Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51706AE8AB5111F1A23FA7CDCE1D38B0.roa
File:                     51706AE8AB5111F1A23FA7CDCE1D38B0.roa (raw, json)
Hash identifier:          cQI30FL845BCOVmkYzef1phZdrQpZQqpun5SQ7GqacQ=
Subject key identifier:   18:18:3D:5E:DE:B5:5C:C0:DD:2C:91:87:3B:77:42:12:96:2B:CB:74
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E63A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51706AE8AB5111F1A23FA7CDCE1D38B0.roa
Signing time:             Tue 08 Sep 2026 06:48:37 +0000
ROA not before:           Tue 08 Sep 2026 06:48:33 +0000
ROA not after:            Tue 13 Oct 2026 06:48:33 +0000
asID:                     206675
IP address blocks:        154.92.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124474 (0x1e63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 06:48:33 2026 GMT
            Not After : Oct 13 06:48:33 2026 GMT
        Subject: CN=6a9fafc5-589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cc:84:28:70:9f:7d:cd:fd:d4:5a:98:62:af:
                    04:94:0f:17:4e:4b:03:45:d2:30:b8:33:4a:06:5b:
                    aa:ad:35:10:8c:80:c8:c9:5e:54:e5:dd:5b:40:64:
                    88:25:9f:53:65:2b:fb:8d:8f:bc:39:79:aa:c9:23:
                    7e:99:0d:28:c0:eb:f6:bf:99:1f:14:5c:78:4e:f3:
                    58:6e:8b:83:2c:65:e7:c7:d2:99:bd:fd:21:ee:6d:
                    8d:76:c2:5c:eb:d5:e8:4e:71:fd:f9:0b:49:71:1f:
                    aa:99:98:a2:d5:ad:07:97:50:a9:e7:3a:c7:79:a1:
                    22:27:49:b0:62:49:b5:cc:35:94:8b:40:b8:2c:3a:
                    92:43:2e:0f:c7:59:23:03:86:d6:36:19:db:03:96:
                    85:7e:06:f0:29:02:c5:57:69:fb:13:17:80:f0:20:
                    3a:ef:72:61:29:36:a9:81:39:f7:75:40:de:f0:a5:
                    73:dc:3d:5d:c6:2a:f6:f2:a3:f9:97:2e:8b:98:c2:
                    d3:18:83:e3:85:50:21:93:67:0f:ea:12:88:63:f0:
                    71:13:7c:ab:b6:b0:5a:7b:b2:b8:d2:89:ab:da:09:
                    d8:59:91:2b:ee:22:89:1f:f9:43:29:9f:87:17:a6:
                    bf:3c:ec:c0:3c:c3:9c:5c:e6:eb:21:82:0e:f0:ca:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:3D:5E:DE:B5:5C:C0:DD:2C:91:87:3B:77:42:12:96:2B:CB:74
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51706AE8AB5111F1A23FA7CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:48:89:84:74:86:61:2e:16:cf:96:21:96:63:4b:ec:48:
         97:d6:22:d3:96:63:e6:a6:bd:a6:00:68:5b:53:f8:35:f5:74:
         6a:cd:f6:e6:32:2e:da:34:e3:c5:15:73:bf:70:72:23:f3:64:
         d1:f1:59:4b:a8:a9:cf:69:82:22:c1:d5:6c:e3:fe:9c:e1:f7:
         c1:5f:f5:ab:64:bb:e0:99:4d:21:c6:7b:21:42:f8:ae:56:bf:
         a7:90:d1:3c:bf:fd:89:19:72:d5:f5:5b:2e:c4:01:4a:76:b6:
         a0:26:af:f0:7b:7a:00:e2:34:97:6c:00:87:10:e6:22:30:0d:
         52:82:1d:63:7d:fe:b4:54:96:66:76:d8:17:7f:99:df:e5:40:
         8b:e8:cc:af:42:26:ff:a4:f1:df:26:05:75:81:77:43:85:bc:
         25:3f:91:bc:a4:8b:80:cf:37:a0:bb:1f:aa:e5:26:61:a5:57:
         d5:2c:c3:2c:96:5c:72:78:af:5a:cf:3e:39:fa:eb:f8:44:65:
         f1:80:d8:51:5c:3c:42:9a:c6:91:ee:90:c8:2c:c9:66:4c:38:
         18:c6:19:10:e0:ee:df:25:a1:13:7d:82:7b:76:32:68:bd:93:
         53:6e:d4:46:82:07:d9:5f:c2:f7:3a:30:74:bf:fc:e0:d5:67:
         c8:d2:32:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeY6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MDY0ODMzWhcNMjYxMDEzMDY0ODMzWjAYMRYw
FAYDVQQDEw02YTlmYWZjNS01ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+syEKHCffc391FqYYq8ElA8XTksDRdIwuDNKBluqrTUQjIDIyV5U5d1b
QGSIJZ9TZSv7jY+8OXmqySN+mQ0owOv2v5kfFFx4TvNYbouDLGXnx9KZvf0h7m2N
dsJc69XoTnH9+QtJcR+qmZii1a0Hl1Cp5zrHeaEiJ0mwYkm1zDWUi0C4LDqSQy4P
x1kjA4bWNhnbA5aFfgbwKQLFV2n7ExeA8CA673JhKTapgTn3dUDe8KVz3D1dxir2
8qP5ly6LmMLTGIPjhVAhk2cP6hKIY/BxE3yrtrBae7K40omr2gnYWZEr7iKJH/lD
KZ+HF6a/POzAPMOcXObrIYIO8MrxPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBgY
PV7etVzA3SyRhzt3QhKWK8t0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTcwNkFFOEFCNTExMUYxQTIzRkE3Q0RDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwKMA0GCSqGSIb3DQEB
CwUAA4IBAQAdaEiJhHSGYS4Wz5YhlmNL7EiX1iLTlmPmpr2mAGhbU/g19XRqzfbm
Mi7aNOPFFXO/cHIj82TR8VlLqKnPaYIiwdVs4/6c4ffBX/WrZLvgmU0hxnshQviu
Vr+nkNE8v/2JGXLV9VsuxAFKdragJq/we3oA4jSXbACHEOYiMA1Sgh1jff60VJZm
dtgXf5nf5UCL6MyvQib/pPHfJgV1gXdDhbwlP5G8pIuAzzegux+q5SZhpVfVLMMs
llxyeK9azz45+uv4RGXxgNhRXDxCmsaR7pDILMlmTDgYxhkQ4O7fJaETfYJ7djJo
vZNTbtRGggfZX8L3OjB0v/zg1WfI0jJJ
-----END CERTIFICATE-----