Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5981AD6B10511F1A33C3BD7CE1D38B0.roa
File:                     E5981AD6B10511F1A33C3BD7CE1D38B0.roa (raw, json)
Hash identifier:          xvVWqh2ggIRgLN93ybCx/SGSx8KnJuvY3srjdhEKXmE=
Subject key identifier:   99:DD:14:9C:45:AE:93:1D:6A:20:CA:FC:09:4E:AE:8C:A8:49:71:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E877
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5981AD6B10511F1A33C3BD7CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 13:03:51 +0000
ROA not before:           Tue 15 Sep 2026 13:03:46 +0000
ROA not after:            Sat 24 Oct 2026 13:03:46 +0000
asID:                     9304
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.196.0/24 maxlen: 24
                          154.92.197.0/24 maxlen: 24
                          154.92.198.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125047 (0x1e877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 13:03:46 2026 GMT
            Not After : Oct 24 13:03:46 2026 GMT
        Subject: CN=6aa94237-fa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:cb:46:c1:fc:0f:57:69:94:fa:de:e6:b8:
                    98:ff:88:7e:85:bb:75:dc:48:7c:47:6c:e8:a6:f4:
                    a8:c4:44:04:da:85:18:70:4a:04:1e:dc:4e:06:f8:
                    93:97:51:38:a0:c7:00:14:7a:c9:7f:d6:b0:7b:70:
                    35:de:92:53:b6:90:b3:c7:87:ae:6e:b2:73:91:dd:
                    bf:ec:be:02:96:23:e8:83:55:0b:5b:64:af:6f:81:
                    af:91:0d:47:69:8a:49:0d:c0:75:f3:67:30:8b:0c:
                    4e:8a:07:53:2c:25:48:f4:cf:a4:23:6c:15:1a:e2:
                    9a:f6:5d:9a:fe:17:d6:0c:89:26:39:5e:b5:e7:8f:
                    21:c4:43:46:2f:f7:6d:b4:45:6f:63:a9:47:5c:a4:
                    cd:2e:c7:d0:c9:98:d4:23:f1:40:81:81:2a:4b:5f:
                    81:94:f0:73:15:90:6d:42:13:c7:3e:36:ef:b2:6f:
                    41:e1:7b:d5:cc:43:c4:01:92:07:fa:6a:95:df:34:
                    06:3e:75:31:48:83:89:8c:ae:0b:e6:7c:31:ae:8f:
                    d8:c8:cc:10:7a:9e:ab:46:2c:16:2b:86:77:d4:1d:
                    60:e1:40:30:8e:e0:df:1d:f0:3d:6e:46:75:54:ec:
                    79:ed:da:88:03:91:87:86:79:1d:25:2e:78:52:63:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:14:9C:45:AE:93:1D:6A:20:CA:FC:09:4E:AE:8C:A8:49:71:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5981AD6B10511F1A33C3BD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0-154.92.198.255
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:a6:32:76:6c:bb:d4:d6:c5:74:33:53:d7:1f:f4:44:97:
         a4:98:63:d3:84:d3:e9:0b:35:f9:70:8d:64:db:fd:84:0b:29:
         cc:3b:ed:80:0f:5f:dc:40:1a:fb:df:99:1b:37:81:c2:db:d1:
         37:05:72:83:44:76:33:aa:75:ba:48:66:8b:13:fa:83:ad:89:
         53:d0:91:f7:42:e0:6c:b4:70:34:5b:45:ac:57:34:59:fc:f6:
         d1:23:d8:0b:bc:18:9e:15:ab:bf:81:d4:a3:dc:e0:2f:91:66:
         6e:6b:43:cc:64:09:f7:0c:d3:a5:22:b5:21:e5:3d:7c:48:17:
         01:61:e0:f1:e2:50:0c:9c:91:c6:7a:ed:26:03:9d:c5:14:9b:
         19:fe:28:5f:c7:b5:eb:b4:4a:25:1a:5f:6b:96:e3:83:b6:7e:
         e2:25:6b:4f:99:81:d9:66:4d:a4:8f:55:d4:a3:e7:75:45:bc:
         15:79:45:a6:64:1f:61:c9:09:72:32:53:de:2a:87:81:77:59:
         0d:6a:e5:a0:35:b0:3c:b9:b2:7f:a8:e9:04:54:7d:54:87:f5:
         b8:e5:b2:09:6e:0f:4d:bd:19:e3:c9:48:b5:a3:13:a6:10:4c:
         84:c3:e5:5d:54:f2:94:54:41:7e:b9:7a:25:ab:fe:50:0f:a9:
         58:8e:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----