Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616973CC21911F1963376D9CE1D38B0.roa
File:                     0616973CC21911F1963376D9CE1D38B0.roa (raw, json)
Hash identifier:          Q8xhRYd2fzeeHlRMR+oUlE96vb3HOB3buTpsZ4Y1S3I=
Subject key identifier:   CE:DC:6B:95:DA:AB:12:7C:A0:E7:53:07:41:48:08:24:79:12:2C:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616973CC21911F1963376D9CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 06:33:36 +0000
ROA not before:           Wed 07 Oct 2026 06:33:31 +0000
ROA not after:            Fri 10 Sep 2027 06:33:31 +0000
asID:                     131618
IP address blocks:        154.222.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126106 (0x1ec9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 06:33:31 2026 GMT
            Not After : Sep 10 06:33:31 2027 GMT
        Subject: CN=6ac5e7c0-cd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:c3:4b:35:d1:2b:4c:d6:b3:71:74:5e:4d:
                    7e:33:f6:3b:7c:8b:2c:d0:69:1f:36:bd:a4:6c:25:
                    9f:0a:8b:5f:06:4c:66:70:12:89:5a:10:7b:a0:41:
                    42:99:fb:aa:59:e0:9f:e5:4d:d7:c2:9a:aa:f0:d2:
                    e8:ef:f8:4f:d9:a7:aa:5c:f8:c9:01:c6:50:cf:36:
                    5c:31:46:79:d1:20:56:c4:28:dc:39:a1:32:b2:d6:
                    a5:5a:ef:4f:3f:89:ff:e6:d4:ba:f1:0b:26:37:63:
                    d4:d5:28:9f:d3:82:ff:c3:9a:21:0d:34:d9:bf:01:
                    00:a2:21:ee:d8:d4:5a:79:13:7e:3b:5b:43:31:5e:
                    87:cc:19:e8:c3:41:b8:7d:84:a7:b3:98:a0:5d:4d:
                    90:68:d7:6c:34:9f:13:58:8f:e7:97:1c:d6:ee:1d:
                    61:2d:44:f2:0f:10:21:8a:69:31:a2:33:9c:3c:9c:
                    be:f9:67:db:b4:06:65:58:f5:7e:f3:84:44:5d:91:
                    8e:a9:a8:6e:72:d3:eb:84:56:6c:4b:b8:ed:d3:bf:
                    f4:82:a5:7b:90:7b:23:e7:a2:60:fd:eb:2b:9c:d0:
                    e2:e4:d3:2d:6a:8e:50:fe:42:c2:21:23:65:a4:9e:
                    0c:75:df:cd:e9:3b:f8:75:75:dc:43:2c:c1:e7:88:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DC:6B:95:DA:AB:12:7C:A0:E7:53:07:41:48:08:24:79:12:2C:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616973CC21911F1963376D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:2f:aa:d1:80:ce:da:44:49:7d:d6:c1:6e:cd:62:2e:7b:
         8b:f3:5c:63:bb:20:dd:4d:39:90:52:f5:8d:24:b7:f6:a8:73:
         74:a3:50:7e:9f:92:fb:9c:20:6f:71:67:77:cb:d0:5c:32:57:
         28:99:c7:96:ca:a3:c6:33:63:3d:04:4a:7f:84:82:c5:24:b2:
         9d:c9:ff:86:32:70:6e:67:20:7a:de:6d:a9:e7:35:4d:85:5c:
         c3:dd:bf:69:bf:a1:e1:44:1e:7e:36:24:61:d2:63:73:b2:0b:
         dd:4b:32:e2:85:8c:48:b6:59:b5:ca:ae:83:c3:c1:d4:22:c4:
         de:7f:06:76:52:af:0f:c8:7d:b6:74:08:f3:34:d8:8d:0e:18:
         ae:a7:b2:61:e0:ff:76:62:2a:eb:4f:f2:be:37:38:7e:be:ed:
         e6:d0:de:04:57:64:1b:bb:f6:b6:85:43:5b:8b:18:0b:30:06:
         b1:87:ea:0b:49:44:b5:e5:15:13:93:16:ef:e3:6c:d4:2f:f9:
         c7:63:4d:61:ad:5a:b7:56:6d:d7:f3:e1:e8:a3:e5:31:6e:d8:
         02:db:62:8e:e0:58:b0:57:5b:33:32:fa:2f:8c:31:6e:80:52:
         81:04:bd:2f:74:3d:e9:f0:31:19:5c:9a:03:51:1b:6e:fb:a6:
         8d:2d:5c:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeyaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA3MDYzMzMxWhcNMjcwOTEwMDYzMzMxWjAYMRYw
FAYDVQQDEw02YWM1ZTdjMC1jZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4GLDSzXRK0zWs3F0Xk1+M/Y7fIss0GkfNr2kbCWfCotfBkxmcBKJWhB7
oEFCmfuqWeCf5U3Xwpqq8NLo7/hP2aeqXPjJAcZQzzZcMUZ50SBWxCjcOaEystal
Wu9PP4n/5tS68QsmN2PU1Sif04L/w5ohDTTZvwEAoiHu2NRaeRN+O1tDMV6HzBno
w0G4fYSns5igXU2QaNdsNJ8TWI/nlxzW7h1hLUTyDxAhimkxojOcPJy++WfbtAZl
WPV+84REXZGOqahuctPrhFZsS7jt07/0gqV7kHsj56Jg/esrnNDi5NMtao5Q/kLC
ISNlpJ4Mdd/N6Tv4dXXcQyzB54hhvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM7c
a5XaqxJ8oOdTB0FICCR5EiwjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjE2OTczQ0MyMTkxMUYxOTYzMzc2RDlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4AMA0GCSqGSIb3DQEB
CwUAA4IBAQAcay+q0YDO2kRJfdbBbs1iLnuL81xjuyDdTTmQUvWNJLf2qHN0o1B+
n5L7nCBvcWd3y9BcMlcomceWyqPGM2M9BEp/hILFJLKdyf+GMnBuZyB63m2p5zVN
hVzD3b9pv6HhRB5+NiRh0mNzsgvdSzLihYxItlm1yq6Dw8HUIsTefwZ2Uq8PyH22
dAjzNNiNDhiup7Jh4P92YirrT/K+Nzh+vu3m0N4EV2Qbu/a2hUNbixgLMAaxh+oL
SUS15RUTkxbv42zUL/nHY01hrVq3Vm3X8+Hoo+UxbtgC22KO4FiwV1szMvovjDFu
gFKBBL0vdD3p8DEZXJoDURtu+6aNLVxo
-----END CERTIFICATE-----