Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E61328965911F1ABB0DCFACE1D38B0.roa
File:                     05E61328965911F1ABB0DCFACE1D38B0.roa (raw, json)
Hash identifier:          Vi5kmpIgnvvq125NQjla57mzIS5juoCjOvZltP7Q5Dg=
Subject key identifier:   08:2E:00:73:9B:DF:CF:6F:31:91:C9:EB:0E:E2:93:EA:8A:6F:B4:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E61328965911F1ABB0DCFACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:20:52 +0000
ROA not before:           Wed 12 Aug 2026 14:20:48 +0000
ROA not after:            Sun 12 Aug 2029 14:20:48 +0000
asID:                     17561
IP address blocks:        154.199.75.0/24 maxlen: 24
                          154.199.76.0/24 maxlen: 24
                          154.199.77.0/24 maxlen: 24
                          154.199.78.0/24 maxlen: 24
                          154.199.79.0/24 maxlen: 24
                          154.199.160.0/24 maxlen: 24
                          154.199.161.0/24 maxlen: 24
                          154.199.162.0/24 maxlen: 24
                          154.199.163.0/24 maxlen: 24
                          154.199.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122560 (0x1dec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 14:20:48 2026 GMT
            Not After : Aug 12 14:20:48 2029 GMT
        Subject: CN=6a7c8144-8157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:b4:44:a6:78:ce:a0:59:b6:fc:f7:81:b0:
                    0c:f9:35:74:19:b4:fc:c0:1c:f1:8a:c9:7c:ea:3c:
                    51:ad:e4:5a:99:c2:fc:25:ca:db:0c:ec:60:4d:80:
                    97:e4:81:26:23:f3:16:c7:a4:ee:f8:b9:6d:88:be:
                    46:94:6e:6c:fd:db:eb:7e:c0:07:2b:e5:ce:39:df:
                    ed:31:91:40:8d:e2:ab:b1:bb:54:57:ff:93:81:29:
                    d1:38:84:e7:04:54:43:cd:62:e4:08:36:33:93:3e:
                    1a:25:0a:fa:10:28:ba:1e:51:ad:dd:e0:31:8b:e2:
                    1c:91:44:b6:62:02:78:dd:11:73:23:ec:3b:ff:a6:
                    23:c4:37:76:a1:d4:f8:2d:ce:7e:57:f1:aa:40:b3:
                    b6:f7:84:75:b1:3f:8b:56:33:1b:7c:22:f3:5a:51:
                    7c:ca:82:70:50:12:36:69:8e:e7:06:9d:39:04:63:
                    08:9c:21:5c:fb:51:8d:ad:d7:6c:59:81:96:cf:fe:
                    73:b8:ca:25:a2:39:7e:37:ea:92:57:91:3e:a7:93:
                    2b:b2:4b:24:d9:15:09:e1:7a:15:72:2c:da:73:ed:
                    fd:6e:03:33:cf:7b:06:2d:63:f1:68:0f:f5:f0:5b:
                    ef:d6:62:e0:8e:eb:1e:20:1b:fa:ea:4c:3f:b5:3e:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:00:73:9B:DF:CF:6F:31:91:C9:EB:0E:E2:93:EA:8A:6F:B4:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E61328965911F1ABB0DCFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.75.0-154.199.79.255
                  154.199.160.0-154.199.164.255

    Signature Algorithm: sha256WithRSAEncryption
         24:60:68:67:2b:c9:08:ad:88:30:67:01:10:14:9a:27:cd:f6:
         b0:16:1b:02:b1:77:22:bc:b9:9b:18:da:66:2a:4f:50:44:d2:
         12:5d:58:30:e7:60:1d:4b:e2:c6:65:ef:72:9c:08:38:ff:00:
         36:1c:8e:ec:de:13:70:0d:d4:7a:da:5f:0f:9d:d7:2b:78:33:
         54:8c:5d:6d:3c:15:93:a5:9b:3a:c6:da:39:e9:9b:6e:86:0e:
         44:6e:e7:99:6c:9b:ac:ac:e5:62:55:70:eb:51:1f:af:52:92:
         86:ce:bb:13:74:29:7b:c7:88:26:47:48:be:fb:56:ee:1f:26:
         ef:ce:bc:55:15:5f:1c:64:7b:7c:ec:73:8f:6e:51:93:e3:5e:
         7c:98:ab:f8:e0:a5:61:81:55:15:71:b2:75:ae:be:c0:3e:76:
         05:30:7a:5d:dc:96:f2:d1:e9:e2:5e:04:f6:65:cd:7e:92:ee:
         de:fe:5c:ce:72:be:04:d4:54:ff:f7:b4:9a:18:cb:7a:2c:f7:
         5c:aa:de:83:54:00:92:ae:1e:81:33:9c:a7:c5:43:21:a7:bb:
         00:8b:4d:1d:03:74:e4:bc:1c:60:20:24:3c:38:b8:fa:64:13:
         ef:0b:4d:d8:4e:17:88:0e:bf:46:5a:cd:34:83:da:26:f4:2e:
         73:15:4c:29
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAd7AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEyMTQyMDQ4WhcNMjkwODEyMTQyMDQ4WjAYMRYw
FAYDVQQDEw02YTdjODE0NC04MTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyRi0RKZ4zqBZtvz3gbAM+TV0GbT8wBzxisl86jxRreRamcL8JcrbDOxg
TYCX5IEmI/MWx6Tu+LltiL5GlG5s/dvrfsAHK+XOOd/tMZFAjeKrsbtUV/+TgSnR
OITnBFRDzWLkCDYzkz4aJQr6ECi6HlGt3eAxi+IckUS2YgJ43RFzI+w7/6YjxDd2
odT4Lc5+V/GqQLO294R1sT+LVjMbfCLzWlF8yoJwUBI2aY7nBp05BGMInCFc+1GN
rddsWYGWz/5zuMolojl+N+qSV5E+p5Mrsksk2RUJ4XoVcizac+39bgMzz3sGLWPx
aA/18Fvv1mLgjuseIBv66kw/tT6FcQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFAgu
AHOb389vMZHJ6w7ik+qKb7RIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNUU2MTMyODk2NTkxMUYxQUJCMERDRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACax0sDBASax0AwDAME
BZrHoAMEAJrHpDANBgkqhkiG9w0BAQsFAAOCAQEAJGBoZyvJCK2IMGcBEBSaJ832
sBYbArF3Iry5mxjaZipPUETSEl1YMOdgHUvixmXvcpwIOP8ANhyO7N4TcA3Uetpf
D53XK3gzVIxdbTwVk6WbOsbaOembboYORG7nmWybrKzlYlVw61Efr1KShs67E3Qp
e8eIJkdIvvtW7h8m7868VRVfHGR7fOxzj25Rk+NefJir+OClYYFVFXGyda6+wD52
BTB6XdyW8tHp4l4E9mXNfpLu3v5cznK+BNRU//e0mhjLeiz3XKreg1QAkq4egTOc
p8VDIae7AItNHQN05LwcYCAkPDi4+mQT7wtN2E4XiA6/RlrNNIPaJvQucxVMKQ==
-----END CERTIFICATE-----