Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC3F1DCA85C11F195BA91E1CE1D38B0.roa
File:                     6BC3F1DCA85C11F195BA91E1CE1D38B0.roa (raw, json)
Hash identifier:          7YOs/MpAbooEpWUwLskEml6GXBsHhfYAp8BOcoo5DW4=
Subject key identifier:   81:34:E8:7D:FF:23:56:D1:6D:53:B1:20:FD:A7:5C:F0:B9:78:AE:99
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E586
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC3F1DCA85C11F195BA91E1CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 12:30:33 +0000
ROA not before:           Fri 04 Sep 2026 12:30:29 +0000
ROA not after:            Fri 11 Sep 2026 12:30:29 +0000
asID:                     139490
IP address blocks:        154.209.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124294 (0x1e586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 12:30:29 2026 GMT
            Not After : Sep 11 12:30:29 2026 GMT
        Subject: CN=6a9ab9e9-a980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:06:bd:0a:bf:da:e2:89:42:c4:81:12:12:
                    4f:19:ec:85:dc:4b:38:56:3a:e0:2e:13:8e:e2:6d:
                    fc:38:80:32:38:6f:bf:9d:22:c7:ab:e2:7f:18:7f:
                    bd:e1:9a:06:be:13:16:fc:d4:39:fa:dd:7a:11:d6:
                    11:91:c3:fb:2b:94:fa:51:2c:16:bb:d3:cd:7c:3e:
                    eb:87:8e:0c:9a:29:01:4c:28:fa:39:77:9a:cc:6b:
                    fe:91:8d:70:6d:64:46:05:6a:79:25:e1:22:60:bc:
                    2d:23:4f:ff:44:8c:95:44:15:28:d9:30:18:28:b8:
                    83:e3:ec:17:77:21:72:bf:8a:7e:88:7c:c9:34:39:
                    f2:f5:44:80:c0:b2:03:8b:ee:0a:cc:97:98:7b:54:
                    76:ac:95:84:71:6b:45:7f:62:91:6e:3d:95:1c:5c:
                    e8:98:3f:0c:87:d4:b8:e7:a5:25:25:90:33:b5:74:
                    0d:3c:4f:2e:c7:dc:6e:3f:78:73:dd:2a:77:24:bf:
                    ab:2b:d4:ed:e4:55:f9:b5:5e:44:e0:89:9c:ac:bc:
                    07:8a:ba:ae:aa:a9:a1:ed:74:f4:6a:e0:ef:29:48:
                    20:39:d7:6d:a7:c5:ef:1e:ee:8d:f0:ef:2c:57:1b:
                    97:de:0b:04:5f:f1:6f:85:85:17:96:c7:f3:ae:83:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:E8:7D:FF:23:56:D1:6D:53:B1:20:FD:A7:5C:F0:B9:78:AE:99
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC3F1DCA85C11F195BA91E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:59:be:85:48:3a:53:d8:68:35:74:7c:fb:57:09:9b:75:
         e0:1a:48:4a:c7:bf:44:aa:a3:02:df:f3:5d:bf:17:39:be:1f:
         5d:74:7d:41:e8:9c:96:37:23:91:b7:ea:6d:c8:21:67:1b:c9:
         2b:76:78:e7:09:23:f7:b9:23:ac:62:36:72:ab:b4:f2:84:e5:
         08:2b:67:a6:ff:85:4c:d6:03:a2:0f:a0:09:9d:10:1d:71:5c:
         ee:6b:e4:7e:58:84:3b:a9:fc:27:20:86:7a:c1:4a:0f:c2:b9:
         e4:82:f4:91:55:34:aa:77:ef:3f:a8:30:df:21:c0:32:a0:33:
         0b:56:0a:e7:df:73:eb:cd:c0:2f:39:71:e0:61:4b:ea:97:11:
         a8:8c:14:e9:23:14:2c:c6:89:19:d0:00:ec:20:e0:4e:06:a7:
         62:f0:02:35:42:be:7a:d7:13:6d:a1:5b:89:70:8b:d3:b9:d5:
         7a:a1:d0:5b:fd:93:d4:a5:f7:c2:0c:5c:3f:25:49:d7:bd:79:
         1d:6b:69:16:54:af:e6:a5:9a:f4:93:68:9d:75:d3:12:7a:28:
         46:cd:5b:68:cc:08:7b:d9:4d:e8:eb:8e:aa:a4:d5:2e:4d:b7:
         64:93:30:f5:7e:85:6f:cb:8e:f5:d5:71:1e:0d:41:74:a0:9e:
         ba:e4:76:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeWGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA0MTIzMDI5WhcNMjYwOTExMTIzMDI5WjAYMRYw
FAYDVQQDEw02YTlhYjllOS1hOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqJgGvQq/2uKJQsSBEhJPGeyF3Es4VjrgLhOO4m38OIAyOG+/nSLHq+J/
GH+94ZoGvhMW/NQ5+t16EdYRkcP7K5T6USwWu9PNfD7rh44MmikBTCj6OXeazGv+
kY1wbWRGBWp5JeEiYLwtI0//RIyVRBUo2TAYKLiD4+wXdyFyv4p+iHzJNDny9USA
wLIDi+4KzJeYe1R2rJWEcWtFf2KRbj2VHFzomD8Mh9S456UlJZAztXQNPE8ux9xu
P3hz3Sp3JL+rK9Tt5FX5tV5E4ImcrLwHirquqqmh7XT0auDvKUggOddtp8XvHu6N
8O8sVxuX3gsEX/FvhYUXlsfzroNKqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIE0
6H3/I1bRbVOxIP2nXPC5eK6ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QkMzRjFEQ0E4NUMxMUYxOTVCQTkxRTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH/MA0GCSqGSIb3DQEB
CwUAA4IBAQCAalm+hUg6U9hoNXR8+1cJm3XgGkhKx79EqqMC3/Ndvxc5vh9ddH1B
6JyWNyORt+ptyCFnG8krdnjnCSP3uSOsYjZyq7TyhOUIK2em/4VM1gOiD6AJnRAd
cVzua+R+WIQ7qfwnIIZ6wUoPwrnkgvSRVTSqd+8/qDDfIcAyoDMLVgrn33PrzcAv
OXHgYUvqlxGojBTpIxQsxokZ0ADsIOBOBqdi8AI1Qr561xNtoVuJcIvTudV6odBb
/ZPUpffCDFw/JUnXvXkda2kWVK/mpZr0k2idddMSeihGzVtozAh72U3o646qpNUu
TbdkkzD1foVvy4711XEeDUF0oJ665HbE
-----END CERTIFICATE-----