Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4623C4BCA311F1B93747B3CE1D38B0.roa
File:                     1F4623C4BCA311F1B93747B3CE1D38B0.roa (raw, json)
Hash identifier:          8jIG1VSaFNZrK9PkJfUNPA9/SpUnOWp6zU0itmCSaBM=
Subject key identifier:   50:0F:03:83:7E:53:B2:B0:4D:C0:B2:74:4D:D2:04:21:39:AF:C2:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4623C4BCA311F1B93747B3CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:47:02 +0000
ROA not before:           Wed 30 Sep 2026 07:46:58 +0000
ROA not after:            Sat 07 Oct 2028 07:46:58 +0000
asID:                     142132
IP address blocks:        154.196.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 08:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125844 (0x1eb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:46:58 2026 GMT
            Not After : Oct  7 07:46:58 2028 GMT
        Subject: CN=6abcbe76-38d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:ff:7c:10:79:75:6a:48:fb:80:79:a5:dd:
                    95:61:15:c4:09:09:e1:6c:fd:53:cd:4c:c2:26:02:
                    c3:3f:22:b4:ef:d3:b6:34:28:80:f9:a0:6f:75:aa:
                    65:4d:7f:e7:c8:6e:e6:4b:e4:b6:73:0e:05:13:5c:
                    1a:10:74:b4:f1:32:31:2b:77:e7:ed:84:bc:81:dc:
                    0e:cf:bf:b7:f0:1c:52:cc:aa:99:45:b0:f9:38:ef:
                    0c:97:70:f0:46:17:e4:e0:09:65:51:4e:83:50:a4:
                    bd:61:d7:e1:7f:7e:b3:43:7a:a2:df:ff:d8:86:a0:
                    78:31:06:27:c9:6f:ad:44:d9:68:32:b9:05:f0:7a:
                    d1:00:99:39:28:7b:cd:57:2f:f2:30:95:bd:fd:26:
                    0f:ae:e1:3e:00:11:d5:9b:71:a7:c7:ce:5f:3a:b0:
                    9c:cf:f0:34:25:cc:69:2f:41:84:f1:69:33:6d:df:
                    e3:36:d9:18:be:58:13:dc:2b:55:cf:25:6c:c7:10:
                    0f:c6:b5:0b:5c:be:7d:dc:25:95:e5:9b:aa:b7:b5:
                    54:1f:d2:f6:5e:70:db:22:79:37:88:61:4c:10:60:
                    6b:84:7e:d3:ac:b9:8b:85:06:be:38:7b:fc:89:dc:
                    10:a4:87:83:94:50:28:b8:1c:7e:09:21:53:73:47:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:03:83:7E:53:B2:B0:4D:C0:B2:74:4D:D2:04:21:39:AF:C2:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4623C4BCA311F1B93747B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:85:b4:e7:65:db:73:10:cf:d7:be:56:ae:11:12:ed:2d:
         5e:be:9d:e6:4d:c5:53:3c:06:1d:13:39:6b:46:df:22:4d:0a:
         74:1a:d3:3c:0d:21:85:ca:4e:ca:b7:cf:8f:a4:50:b0:75:d9:
         7c:ea:11:a1:3e:e4:69:27:c3:03:3a:1a:44:52:dc:32:26:cf:
         df:6e:43:10:36:e2:4c:41:ea:5a:53:53:d8:06:2e:10:74:fd:
         44:07:84:5d:05:bb:1d:92:56:be:75:e3:20:81:6d:7b:c9:45:
         85:1e:2e:c6:76:ed:0c:ad:19:be:4d:34:d6:68:57:4a:8c:bb:
         ad:37:b6:ef:40:a9:03:35:52:51:12:96:7d:82:a4:cd:ce:54:
         5e:8f:ba:a8:75:44:5d:9a:ee:41:d4:a4:e1:05:b6:c3:bd:48:
         95:41:cb:7f:d3:c7:44:30:73:df:b7:41:23:77:d7:a9:38:5d:
         55:44:ec:10:3d:74:3c:47:d9:5d:d6:0b:a7:34:68:14:dc:43:
         14:bc:b4:06:cb:a7:df:b7:7e:44:0d:c3:4e:e6:cb:4b:ed:68:
         9e:5a:3e:ea:9d:43:5f:81:60:f9:94:bf:3b:00:dd:46:18:db:
         11:f7:06:06:8d:d7:d2:31:e9:be:5e:96:33:bb:92:df:37:8b:
         fe:0c:65:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeuUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTMwMDc0NjU4WhcNMjgxMDA3MDc0NjU4WjAYMRYw
FAYDVQQDEw02YWJjYmU3Ni0zOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs7L/fBB5dWpI+4B5pd2VYRXECQnhbP1TzUzCJgLDPyK079O2NCiA+aBv
daplTX/nyG7mS+S2cw4FE1waEHS08TIxK3fn7YS8gdwOz7+38BxSzKqZRbD5OO8M
l3DwRhfk4AllUU6DUKS9Ydfhf36zQ3qi3//YhqB4MQYnyW+tRNloMrkF8HrRAJk5
KHvNVy/yMJW9/SYPruE+ABHVm3Gnx85fOrCcz/A0JcxpL0GE8Wkzbd/jNtkYvlgT
3CtVzyVsxxAPxrULXL593CWV5Zuqt7VUH9L2XnDbInk3iGFMEGBrhH7TrLmLhQa+
OHv8idwQpIeDlFAouBx+CSFTc0fppwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFAP
A4N+U7KwTcCydE3SBCE5r8JZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjQ2MjNDNEJDQTMxMUYxQjkzNzQ3QjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsSKMA0GCSqGSIb3DQEB
CwUAA4IBAQAJqYW052XbcxDP175WrhES7S1evp3mTcVTPAYdEzlrRt8iTQp0GtM8
DSGFyk7Kt8+PpFCwddl86hGhPuRpJ8MDOhpEUtwyJs/fbkMQNuJMQepaU1PYBi4Q
dP1EB4RdBbsdkla+deMggW17yUWFHi7Gdu0MrRm+TTTWaFdKjLutN7bvQKkDNVJR
EpZ9gqTNzlRej7qodURdmu5B1KThBbbDvUiVQct/08dEMHPft0Ejd9epOF1VROwQ
PXQ8R9ld1gunNGgU3EMUvLQGy6fft35EDcNO5stL7WieWj7qnUNfgWD5lL87AN1G
GNsR9wYGjdfSMem+XpYzu5LfN4v+DGXY
-----END CERTIFICATE-----