Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776D5BFAB01711F1846CFAB6CE1D38B0.roa
File:                     776D5BFAB01711F1846CFAB6CE1D38B0.roa (raw, json)
Hash identifier:          lWAbiecwaKBPDM0//Cl/2hu81lKLn33zhgHdmlzY4fY=
Subject key identifier:   BC:44:B9:B6:A1:D4:C3:60:33:C4:29:CC:31:52:E8:03:02:58:D1:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E824
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776D5BFAB01711F1846CFAB6CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:37:06 +0000
ROA not before:           Mon 14 Sep 2026 08:37:02 +0000
ROA not after:            Fri 30 Oct 2026 08:37:02 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
                          154.201.94.0/23 maxlen: 24
                          154.201.94.0/24 maxlen: 24
                          154.201.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124964 (0x1e824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 08:37:02 2026 GMT
            Not After : Oct 30 08:37:02 2026 GMT
        Subject: CN=6aa7b232-463f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:c3:5b:58:be:b0:e4:fb:e5:3b:5f:19:2b:
                    f7:3f:e7:3b:cf:ea:40:de:1a:6d:9e:90:75:8b:d4:
                    c7:bd:f0:f2:f2:aa:5e:17:fd:19:d7:ee:77:97:ff:
                    8a:da:6d:b0:37:c7:31:7d:57:b3:85:22:f8:3b:47:
                    17:7b:83:22:9a:f5:aa:ef:2c:73:8d:ed:f1:40:06:
                    ef:e9:bf:7d:50:da:ba:09:aa:91:1d:e7:51:7e:c4:
                    a6:bd:dc:2b:05:33:ae:67:5e:b9:b9:86:6c:8d:57:
                    b8:86:e2:fd:5f:97:4d:bf:e3:7d:28:18:05:0b:54:
                    43:89:45:ff:d5:73:dc:bb:98:35:61:51:e0:da:cd:
                    b1:d8:d4:58:cf:a2:d1:32:08:a3:b5:61:5d:ec:82:
                    29:ad:d5:3d:d3:dc:8f:81:d4:64:30:b4:52:e6:3d:
                    08:01:7d:01:45:28:cb:8c:10:72:91:46:3e:14:0b:
                    f4:db:eb:9a:18:a5:33:83:51:d0:09:5d:99:36:2d:
                    4d:70:e7:34:33:d5:03:3d:71:10:2a:46:23:4d:4f:
                    ef:92:ed:a9:2f:89:b7:2b:d8:f6:35:5c:99:58:ea:
                    56:0d:49:37:14:d5:7b:ab:7f:a7:28:cb:64:c9:a0:
                    7b:d8:da:c4:29:ff:18:73:85:73:7c:a2:9b:0c:56:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:44:B9:B6:A1:D4:C3:60:33:C4:29:CC:31:52:E8:03:02:58:D1:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776D5BFAB01711F1846CFAB6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:12:c2:77:e4:92:d7:2a:84:7a:eb:12:86:c1:55:04:01:
         c9:f5:9f:bc:dd:4a:0e:80:df:0f:b6:71:ab:83:e0:d0:f6:04:
         ae:43:9a:db:8b:2f:16:b3:67:bc:6d:04:c6:01:3a:76:fc:a0:
         c0:48:0f:8c:0f:55:44:8e:b4:6f:81:bd:93:38:6b:d2:67:a5:
         2c:62:01:8f:e0:67:1e:55:33:60:12:9d:22:58:3c:f6:07:dd:
         cc:bd:54:2d:44:6e:b8:4b:7b:d5:98:4b:97:81:e7:c2:a8:25:
         bb:21:92:83:d3:1c:88:5f:24:c4:ec:d1:33:a9:90:2c:2f:05:
         bf:f9:cc:ea:3f:70:9d:44:c4:ca:18:da:b2:27:48:15:20:d7:
         72:83:1b:d8:b5:ef:51:24:56:eb:3a:c6:d4:21:8a:0e:3e:68:
         76:cb:e3:86:5b:3c:40:c4:35:5d:11:c1:c5:58:53:e0:75:cb:
         78:91:44:64:62:6f:f5:ba:ad:f3:82:f6:e8:eb:bd:a3:40:7a:
         cf:1e:5a:ed:86:da:0f:9b:03:81:cf:48:99:a8:0d:51:d5:d1:
         3e:08:e6:81:f3:84:71:c5:9f:88:15:d4:3d:11:49:02:65:f9:
         3e:32:b5:5b:a9:8b:b2:3f:65:a1:14:1c:40:26:5e:f4:95:ba:
         67:4e:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----