Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E68F44A76D11F189F17BBFCE1D38B0.roa
File:                     42E68F44A76D11F189F17BBFCE1D38B0.roa (raw, json)
Hash identifier:          tOi/Lv45YDm1ob6We3Nu/AjbzB1Xudkrq/cKdQQZMzI=
Subject key identifier:   25:6F:68:C3:77:E1:C1:82:54:58:01:9A:83:FC:E9:0C:F3:A8:BD:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E68F44A76D11F189F17BBFCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 07:58:34 +0000
ROA not before:           Thu 03 Sep 2026 07:58:30 +0000
ROA not after:            Sat 10 Oct 2026 07:58:30 +0000
asID:                     138915
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.94.0/24 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
                          154.95.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124147 (0x1e4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 07:58:30 2026 GMT
            Not After : Oct 10 07:58:30 2026 GMT
        Subject: CN=6a9928aa-53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:bb:77:cf:00:cb:1d:78:1b:3b:66:2b:65:
                    08:f9:0b:68:d6:34:41:c6:a8:02:e6:0e:45:b1:9c:
                    18:16:35:14:cb:3b:54:ca:db:71:af:98:ed:50:24:
                    5b:eb:24:ac:03:82:5b:08:38:34:ae:e0:1f:e0:54:
                    f1:c1:d2:d7:3f:9c:36:d2:e3:ce:96:e2:54:9e:ac:
                    7c:fc:92:5e:2b:e6:2a:20:8d:ce:87:6b:e7:dd:8a:
                    05:8b:77:63:05:ff:d2:e4:9d:c0:e4:68:9a:21:63:
                    a2:fa:be:4c:33:99:8b:05:73:ad:e0:f6:34:00:0c:
                    3d:20:c9:76:a9:0e:12:f1:2d:e6:c8:7c:12:56:e2:
                    14:c3:bc:27:fa:bf:0b:96:34:d3:92:90:68:83:cf:
                    c1:a3:68:63:e7:27:b5:23:58:21:53:b6:b0:53:97:
                    01:e5:1f:c2:06:e3:86:40:dc:0d:b4:f6:13:78:5a:
                    89:78:5e:f0:9e:d8:6b:9b:36:23:55:68:28:a0:c3:
                    17:22:33:35:25:b2:2c:c8:21:a7:57:48:fe:91:09:
                    04:7c:1d:7b:fb:1c:87:4b:90:f6:38:ed:91:b3:93:
                    7b:14:45:9b:87:9e:3c:14:09:d5:5f:6c:1a:1c:8b:
                    70:ef:e6:74:dc:e5:64:03:5d:3a:3d:db:0a:a7:e3:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:68:C3:77:E1:C1:82:54:58:01:9A:83:FC:E9:0C:F3:A8:BD:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E68F44A76D11F189F17BBFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.94.0/24
                  154.95.96.0-154.95.123.255

    Signature Algorithm: sha256WithRSAEncryption
         cf:5a:e9:82:dd:45:7d:4f:9b:63:3b:b4:82:a9:a3:41:99:01:
         ee:ea:e4:cd:54:ce:42:9c:8c:df:43:c6:ed:c7:76:e8:f3:de:
         65:8e:24:91:98:8b:c2:89:dd:20:fc:e8:ac:19:f8:a5:83:3c:
         0c:a2:b6:00:aa:d4:16:d4:e0:b2:b8:34:c1:94:d3:64:20:42:
         cd:4b:af:4c:18:2c:8a:92:68:bf:0c:61:92:e6:bc:73:60:f6:
         3d:cd:bd:e9:03:10:5c:c2:cf:68:63:e3:50:c0:f2:f6:0f:76:
         43:8e:58:7c:83:95:f8:ca:b3:57:3b:d6:12:da:01:fb:99:01:
         de:31:ed:78:75:0b:a8:1c:d7:b5:90:95:e4:19:cc:fd:01:95:
         a4:53:e9:51:de:28:7b:92:96:70:81:26:c9:99:c6:bd:93:a8:
         42:b9:95:3f:1f:eb:09:cd:19:44:2a:36:ab:6f:a5:3e:f3:62:
         ef:22:5b:89:09:76:82:ba:cb:e0:10:d2:be:fc:4e:45:2a:49:
         99:89:ba:d4:0a:b5:f5:ff:21:ca:d0:f1:94:79:fb:ee:64:9e:
         72:dc:9b:0d:29:73:e2:fd:9b:8e:85:4d:48:4e:3e:81:29:9b:
         c4:22:8f:fa:68:91:92:f2:eb:f1:3a:50:f0:a3:9f:d2:02:17:
         5b:b7:5a:fb
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAeTzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTAzMDc1ODMwWhcNMjYxMDEwMDc1ODMwWjAYMRYw
FAYDVQQDEw02YTk5MjhhYS01M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGq7d88Ayx14GztmK2UI+Qto1jRBxqgC5g5FsZwYFjUUyztUyttxr5jt
UCRb6ySsA4JbCDg0ruAf4FTxwdLXP5w20uPOluJUnqx8/JJeK+YqII3Oh2vn3YoF
i3djBf/S5J3A5GiaIWOi+r5MM5mLBXOt4PY0AAw9IMl2qQ4S8S3myHwSVuIUw7wn
+r8LljTTkpBog8/Bo2hj5ye1I1ghU7awU5cB5R/CBuOGQNwNtPYTeFqJeF7wnthr
mzYjVWgooMMXIjM1JbIsyCGnV0j+kQkEfB17+xyHS5D2OO2Rs5N7FEWbh548FAnV
X2waHItw7+Z03OVkA106PdsKp+PmgwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFCVv
aMN34cGCVFgBmoP86QzzqL3KMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MkU2OEY0NEE3NkQxMUYxODlGMTdCQkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCml9IAwQAml9eMAwDBAWa
X2ADBAKaX3gwDQYJKoZIhvcNAQELBQADggEBAM9a6YLdRX1Pm2M7tIKpo0GZAe7q
5M1UzkKcjN9Dxu3Hdujz3mWOJJGYi8KJ3SD86KwZ+KWDPAyitgCq1BbU4LK4NMGU
02QgQs1Lr0wYLIqSaL8MYZLmvHNg9j3NvekDEFzCz2hj41DA8vYPdkOOWHyDlfjK
s1c71hLaAfuZAd4x7Xh1C6gc17WQleQZzP0BlaRT6VHeKHuSlnCBJsmZxr2TqEK5
lT8f6wnNGUQqNqtvpT7zYu8iW4kJdoK6y+AQ0r78TkUqSZmJutQKtfX/IcrQ8ZR5
++5knnLcmw0pc+L9m46FTUhOPoEpm8Qij/pokZLy6/E6UPCjn9ICF1u3Wvs=
-----END CERTIFICATE-----