Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/392F381E9C8411F180A4D4E5CE1D38B0.roa
File:                     392F381E9C8411F180A4D4E5CE1D38B0.roa (raw, json)
Hash identifier:          D9qHKSeA718bbecUQXwPZD16nebUMpcsXHVBHs8Er10=
Subject key identifier:   4A:81:7E:E9:F2:50:A4:69:E2:DE:97:B9:5A:8C:60:46:AE:79:DD:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E07E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/392F381E9C8411F180A4D4E5CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:45:14 +0000
ROA not before:           Thu 20 Aug 2026 10:45:10 +0000
ROA not after:            Sat 26 Sep 2026 10:45:10 +0000
asID:                     138915
IP address blocks:        154.203.149.0/24 maxlen: 24
                          154.203.150.0/24 maxlen: 24
                          154.203.151.0/24 maxlen: 24
                          154.203.152.0/24 maxlen: 24
                          154.203.153.0/24 maxlen: 24
                          154.203.154.0/23 maxlen: 24
                          154.203.156.0/24 maxlen: 24
                          154.203.157.0/24 maxlen: 24
                          154.203.158.0/24 maxlen: 24
                          154.203.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123006 (0x1e07e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:45:10 2026 GMT
            Not After : Sep 26 10:45:10 2026 GMT
        Subject: CN=6a86daba-055e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:38:a0:0e:21:7e:32:82:c1:53:b4:e7:c1:
                    bf:65:52:c2:05:d9:84:ab:06:27:e1:ba:c4:04:1c:
                    80:86:7a:da:0d:d2:09:7b:ba:e8:32:09:77:b6:e5:
                    35:00:50:73:52:30:2d:cc:4b:b7:57:f0:93:c0:31:
                    8e:4c:fe:67:8a:ce:e4:65:6c:83:16:66:09:28:e7:
                    04:45:9d:29:ba:35:27:c9:7a:07:af:62:4f:21:7f:
                    9d:3d:81:29:ef:ea:ec:48:68:81:2a:0e:87:38:ef:
                    d7:a7:ff:c8:e5:a7:72:05:df:a3:ca:b3:23:fb:a9:
                    29:7c:7a:ea:f9:9c:7e:35:ed:a4:c5:df:5e:6d:32:
                    df:04:e9:e9:a8:a1:7c:d3:7d:c3:aa:f9:ce:ed:06:
                    e7:40:2a:66:75:74:81:35:b2:25:64:b9:c7:e6:4e:
                    6a:fb:f3:f1:15:c5:62:fc:b4:e1:9e:4e:41:89:d4:
                    d8:09:91:51:b1:87:3d:10:52:8d:a6:aa:78:e3:5c:
                    64:ee:c7:83:d4:9d:6a:d8:3d:63:68:1e:b8:8c:0a:
                    ff:62:1e:31:5e:3b:82:a0:3c:24:0a:63:d5:a0:19:
                    9b:44:7b:98:21:04:42:d7:fb:ed:d2:9d:ac:bd:8f:
                    e3:a6:5f:da:da:68:fc:90:ec:ec:4a:e9:fb:be:23:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:81:7E:E9:F2:50:A4:69:E2:DE:97:B9:5A:8C:60:46:AE:79:DD:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/392F381E9C8411F180A4D4E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.149.0-154.203.159.255

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:6b:13:26:25:e5:0a:01:33:4b:a4:35:eb:fb:84:ad:82:
         36:e7:36:fa:66:4b:19:25:0c:7c:70:70:d5:3d:ab:7a:4e:10:
         97:51:57:88:ab:7a:b6:a6:68:0a:22:09:fd:a5:40:95:ba:22:
         3c:97:96:74:37:c5:2f:f0:d6:24:ef:30:4d:3d:99:14:fb:7f:
         32:1a:a2:bc:71:93:ee:14:c8:f7:93:ba:2f:c5:42:b6:5d:c0:
         b8:57:f4:2b:17:b3:3e:59:e5:c5:e8:5f:83:e2:c5:5c:43:b7:
         34:46:43:fa:35:5f:35:58:11:bb:9e:3f:4c:e2:9e:d8:22:84:
         11:eb:af:12:5f:9e:8d:7b:7d:ae:25:77:02:5a:52:b0:0d:50:
         d2:5d:2f:c0:ca:e8:f4:02:c7:e3:2b:e3:5c:e4:36:fa:49:18:
         75:ff:e5:7d:e3:ef:1d:7d:75:4d:a8:8d:cf:36:31:ec:95:29:
         aa:f1:6f:b1:45:89:9f:03:ca:2b:ac:b4:52:ef:b2:b5:12:da:
         a0:96:36:fa:81:b9:12:4b:01:99:db:62:64:4e:ca:4d:53:0a:
         79:6c:b9:34:75:21:cb:71:fa:52:a2:bc:d2:e6:7d:ff:cf:ca:
         d0:ac:0b:c3:70:fd:e8:17:b6:5d:02:7f:9a:9a:84:61:a7:ee:
         19:5c:5b:f5
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeB+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTA0NTEwWhcNMjYwOTI2MTA0NTEwWjAYMRYw
FAYDVQQDEw02YTg2ZGFiYS0wNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Sw4oA4hfjKCwVO058G/ZVLCBdmEqwYn4brEBByAhnraDdIJe7roMgl3
tuU1AFBzUjAtzEu3V/CTwDGOTP5nis7kZWyDFmYJKOcERZ0pujUnyXoHr2JPIX+d
PYEp7+rsSGiBKg6HOO/Xp//I5adyBd+jyrMj+6kpfHrq+Zx+Ne2kxd9ebTLfBOnp
qKF8033DqvnO7QbnQCpmdXSBNbIlZLnH5k5q+/PxFcVi/LThnk5BidTYCZFRsYc9
EFKNpqp441xk7seD1J1q2D1jaB64jAr/Yh4xXjuCoDwkCmPVoBmbRHuYIQRC1/vt
0p2svY/jpl/a2mj8kOzsSun7viMZmQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEqB
funyUKRp4t6XuVqMYEaued2TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zOTJGMzgxRTlDODQxMUYxODBBNEQ0RTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACay5UDBAWay4AwDQYJ
KoZIhvcNAQELBQADggEBACn+axMmJeUKATNLpDXr+4StgjbnNvpmSxklDHxwcNU9
q3pOEJdRV4ireramaAoiCf2lQJW6IjyXlnQ3xS/w1iTvME09mRT7fzIaorxxk+4U
yPeTui/FQrZdwLhX9CsXsz5Z5cXoX4PixVxDtzRGQ/o1XzVYEbueP0zintgihBHr
rxJfno17fa4ldwJaUrANUNJdL8DK6PQCx+Mr41zkNvpJGHX/5X3j7x19dU2ojc82
MeyVKarxb7FFiZ8DyiustFLvsrUS2qCWNvqBuRJLAZnbYmROyk1TCnlsuTR1Ictx
+lKivNLmff/PytCsC8Nw/egXtl0Cf5qahGGn7hlcW/U=
-----END CERTIFICATE-----