Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C860ACCADA511F1A917B8ECCE1D38B0.roa
File:                     5C860ACCADA511F1A917B8ECCE1D38B0.roa (raw, json)
Hash identifier:          hRVpKxRyi5BvNnqvYCcUXt8mj487Qj7+zl/f0qqipR8=
Subject key identifier:   E9:85:8B:C9:A7:5F:34:6E:FF:7F:48:5C:0D:0C:7D:C3:53:83:74:6C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E750
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C860ACCADA511F1A917B8ECCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 05:55:16 +0000
ROA not before:           Fri 11 Sep 2026 05:55:12 +0000
ROA not after:            Sat 10 Oct 2026 05:55:12 +0000
asID:                     139613
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124752 (0x1e750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 05:55:12 2026 GMT
            Not After : Oct 10 05:55:12 2026 GMT
        Subject: CN=6aa397c4-8620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:23:50:38:5d:fb:ef:92:7c:72:15:16:44:
                    be:2d:44:e8:52:b3:f4:81:ec:30:1c:21:58:62:35:
                    90:ae:45:30:c1:bd:84:8d:ca:9c:27:86:61:fa:fb:
                    af:80:16:c4:6f:1b:07:b1:ba:6d:2d:88:99:52:6a:
                    0f:e2:97:fd:f5:3a:62:e0:7b:e0:81:2f:b4:f8:e4:
                    61:bd:f0:c2:46:21:69:f3:9b:37:1f:ce:fd:8b:88:
                    27:b1:7b:99:d3:59:71:ae:78:3a:96:7d:7c:26:87:
                    06:24:f3:e1:2e:38:16:77:47:a3:c3:cd:45:ff:b2:
                    2c:8d:3c:75:0d:63:07:39:bf:9a:d6:03:4f:a5:95:
                    60:9a:61:2a:fa:1c:59:5d:f6:ff:72:4c:60:2c:19:
                    42:ea:ec:d8:4a:b6:67:00:93:23:df:17:a1:f6:72:
                    ba:f7:33:fe:8b:ef:d8:95:df:0d:cf:cd:07:c1:2e:
                    fb:8a:3f:82:ac:36:23:6e:ff:02:d7:3d:cc:46:80:
                    02:3a:bb:23:72:1e:f6:a3:ee:34:35:95:0b:db:af:
                    b4:21:ec:bd:94:d8:f0:39:8b:20:c8:b0:35:db:49:
                    ce:03:32:02:1e:db:ac:d4:8f:64:9c:5f:39:06:3a:
                    a9:ff:c2:ba:58:48:d1:7c:72:94:4f:da:31:20:4a:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:85:8B:C9:A7:5F:34:6E:FF:7F:48:5C:0D:0C:7D:C3:53:83:74:6C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C860ACCADA511F1A917B8ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:e8:91:06:3f:4f:1c:f4:46:ff:ba:ac:2d:cc:8e:a5:fd:
         f4:c9:b8:da:94:58:9a:2e:1a:c5:ab:c9:d8:54:3a:40:53:8e:
         88:72:cc:24:bb:f5:09:b8:f2:e7:e2:cb:d8:d2:f9:c1:d8:4a:
         4c:2a:bb:04:19:60:ab:02:46:38:ae:67:c6:e3:82:02:de:7e:
         ee:60:5e:9b:61:5f:1c:51:a7:b0:c4:d8:2a:eb:f8:03:38:55:
         a0:f2:a1:bd:0c:d7:39:14:c8:3c:8c:3a:32:ad:c5:dc:1c:92:
         10:88:55:54:e3:78:ed:05:8a:a9:14:ac:d6:24:bd:2c:00:f0:
         c7:c2:06:35:51:4c:39:23:64:fc:7e:a0:c7:32:da:4e:88:e3:
         26:75:c7:3c:6f:e4:00:94:f4:c0:ff:be:90:9b:67:86:68:b4:
         8b:d6:3d:0e:2e:d9:14:ad:9c:72:c7:09:39:32:4c:0c:a5:d8:
         78:91:46:49:bb:a8:0c:a0:87:37:c7:7c:de:c7:84:5f:09:84:
         bc:88:35:ab:f1:64:f4:ba:8e:30:bd:44:00:6a:d1:be:fb:45:
         ed:05:e6:72:b1:06:da:40:d1:d7:4f:ad:b9:1d:33:85:b1:a6:
         e2:e0:4d:d6:09:8b:6e:77:95:e3:01:b8:00:51:37:d0:10:bc:
         77:7f:97:bd
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAedQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTExMDU1NTEyWhcNMjYxMDEwMDU1NTEyWjAYMRYw
FAYDVQQDEw02YWEzOTdjNC04NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtlQjUDhd+++SfHIVFkS+LUToUrP0gewwHCFYYjWQrkUwwb2EjcqcJ4Zh
+vuvgBbEbxsHsbptLYiZUmoP4pf99Tpi4HvggS+0+ORhvfDCRiFp85s3H879i4gn
sXuZ01lxrng6ln18JocGJPPhLjgWd0ejw81F/7IsjTx1DWMHOb+a1gNPpZVgmmEq
+hxZXfb/ckxgLBlC6uzYSrZnAJMj3xeh9nK69zP+i+/Yld8Nz80HwS77ij+CrDYj
bv8C1z3MRoACOrsjch72o+40NZUL26+0Iey9lNjwOYsgyLA120nOAzICHtus1I9k
nF85Bjqp/8K6WEjRfHKUT9oxIErg9QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFOmF
i8mnXzRu/39IXA0MfcNTg3RsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Qzg2MEFDQ0FEQTUxMUYxQTkxN0I4RUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmswAAwQAmtSAAwQAmtcA
AwQAmtoAAwQAmt0AMA0GCSqGSIb3DQEBCwUAA4IBAQB9IeiRBj9PHPRG/7qsLcyO
pf30ybjalFiaLhrFq8nYVDpAU46Icswku/UJuPLn4svY0vnB2EpMKrsEGWCrAkY4
rmfG44IC3n7uYF6bYV8cUaewxNgq6/gDOFWg8qG9DNc5FMg8jDoyrcXcHJIQiFVU
43jtBYqpFKzWJL0sAPDHwgY1UUw5I2T8fqDHMtpOiOMmdcc8b+QAlPTA/76Qm2eG
aLSL1j0OLtkUrZxyxwk5MkwMpdh4kUZJu6gMoIc3x3zex4RfCYS8iDWr8WT0uo4w
vUQAatG++0XtBeZysQbaQNHXT625HTOFsabi4E3WCYtud5XjAbgAUTfQELx3f5e9
-----END CERTIFICATE-----