Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2163CCACCF7611F1820560DDCE1D38B0.roa
File:                     2163CCACCF7611F1820560DDCE1D38B0.roa (raw, json)
Hash identifier:          Aq07/oSFQ/tvUPl5GbWlMZV7PL72+sXIl3yQl01QfaY=
Subject key identifier:   ED:95:A5:3F:3C:82:40:A4:1B:4D:0E:6A:83:D1:9B:63:FC:4C:33:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2163CCACCF7611F1820560DDCE1D38B0.roa
Signing time:             Sat 24 Oct 2026 06:42:50 +0000
ROA not before:           Sat 24 Oct 2026 06:42:45 +0000
ROA not after:            Tue 03 Nov 2026 06:42:45 +0000
asID:                     139880
IP address blocks:        154.82.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 08:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126897 (0x1efb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 24 06:42:45 2026 GMT
            Not After : Nov  3 06:42:45 2026 GMT
        Subject: CN=6adc536a-5f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:f5:72:46:dd:f2:fa:b5:cc:e8:f8:97:0d:
                    08:d8:c4:eb:b8:7e:84:f0:2e:b9:f4:54:e5:e9:7f:
                    5f:69:38:1c:38:04:a8:87:77:99:92:64:90:3a:54:
                    28:d0:a6:65:2c:78:80:d9:b2:7e:e5:85:ec:50:84:
                    1e:20:0a:16:51:57:e3:01:6c:4a:c9:30:77:e0:cc:
                    4a:fa:ab:f1:d4:53:f6:a0:ec:41:30:b0:94:37:35:
                    36:f0:77:78:93:d2:b3:3e:c5:19:6d:78:ff:7f:22:
                    5a:82:cf:b2:db:cd:d5:76:54:17:6e:99:d0:88:7d:
                    04:e1:05:c0:76:56:a5:ff:ac:99:9b:8f:5f:eb:04:
                    f4:7c:14:9b:2d:56:06:79:5a:c7:9b:ec:80:a1:6a:
                    56:ea:98:98:4c:44:5f:1c:ba:5a:45:c5:3a:e9:70:
                    24:bf:54:30:e1:c6:0e:7f:b7:38:dd:71:12:74:5d:
                    07:15:9e:d5:a6:7d:d6:17:bc:21:eb:ff:e3:d4:7a:
                    10:7a:3c:72:7e:1f:39:23:50:17:67:12:c2:ba:a6:
                    e9:cc:2b:9a:4c:3f:56:23:1e:7e:39:2a:3b:38:85:
                    b9:25:db:44:ea:d8:a5:3c:63:c2:6a:c8:32:7a:40:
                    c2:5d:5b:d7:22:d8:ae:9e:bd:1a:08:66:23:2e:5f:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:A5:3F:3C:82:40:A4:1B:4D:0E:6A:83:D1:9B:63:FC:4C:33:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2163CCACCF7611F1820560DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ce:1e:b7:72:ac:0c:f0:5d:01:38:7c:95:84:d3:b3:c1:28:50:
         e2:6d:c2:56:ea:58:40:ee:28:d6:04:d2:12:62:54:a5:03:82:
         d5:79:67:2a:7e:37:2e:87:05:27:71:71:43:c3:09:81:17:05:
         1e:ed:29:01:74:e4:75:d3:06:6c:a2:b4:2b:8a:08:81:a2:51:
         f2:14:57:65:8c:d5:73:66:e6:cb:ea:20:4a:d9:69:2a:96:d2:
         a3:d9:df:c0:ad:72:71:22:84:b7:d4:de:9b:85:8f:d2:5d:a5:
         77:df:82:2a:2b:53:9e:55:1b:a5:99:d5:7c:3f:80:36:3a:e5:
         6e:5d:bc:a2:af:b4:00:12:59:39:1e:16:ac:27:14:3b:a9:77:
         95:b5:2c:c5:92:4b:8d:a7:e2:86:b9:09:e4:d8:59:83:ed:9a:
         ab:71:0f:1f:0d:f4:1e:4e:f8:f5:80:23:ae:5f:0b:a9:40:0b:
         c1:9d:f9:9b:81:a6:e3:81:d2:f3:1f:84:38:84:ab:7a:66:3d:
         3f:84:39:73:34:f0:2a:ea:d9:c8:02:cb:3c:94:ba:ca:6a:34:
         df:ad:33:48:49:80:db:27:e8:ef:25:f3:5e:d9:cf:03:e7:d2:
         24:d0:c4:f8:c4:0a:66:bf:04:21:f4:e3:c1:07:8e:87:31:70:
         8c:1e:27:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe+xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDI0MDY0MjQ1WhcNMjYxMTAzMDY0MjQ1WjAYMRYw
FAYDVQQDEw02YWRjNTM2YS01ZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8v1ckbd8vq1zOj4lw0I2MTruH6E8C659FTl6X9faTgcOASoh3eZkmSQ
OlQo0KZlLHiA2bJ+5YXsUIQeIAoWUVfjAWxKyTB34MxK+qvx1FP2oOxBMLCUNzU2
8Hd4k9KzPsUZbXj/fyJags+y283VdlQXbpnQiH0E4QXAdlal/6yZm49f6wT0fBSb
LVYGeVrHm+yAoWpW6piYTERfHLpaRcU66XAkv1Qw4cYOf7c43XESdF0HFZ7Vpn3W
F7wh6//j1HoQejxyfh85I1AXZxLCuqbpzCuaTD9WIx5+OSo7OIW5JdtE6tilPGPC
asgyekDCXVvXItiunr0aCGYjLl8FjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO2V
pT88gkCkG00OaoPRm2P8TDOrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTYzQ0NBQ0NGNzYxMUYxODIwNTYwRERDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQDOHrdyrAzwXQE4fJWE07PBKFDibcJW6lhA7ijWBNISYlSlA4LVeWcq
fjcuhwUncXFDwwmBFwUe7SkBdOR10wZsorQrigiBolHyFFdljNVzZubL6iBK2Wkq
ltKj2d/ArXJxIoS31N6bhY/SXaV334IqK1OeVRulmdV8P4A2OuVuXbyir7QAElk5
HhasJxQ7qXeVtSzFkkuNp+KGuQnk2FmD7ZqrcQ8fDfQeTvj1gCOuXwupQAvBnfmb
gabjgdLzH4Q4hKt6Zj0/hDlzNPAq6tnIAss8lLrKajTfrTNISYDbJ+jvJfNe2c8D
59Ik0MT4xApmvwQh9OPBB46HMXCMHid8
-----END CERTIFICATE-----