32:5b:79:15:29:da:9b:4b:f4:46:9f:9c:d8:66:
                    8d:08:85:3d:4a:d8:0f:d8:29:ec:36:01:9d:f8:0d:
                    7b:f0:4b:80:08:8c:39:6b:50:31:18:b2:72:7b:a4:
                    79:7b:68:6c:58:f7:90:e3:7b:16:47:e6:6d:4b:a2:
                    50:36:e1:db:79:64:6b:5b:3d:62:1a:80:03:49:b9:
                    2c:55:cf:c8:4a:30:e6:9d:01:bc:4d:d2:e4:08:35:
                    d8:c2:16:a5:5d:5d:f1:fa:36:7e:4e:4d:85:d2:61:
                    04:b5:32:a3:8c:3c:88:d9:bc:b4:a2:0e:41:0b:f9:
                    94:9b:f1:75:ee:fc:12:66:8f:09:b9:3b:9e:12:e2:
                    58:54:ba:f4:e2:64:ce:44:63:10:4b:05:90:01:09:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6E:AB:12:D3:85:2D:A4:7E:32:49:CE:76:1E:96:A2:E9:03:E3:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A7D91EB00711F1BBA4AAD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:44:d6:fd:bc:be:e1:ec:a3:ab:ca:65:aa:82:f9:f1:9d:
         f4:25:f7:f8:4f:cd:1f:8a:e1:39:e5:42:44:a2:31:3b:6f:be:
         7e:39:f3:0e:20:57:85:62:ca:01:bd:96:d1:c0:26:fc:d1:bb:
         a8:ae:c1:9a:1f:0a:21:45:38:47:51:df:ef:c9:6b:16:fe:37:
         49:cd:7a:e7:72:05:35:48:3e:a3:ca:22:e0:d9:69:67:06:03:
         2f:32:4a:00:1a:46:48:c6:fd:d1:c6:73:6c:fb:47:92:5e:1e:
         44:d7:fa:ac:3d:87:6d:88:9d:9f:2c:b1:32:4a:1b:d6:28:6d:
         cc:20:a0:cc:04:b5:ee:3d:0b:31:98:f9:b7:6d:82:73:2e:35:
         3a:d7:38:89:0d:21:03:3b:6d:6e:aa:2b:39:af:ca:b6:f4:86:
         ea:df:28:4c:31:3b:f7:14:dc:88:1c:8f:07:6e:bd:ab:9f:3f:
         d3:a1:b2:b9:55:cd:0b:3e:50:ed:46:15:61:ba:f8:f9:8f:39:
         45:f8:b5:ef:dc:24:d2:e5:50:51:ec:4a:1a:60:f1:95:2c:67:
         79:73:78:7d:59:e7:2b:f4:c0:6c:2d:9b:79:76:c0:55:9c:cd:
         9d:eb:dd:c4:db:bc:6e:f7:d7:73:fe:a0:bf:32:9f:62:da:c0:
         44:8d:41:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAegCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE0MDYzOTIxWhcNMjYxMDIyMDYzOTIxWjAYMRYw
FAYDVQQDEw02YWE3OTY5ZC0zNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuvPkNfowF77Qx/rmMW8VgnY8IYmAxxAiftY+cMO6835pTQXjrpHFjz+q
hFOAsG5TnvUn9S1YMf9gA2lCeazA8YVK8ukgploiS7vfMTYCB8hihf9L1G+DCbz6
Qo+hXI+KvRc1d0vzavztMlt5FSnam0v0Rp+c2GaNCIU9StgP2CnsNgGd+A178EuA
CIw5a1AxGLJye6R5e2hsWPeQ43sWR+ZtS6JQNuHbeWRrWz1iGoADSbksVc/ISjDm
nQG8TdLkCDXYwhalXV3x+jZ+Tk2F0mEEtTKjjDyI2by0og5BC/mUm/F17vwSZo8J
uTueEuJYVLr04mTORGMQSwWQAQmcuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI1u
qxLThS2kfjJJznYelqLpA+P2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNkE3RDkxRUIwMDcxMUYxQkJBNEFBRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQCH0UTW/by+4eyjq8plqoL58Z30Jff4T80fiuE55UJEojE7b75+OfMO
IFeFYsoBvZbRwCb80buorsGaHwohRThHUd/vyWsW/jdJzXrncgU1SD6jyiLg2Wln
BgMvMkoAGkZIxv3RxnNs+0eSXh5E1/qsPYdtiJ2fLLEyShvWKG3MIKDMBLXuPQsx
mPm3bYJzLjU61ziJDSEDO21uqis5r8q29Ibq3yhMMTv3FNyIHI8Hbr2rnz/TobK5
Vc0LPlDtRhVhuvj5jzlF+LXv3CTS5VBR7EoaYPGVLGd5c3h9Wecr9MBsLZt5dsBV
nM2d693E27xu99dz/qC/Mp9i2sBEjUEL
-----END CERTIFICATE-----