Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128AB386A14911F191B7E00CCF1D38B0.roa
File:                     128AB386A14911F191B7E00CCF1D38B0.roa (raw, json)
Hash identifier:          7Y048to6Yy6PpynGR3H6WPpFyI7v70GqfNuvIIWU0MU=
Subject key identifier:   1C:07:63:01:98:D9:6B:A0:9E:DB:5F:98:4A:C2:46:77:FA:15:07:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E382
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128AB386A14911F191B7E00CCF1D38B0.roa
Signing time:             Wed 26 Aug 2026 12:24:24 +0000
ROA not before:           Wed 26 Aug 2026 12:24:19 +0000
ROA not after:            Sat 25 Aug 2029 12:24:19 +0000
asID:                     17561
IP address blocks:        154.221.164.0/24 maxlen: 24
                          154.221.165.0/24 maxlen: 24
                          154.221.166.0/24 maxlen: 24
                          154.221.167.0/24 maxlen: 24
                          154.221.168.0/24 maxlen: 24
                          154.221.169.0/24 maxlen: 24
                          154.221.170.0/24 maxlen: 24
                          154.221.171.0/24 maxlen: 24
                          154.221.172.0/24 maxlen: 24
                          154.221.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123778 (0x1e382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 12:24:19 2026 GMT
            Not After : Aug 25 12:24:19 2029 GMT
        Subject: CN=6a8edaf8-4c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:a1:55:57:0f:39:39:40:71:66:3c:80:05:
                    12:6c:65:f5:21:ee:3f:90:d9:35:ba:ed:64:e0:82:
                    3b:ac:de:49:87:be:3d:a7:da:8a:d4:da:33:a9:29:
                    d1:93:09:27:4d:19:7f:18:bb:16:70:a2:bd:66:c0:
                    e3:c5:08:84:e3:7d:2e:62:ef:49:90:7f:96:75:48:
                    62:01:0b:f7:ee:65:28:55:79:12:a9:52:3d:4e:3f:
                    c9:c0:13:6b:92:2a:f5:18:cb:22:ca:5f:29:8e:86:
                    7b:94:75:e3:0a:30:ad:67:0d:f5:cd:04:fd:5f:78:
                    8f:7f:af:96:6a:c3:61:ec:1e:87:50:2f:b2:cb:91:
                    34:16:6a:4d:32:d7:ad:eb:96:1e:ff:37:e4:08:3e:
                    f1:12:e0:8f:f7:65:dc:57:2b:ab:b6:69:dd:24:ab:
                    16:83:b9:ae:42:a6:3b:15:8e:50:f7:43:c7:95:4e:
                    b5:1c:2d:c9:ce:39:d2:2e:c2:2d:a6:68:1e:a4:0a:
                    34:d8:b4:5f:b4:1d:08:56:0a:ec:9b:98:38:5c:db:
                    fd:2b:82:fe:99:8e:55:90:c4:56:e0:f1:a6:fa:6d:
                    41:d5:0b:05:1e:89:3f:17:e1:24:42:a4:3b:a0:e0:
                    4b:11:ae:d1:48:d3:0f:15:de:db:d5:0a:e2:0a:e5:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:07:63:01:98:D9:6B:A0:9E:DB:5F:98:4A:C2:46:77:FA:15:07:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128AB386A14911F191B7E00CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.164.0-154.221.173.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:f4:d3:0d:a4:c4:aa:6b:5d:d7:67:97:62:62:40:c7:71:
         00:5c:36:3f:ca:97:34:f9:cb:3a:2f:00:40:3d:99:21:35:fc:
         90:69:24:11:88:fe:16:ad:a4:51:86:49:9a:b1:3f:6a:53:8b:
         dd:a2:e0:5b:f6:d4:8a:6b:f7:d5:ae:95:fb:9d:d2:37:39:59:
         be:5a:61:38:dc:d9:14:dc:0b:16:27:6f:b5:7f:32:a9:e1:e7:
         f6:13:e6:97:41:04:66:99:8b:a2:7c:43:93:44:8f:d3:78:5a:
         87:77:0b:fb:2e:d3:74:fc:ca:05:33:ec:46:72:c5:4c:33:60:
         d3:ad:d6:d5:25:23:3e:52:94:6b:75:a2:54:c6:59:29:8c:fe:
         29:de:70:23:e2:c2:ad:f4:0a:1d:c9:e2:bc:29:04:58:53:3e:
         07:76:22:04:12:d2:1d:12:fe:57:0e:f9:97:1e:ec:4e:ad:9d:
         9c:dd:37:e2:c7:60:ec:78:e1:4b:39:a4:18:f4:21:21:3f:d6:
         b1:3b:a5:e3:21:21:2a:d1:6a:cd:c6:69:81:a8:06:da:d5:f9:
         aa:29:35:a1:05:99:f5:83:a4:b8:95:1e:09:c6:b3:50:5f:bc:
         03:37:d7:a4:ea:76:be:2a:38:64:f3:4d:02:02:39:23:96:4a:
         7d:fe:c1:3b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeOCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI2MTIyNDE5WhcNMjkwODI1MTIyNDE5WjAYMRYw
FAYDVQQDEw02YThlZGFmOC00YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs4uhVVcPOTlAcWY8gAUSbGX1Ie4/kNk1uu1k4II7rN5Jh749p9qK1Noz
qSnRkwknTRl/GLsWcKK9ZsDjxQiE430uYu9JkH+WdUhiAQv37mUoVXkSqVI9Tj/J
wBNrkir1GMsiyl8pjoZ7lHXjCjCtZw31zQT9X3iPf6+WasNh7B6HUC+yy5E0FmpN
Mtet65Ye/zfkCD7xEuCP92XcVyurtmndJKsWg7muQqY7FY5Q90PHlU61HC3JzjnS
LsItpmgepAo02LRftB0IVgrsm5g4XNv9K4L+mY5VkMRW4PGm+m1B1QsFHok/F+Ek
QqQ7oOBLEa7RSNMPFd7b1QriCuVZJwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBwH
YwGY2WugnttfmErCRnf6FQeCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMjhBQjM4NkExNDkxMUYxOTFCN0UwMENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa3aQDBAGa3awwDQYJ
KoZIhvcNAQELBQADggEBACxy9NMNpMSqa13XZ5diYkDHcQBcNj/KlzT5yzovAEA9
mSE1/JBpJBGI/hatpFGGSZqxP2pTi92i4Fv21Ipr99Wulfud0jc5Wb5aYTjc2RTc
CxYnb7V/Mqnh5/YT5pdBBGaZi6J8Q5NEj9N4Wod3C/su03T8ygUz7EZyxUwzYNOt
1tUlIz5SlGt1olTGWSmM/inecCPiwq30Ch3J4rwpBFhTPgd2IgQS0h0S/lcO+Zce
7E6tnZzdN+LHYOx44Us5pBj0ISE/1rE7peMhISrRas3GaYGoBtrV+aopNaEFmfWD
pLiVHgnGs1BfvAM316Tqdr4qOGTzTQICOSOWSn3+wTs=
-----END CERTIFICATE-----