Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E48B3BCB4E111F1BE4F6F10CF1D38B0.roa
File:                     0E48B3BCB4E111F1BE4F6F10CF1D38B0.roa (raw, json)
Hash identifier:          b4F9VwZTTFmOp05TOBzV4BTG3INNPDGOWWkFY9BBNVs=
Subject key identifier:   93:C6:12:65:62:15:84:5E:CD:AE:1F:4F:CB:6E:5C:E6:CC:E0:1C:74
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E91F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E48B3BCB4E111F1BE4F6F10CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 10:50:13 +0000
ROA not before:           Sun 20 Sep 2026 10:50:09 +0000
ROA not after:            Tue 27 Oct 2026 10:50:09 +0000
asID:                     219243
IP address blocks:        154.81.2.0/24 maxlen: 24
                          154.81.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125215 (0x1e91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 10:50:09 2026 GMT
            Not After : Oct 27 10:50:09 2026 GMT
        Subject: CN=6aafba65-bd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:99:0d:6e:af:6d:6a:18:ea:6f:90:95:8f:
                    3b:d9:c1:7c:fd:6e:2c:4c:2b:18:8a:80:65:a2:da:
                    11:e8:bb:92:d0:f0:74:9a:6a:d2:a4:23:1b:5c:41:
                    13:09:70:b0:da:6f:57:3c:4f:1d:f0:ab:c4:cc:61:
                    ae:67:1e:6b:e6:18:3d:77:5b:de:96:4a:77:4c:1d:
                    e8:a1:23:6f:67:81:bc:82:79:0b:75:3b:ab:f2:0d:
                    91:a0:ff:12:61:9b:b9:39:4f:a6:79:80:bb:70:cf:
                    2c:27:ed:ee:9b:d6:80:b1:80:63:8c:fe:39:9e:25:
                    33:a1:63:cb:f5:61:aa:0d:5b:de:ea:4e:2c:28:c7:
                    15:bd:90:9a:e8:87:00:01:a9:b6:94:1f:68:8c:81:
                    7b:32:59:75:66:28:a4:83:7a:ed:8a:cb:be:d8:11:
                    c3:c2:21:2e:20:ff:53:71:7f:8a:d7:9d:cd:41:8c:
                    56:bb:20:75:e4:84:cb:05:d9:59:6b:5e:38:5c:4f:
                    29:94:07:bb:21:6c:0f:43:3d:91:44:6f:8d:6f:aa:
                    ca:cc:1e:f5:0c:5c:59:0a:53:45:43:a3:5e:91:1b:
                    8c:97:ee:d0:39:c6:75:40:95:56:db:6f:d0:1c:10:
                    61:0f:41:cc:9c:5b:26:a3:4d:31:63:ba:ea:a3:94:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:12:65:62:15:84:5E:CD:AE:1F:4F:CB:6E:5C:E6:CC:E0:1C:74
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E48B3BCB4E111F1BE4F6F10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:12:f7:7f:c6:1e:a6:67:b0:29:43:3c:5b:b0:ec:77:a5:
         bd:42:8e:19:dc:d3:78:02:28:5d:b3:4d:d9:35:1b:18:4b:27:
         e9:69:b0:1b:b1:f4:5a:62:16:a0:a4:63:99:51:b2:08:c1:9a:
         fc:3d:a7:24:6e:f8:7c:81:8c:48:97:56:1d:8c:b7:cf:16:55:
         25:aa:a7:69:54:ac:54:e9:e3:af:b9:a0:ff:3d:46:ac:a1:4b:
         05:d2:70:37:6d:00:58:1d:be:fa:35:04:0b:be:30:4a:ad:20:
         7d:4d:8f:86:36:63:10:a9:ec:9f:f4:0b:cc:ef:3b:53:4f:46:
         ef:f2:d8:47:11:a4:9e:87:e4:2b:0f:c8:42:dc:3f:6f:96:ca:
         50:55:10:4d:4b:ee:72:0b:48:8e:85:c0:6a:cb:cc:05:c2:fd:
         67:6c:50:1b:1f:5b:bb:94:4d:bb:6b:09:c9:ab:32:b5:fb:4a:
         5d:67:22:61:f0:1f:8c:0d:e3:44:0d:ce:bd:63:e8:bb:60:3a:
         23:a3:d0:2c:bb:51:94:3c:8c:c6:10:a8:86:31:38:00:c6:e1:
         22:50:71:0a:1f:c6:90:81:6f:db:43:c6:fb:7c:d0:f0:20:bc:
         2f:09:c8:78:e9:32:00:96:7f:d2:2d:97:e3:01:34:d5:32:53:
         5a:a9:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----