Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24E91B74B0EB11F1BF1C8AB8CE1D38B0.roa
File:                     24E91B74B0EB11F1BF1C8AB8CE1D38B0.roa (raw, json)
Hash identifier:          45aRQBNaZ7B6sYlYYolpf5xZPWlJJJWchvSgD9YD20c=
Subject key identifier:   D6:C4:FB:CA:3C:C1:23:9D:C1:56:12:12:98:E8:A5:5C:0A:AF:EC:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E865
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24E91B74B0EB11F1BF1C8AB8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:52:21 +0000
ROA not before:           Tue 15 Sep 2026 09:52:17 +0000
ROA not after:            Wed 21 Oct 2026 09:52:17 +0000
asID:                     32043
IP address blocks:        154.194.5.0/24 maxlen: 24
                          154.203.8.0/22 maxlen: 24
                          154.203.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125029 (0x1e865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 09:52:17 2026 GMT
            Not After : Oct 21 09:52:17 2026 GMT
        Subject: CN=6aa91555-8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:f4:40:83:bd:2b:1f:f7:56:b5:1a:41:86:
                    2b:94:8c:32:c8:81:b4:4c:63:21:2b:91:f1:45:4d:
                    0e:5d:39:d4:ce:ba:89:f5:a3:59:a2:71:8f:9b:48:
                    32:60:b3:bf:70:7d:ae:96:75:e3:64:64:63:16:97:
                    13:e7:fd:fa:fd:d5:b0:8e:be:c8:7e:e2:dd:32:97:
                    2b:97:85:19:b0:ac:15:28:aa:3c:e4:d7:06:67:04:
                    d5:78:0c:8a:a2:1f:37:1d:88:97:a2:3c:97:c3:46:
                    91:1d:74:ec:e9:e2:1e:65:d3:95:90:0b:c4:ba:4d:
                    f8:31:d3:1f:b8:d3:70:b6:84:cd:f9:97:3f:14:50:
                    50:6f:7c:e7:3a:8a:6a:6c:b7:9a:ac:82:bd:82:48:
                    02:d9:47:c7:5a:75:74:51:a0:69:56:1c:16:90:58:
                    9b:5d:29:55:3f:df:50:80:5b:87:60:b7:e9:4f:f6:
                    92:b9:31:84:d0:be:d8:a2:ef:b1:82:ca:3c:b8:f5:
                    43:ce:d1:df:d2:ff:fb:96:a4:ec:09:a2:e5:00:e5:
                    8a:d2:4b:5e:d9:5e:83:d8:93:12:bb:2c:e3:db:db:
                    18:1f:60:4e:c8:e3:e0:ed:2a:68:10:20:ba:5e:f7:
                    e3:3e:41:2f:23:29:5b:a5:f1:2e:d6:38:24:34:3c:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:FB:CA:3C:C1:23:9D:C1:56:12:12:98:E8:A5:5C:0A:AF:EC:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24E91B74B0EB11F1BF1C8AB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.5.0/24
                  154.203.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:15:20:cd:35:26:f4:b6:fd:aa:72:c0:aa:39:d5:81:f0:9b:
         7b:66:72:fd:79:a2:03:14:62:c2:98:e2:cb:21:b0:77:53:77:
         b5:fb:50:a4:0a:47:72:d7:af:6e:10:93:0a:fd:76:f9:d9:1c:
         cc:67:b1:29:54:01:14:d8:af:95:d1:0f:2f:cd:91:1a:3c:58:
         a7:2d:7a:97:b7:99:fd:32:a3:ba:63:1a:ec:1f:09:a8:47:44:
         df:97:da:c7:a9:57:cc:67:57:7c:e8:05:b4:a4:95:a1:69:58:
         f1:54:45:59:11:25:e8:44:d4:d5:de:65:05:ed:32:2b:57:ea:
         d7:5c:dc:c2:f1:bb:d8:44:23:d6:77:06:ac:b3:8b:1b:6a:82:
         d5:0e:fd:29:c6:9e:f6:51:4d:74:e8:f3:b3:0a:f9:14:3b:29:
         f0:2d:f0:09:37:e7:c4:51:85:5c:5e:95:9a:6c:a2:d1:43:db:
         00:34:59:4e:0b:0c:6d:93:60:37:23:04:31:de:04:59:b5:56:
         f0:a5:37:ce:01:a5:b5:56:de:ff:88:44:05:0e:00:e4:af:d4:
         a8:13:83:f2:88:0e:9c:73:f4:b5:7b:74:1b:8f:d7:68:dc:df:
         cb:e7:50:72:1c:ee:ad:43:a6:d7:39:f2:96:77:5c:65:2d:14:
         10:64:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----