Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD88A98AF4411F1BCAAB9BCCE1D38B0.roa
File:                     9FD88A98AF4411F1BCAAB9BCCE1D38B0.roa (raw, json)
Hash identifier:          QNRRrW+GhUmxOqpApd1hUQP9nv2omZY7KXdZjhdnzY4=
Subject key identifier:   77:6F:C6:C3:F0:94:89:B5:11:00:23:E9:AC:78:B3:E0:0F:76:48:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD88A98AF4411F1BCAAB9BCCE1D38B0.roa
Signing time:             Sun 13 Sep 2026 07:27:50 +0000
ROA not before:           Sun 13 Sep 2026 07:27:46 +0000
ROA not after:            Tue 20 Oct 2026 07:27:46 +0000
asID:                     200213
IP address blocks:        154.222.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124919 (0x1e7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 13 07:27:46 2026 GMT
            Not After : Oct 20 07:27:46 2026 GMT
        Subject: CN=6aa65076-369b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:e9:0d:43:10:a7:db:9b:60:49:f8:78:1d:
                    4e:b1:ef:1c:96:d8:14:8a:45:bb:9c:05:7c:e8:2b:
                    e2:8b:69:80:4b:4e:03:0c:a6:f7:fb:3c:5b:1e:e1:
                    f1:e5:73:7e:66:c8:23:2a:69:78:2e:a5:16:56:de:
                    86:51:81:e1:43:21:d6:f1:e2:d5:8a:7e:0f:ea:7a:
                    e3:7e:21:91:ee:46:07:84:85:cd:26:59:76:d0:d6:
                    35:1d:e1:3b:f8:f3:d7:e2:1a:42:4e:ad:c7:15:6e:
                    d5:9f:38:49:4b:fc:4a:df:46:70:a6:b7:a7:ee:10:
                    92:0f:57:2f:89:64:b5:63:fa:e2:b7:51:d8:82:86:
                    d9:85:58:18:66:2f:59:8b:77:e6:02:23:8f:39:e7:
                    e7:8e:46:30:25:63:c4:29:37:82:fc:fb:6d:41:28:
                    3f:a5:e5:32:af:af:8c:d8:80:7a:db:f8:4a:5a:cc:
                    76:2c:6c:48:f4:14:cb:d3:2f:07:7a:67:ab:7a:57:
                    13:79:46:7d:2a:58:98:a3:f4:9f:fd:b9:bc:6e:7c:
                    85:6e:e2:21:98:a8:3c:6d:1c:0c:56:a0:29:68:5a:
                    07:ba:14:6f:d6:3a:12:2e:c5:39:0c:23:cf:38:2d:
                    fe:da:7d:66:4e:8d:be:d9:38:d2:d8:71:c0:24:06:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:C6:C3:F0:94:89:B5:11:00:23:E9:AC:78:B3:E0:0F:76:48:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD88A98AF4411F1BCAAB9BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:50:16:c9:5e:06:40:72:c3:cc:50:d9:aa:bf:7e:e9:a6:
         6c:ab:f2:ed:95:4a:98:f3:03:71:3c:58:06:d0:07:ab:c1:05:
         b4:cd:90:1e:c8:d5:24:77:9f:d2:80:b6:07:db:4c:86:fa:3a:
         84:d3:8e:f0:11:98:9e:71:e9:23:27:dc:30:b7:16:d2:32:84:
         38:51:1c:c6:b2:62:4d:c5:a1:8b:64:f5:ed:d3:47:dd:32:93:
         15:c7:c6:b4:dd:2d:67:22:c9:b3:69:b8:8c:f2:98:b6:f2:6b:
         ee:de:39:a2:c0:bb:54:5d:c0:02:48:d1:23:d3:63:14:0d:ef:
         4a:94:b9:78:da:c0:35:78:c6:65:07:a3:04:30:6d:40:f6:e7:
         bb:35:24:56:31:80:d7:fc:d2:fb:1c:0c:bd:18:0e:7c:c6:09:
         c7:2b:c9:2c:ed:0b:42:c3:8a:cf:77:6a:e2:3d:cc:6f:e1:35:
         fc:5f:ab:4f:ef:8f:a2:31:ad:21:2f:89:0a:70:2e:01:42:2b:
         70:1c:e1:41:07:ba:13:5d:a9:c4:d0:b7:78:df:be:47:fc:c7:
         b8:c2:3a:35:d6:43:cb:aa:7f:11:b3:39:9c:8f:d3:f9:6e:ce:
         99:93:89:b2:f6:22:d5:7c:58:3d:e3:7e:c4:2e:76:d4:a1:9e:
         a5:a7:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----