Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B7905CB99D11F181313AF4CE1D38B0.roa
File:                     20B7905CB99D11F181313AF4CE1D38B0.roa (raw, json)
Hash identifier:          3DfGhOfvbgpgu0tp+A3N0r/XOdYApZhGjU+fauoSfe8=
Subject key identifier:   C2:B8:A5:D4:97:83:47:0A:A3:73:61:E6:5D:C4:E5:3B:7C:82:8B:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EADB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B7905CB99D11F181313AF4CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:26:34 +0000
ROA not before:           Sat 26 Sep 2026 11:26:30 +0000
ROA not after:            Mon 02 Nov 2026 11:26:30 +0000
asID:                     11427
IP address blocks:        154.194.8.0/22 maxlen: 24
                          154.194.16.0/21 maxlen: 24
                          154.194.24.0/22 maxlen: 24
                          154.194.196.0/22 maxlen: 24
                          154.194.216.0/21 maxlen: 24
                          154.198.128.0/19 maxlen: 24
                          154.202.144.0/20 maxlen: 24
                          154.202.192.0/18 maxlen: 24
                          154.213.168.0/21 maxlen: 24
                          154.220.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125659 (0x1eadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 11:26:30 2026 GMT
            Not After : Nov  2 11:26:30 2026 GMT
        Subject: CN=6ab7abea-e1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:20:17:19:6d:b0:81:d5:b3:e3:45:38:ba:b6:
                    bf:a9:d8:b8:22:aa:94:04:d0:ef:d0:bb:3e:41:3b:
                    b7:f8:63:78:a9:ee:68:42:18:a6:f9:39:76:ff:af:
                    d9:8d:c8:07:4f:b6:cd:4b:b7:62:0b:06:0c:71:1d:
                    47:8c:ef:0f:14:81:f5:31:94:79:75:cd:1f:3e:49:
                    d5:ed:5f:2b:a5:bd:4b:ff:7d:62:36:f1:b9:03:7d:
                    12:06:ef:0c:2c:d3:2f:65:c9:ae:8a:74:fc:8b:32:
                    ad:1c:30:5d:ba:bb:75:6d:09:3e:06:c9:f4:e1:bd:
                    cc:fc:cf:fc:b7:ac:1c:98:dd:4e:98:49:a4:0c:36:
                    aa:ff:0a:9f:87:a7:41:05:c4:55:59:7c:dc:48:fd:
                    4f:53:34:9d:26:01:77:4c:c9:9e:57:54:6c:31:4d:
                    dd:6e:3a:69:ba:7e:51:7a:d6:05:88:b8:8d:e0:ca:
                    9b:a1:08:ea:89:db:29:48:fb:d2:a2:ab:f3:56:5c:
                    5a:84:1b:9e:21:fb:91:83:27:94:b4:f7:38:4c:f5:
                    79:98:ff:cf:7c:99:a5:cb:0b:9c:43:b8:01:0f:bd:
                    fa:c8:63:ef:4c:04:45:0b:61:42:18:e2:b1:71:0c:
                    41:95:17:1a:95:0c:1f:da:d1:cf:f4:95:7b:d7:88:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:A5:D4:97:83:47:0A:A3:73:61:E6:5D:C4:E5:3B:7C:82:8B:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B7905CB99D11F181313AF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.8.0/22
                  154.194.16.0-154.194.27.255
                  154.194.196.0/22
                  154.194.216.0/21
                  154.198.128.0/19
                  154.202.144.0/20
                  154.202.192.0/18
                  154.213.168.0/21
                  154.220.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:c6:89:ca:03:1b:6d:cd:68:96:93:74:92:c6:59:61:0a:
         03:00:5b:c6:f5:39:e4:d2:bf:cc:73:b0:2d:e9:57:58:9f:ea:
         18:69:9e:8b:18:c4:15:19:7d:35:03:a8:60:0e:3c:93:e5:c5:
         5e:a8:ad:d4:48:9b:50:48:bf:09:71:f0:b3:de:2d:ac:0c:38:
         c8:0e:85:31:02:bf:23:0f:1b:20:7f:92:a0:38:aa:cf:fd:28:
         4b:b8:a3:e4:23:f5:bb:c6:cc:19:d6:b1:6a:fa:cf:f4:0d:4c:
         b0:ef:3e:ea:d0:74:02:8d:c6:2a:1a:64:2a:40:a7:03:54:a5:
         66:c9:ed:19:cb:1c:d6:e8:c4:29:06:05:26:00:08:84:de:33:
         fd:05:80:2b:d2:4b:f6:ac:88:84:ff:14:c5:74:78:05:33:21:
         d5:b2:66:57:63:93:59:ea:a3:69:bd:44:08:19:29:8f:d1:e4:
         91:1b:ba:87:cf:b6:6a:ed:85:2c:2b:13:45:99:11:c7:8b:16:
         6c:bf:e4:1c:41:44:a5:94:e6:80:8b:de:1a:d3:df:95:42:3c:
         ad:7e:05:31:3c:f5:5e:e6:e8:45:4b:d6:26:44:bd:93:93:88:
         6c:8b:ba:46:d1:f4:9e:1d:2b:9c:58:5b:b9:86:93:49:ef:cf:
         77:6d:2f:a3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAerbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI2MTEyNjMwWhcNMjYxMTAyMTEyNjMwWjAYMRYw
FAYDVQQDEw02YWI3YWJlYS1lMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7SAXGW2wgdWz40U4ura/qdi4IqqUBNDv0Ls+QTu3+GN4qe5oQhim+Tl2
/6/ZjcgHT7bNS7diCwYMcR1HjO8PFIH1MZR5dc0fPknV7V8rpb1L/31iNvG5A30S
Bu8MLNMvZcmuinT8izKtHDBdurt1bQk+Bsn04b3M/M/8t6wcmN1OmEmkDDaq/wqf
h6dBBcRVWXzcSP1PUzSdJgF3TMmeV1RsMU3dbjppun5RetYFiLiN4MqboQjqidsp
SPvSoqvzVlxahBueIfuRgyeUtPc4TPV5mP/PfJmlywucQ7gBD736yGPvTARFC2FC
GOKxcQxBlRcalQwf2tHP9JV714ghqQIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFMK4
pdSXg0cKo3Nh5l3E5Tt8gosUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMEI3OTA1Q0I5OUQxMUYxODEzMTNBRjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCmsIIMAwDBASawhADBAKa
whgDBAKawsQDBAOawtgDBAWaxoADBASaypADBAaaysADBAOa1agDBAaa3IAwDQYJ
KoZIhvcNAQELBQADggEBABnrxonKAxttzWiWk3SSxllhCgMAW8b1OeTSv8xzsC3p
V1if6hhpnosYxBUZfTUDqGAOPJPlxV6ordRIm1BIvwlx8LPeLawMOMgOhTECvyMP
GyB/kqA4qs/9KEu4o+Qj9bvGzBnWsWr6z/QNTLDvPurQdAKNxioaZCpApwNUpWbJ
7RnLHNboxCkGBSYACITeM/0FgCvSS/asiIT/FMV0eAUzIdWyZldjk1nqo2m9RAgZ
KY/R5JEbuofPtmrthSwrE0WZEceLFmy/5BxBRKWU5oCL3hrT35VCPK1+BTE89V7m
6EVL1iZEvZOTiGyLukbR9J4dK5xYW7mGk0nvz3dtL6M=
-----END CERTIFICATE-----