Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9447749C8511F188A7CFEFCE1D38B0.roa
File:                     EF9447749C8511F188A7CFEFCE1D38B0.roa (raw, json)
Hash identifier:          omggRAPmfKq58b/lKRS8NdeYxY7SB3t9tTBZfRZxqks=
Subject key identifier:   60:61:CB:DE:7C:B0:7A:61:1B:A0:1F:53:8C:2E:6B:BF:5A:E1:59:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E084
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9447749C8511F188A7CFEFCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:57:29 +0000
ROA not before:           Thu 20 Aug 2026 10:57:25 +0000
ROA not after:            Sat 26 Sep 2026 10:57:25 +0000
asID:                     138915
IP address blocks:        154.206.68.0/24 maxlen: 24
                          154.206.69.0/24 maxlen: 24
                          154.206.70.0/24 maxlen: 24
                          154.206.71.0/24 maxlen: 24
                          154.206.72.0/24 maxlen: 24
                          154.206.86.0/23 maxlen: 24
                          154.206.88.0/23 maxlen: 24
                          154.206.90.0/23 maxlen: 24
                          154.206.96.0/23 maxlen: 24
                          154.206.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123012 (0x1e084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:57:25 2026 GMT
            Not After : Sep 26 10:57:25 2026 GMT
        Subject: CN=6a86dd99-ec6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:3a:38:35:cc:3f:e9:d0:f8:91:a6:4d:92:
                    91:4d:b7:10:8b:ff:cf:e3:31:2d:d8:65:9f:06:19:
                    74:d9:aa:20:85:72:2a:dd:2f:f1:f4:79:de:3e:5a:
                    fa:ba:ea:43:93:6a:a0:e0:e2:a7:3c:75:b2:a5:6e:
                    b5:75:f3:1c:4b:09:fd:68:e0:05:8f:7e:7f:c8:3f:
                    19:e7:bb:cd:37:4d:25:e3:2e:1d:9b:77:e1:24:b2:
                    1a:c6:d6:52:62:73:98:3a:60:e7:d4:e0:86:e7:f7:
                    40:1b:a0:56:59:bc:52:4b:4d:43:b4:76:ce:18:f3:
                    c0:ea:25:cd:b1:6c:91:be:90:30:3c:52:b1:73:05:
                    13:6e:a6:05:cd:ec:c5:1c:d1:aa:f0:df:0b:a9:24:
                    e2:32:3a:07:60:43:cf:15:86:0e:1a:98:25:00:04:
                    0e:3c:a5:6e:ca:ae:2f:d2:ed:1f:94:02:26:10:88:
                    a4:09:73:44:35:11:59:62:9e:91:71:47:cc:70:a8:
                    fc:f9:1c:cc:18:e2:bb:60:95:64:f3:f1:2e:fa:2e:
                    0e:57:f6:3b:29:fb:7f:66:bd:1f:73:8c:db:fd:41:
                    3d:55:87:fc:69:af:bc:cd:7a:da:77:85:9e:56:00:
                    6d:ff:4d:4e:d0:2b:c1:32:0b:f8:57:64:9a:39:d7:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:CB:DE:7C:B0:7A:61:1B:A0:1F:53:8C:2E:6B:BF:5A:E1:59:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9447749C8511F188A7CFEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.68.0-154.206.72.255
                  154.206.86.0-154.206.91.255
                  154.206.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:3c:95:ed:6a:7a:24:b1:e2:8c:78:c1:37:2b:ac:33:93:f0:
         67:77:a7:f2:b7:34:ef:92:81:42:dd:8e:f1:fe:01:f6:0f:48:
         70:ca:4f:b1:1f:36:0c:68:a1:c1:0e:a8:0b:97:a9:f9:3b:24:
         d4:fa:45:bb:f7:b8:a0:b8:8a:e7:45:4d:5d:8d:3b:a1:21:ef:
         a2:c3:3b:ab:b8:4a:01:38:c7:7e:db:b4:63:15:5a:bc:55:8f:
         e4:88:c3:7d:1a:e3:75:56:77:b8:44:6a:c2:eb:2a:25:09:cd:
         66:d8:15:15:cd:c8:9b:ed:d3:d2:cf:02:05:41:88:cc:82:86:
         b7:79:e3:f4:6c:37:ea:18:15:6d:e6:f5:d1:7f:25:f6:43:22:
         8d:a0:63:f9:ea:07:de:91:4c:bc:95:1c:a2:d3:20:bf:f0:7b:
         6a:1b:e0:55:6f:92:3b:3d:5e:42:a6:d9:3a:f8:7f:bc:d7:9c:
         af:f3:a1:93:39:2c:0f:6e:0b:fe:23:7b:ce:00:31:cb:b5:27:
         35:0b:dc:62:25:be:36:7d:f8:66:c6:ae:91:d5:be:15:17:83:
         81:19:d1:70:b3:14:5c:2f:32:29:7f:b6:9b:a7:ae:ed:f1:ef:
         8e:58:40:1d:9a:71:5e:b4:b6:6a:b4:d1:09:2b:b6:60:a6:54:
         1d:49:35:0e
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAeCEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTA1NzI1WhcNMjYwOTI2MTA1NzI1WjAYMRYw
FAYDVQQDEw02YTg2ZGQ5OS1lYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoiI6ODXMP+nQ+JGmTZKRTbcQi//P4zEt2GWfBhl02aoghXIq3S/x9Hne
Plr6uupDk2qg4OKnPHWypW61dfMcSwn9aOAFj35/yD8Z57vNN00l4y4dm3fhJLIa
xtZSYnOYOmDn1OCG5/dAG6BWWbxSS01DtHbOGPPA6iXNsWyRvpAwPFKxcwUTbqYF
zezFHNGq8N8LqSTiMjoHYEPPFYYOGpglAAQOPKVuyq4v0u0flAImEIikCXNENRFZ
Yp6RcUfMcKj8+RzMGOK7YJVk8/Eu+i4OV/Y7Kft/Zr0fc4zb/UE9VYf8aa+8zXra
d4WeVgBt/01O0CvBMgv4V2SaOdd66wIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFGBh
y958sHphG6AfU4wua79a4VlGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjk0NDc3NDlDODUxMUYxODhBN0NGRUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAKazkQDBACazkgwDAME
AZrOVgMEAprOWAMEAprOYDANBgkqhkiG9w0BAQsFAAOCAQEAejyV7Wp6JLHijHjB
NyusM5PwZ3en8rc075KBQt2O8f4B9g9IcMpPsR82DGihwQ6oC5ep+Tsk1PpFu/e4
oLiK50VNXY07oSHvosM7q7hKATjHftu0YxVavFWP5IjDfRrjdVZ3uERqwusqJQnN
ZtgVFc3Im+3T0s8CBUGIzIKGt3nj9Gw36hgVbeb10X8l9kMijaBj+eoH3pFMvJUc
otMgv/B7ahvgVW+SOz1eQqbZOvh/vNecr/OhkzksD24L/iN7zgAxy7UnNQvcYiW+
Nn34ZsaukdW+FReDgRnRcLMUXC8yKX+2m6eu7fHvjlhAHZpxXrS2arTRCSu2YKZU
HUk1Dg==
-----END CERTIFICATE-----