Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2220C6B0A8FA11F1A73631A3CE1D38B0.roa
File:                     2220C6B0A8FA11F1A73631A3CE1D38B0.roa (raw, json)
Hash identifier:          EHhUCcj4PhvqgrMSunpEPftQdlXuuwcDJ/2GcAYcNLU=
Subject key identifier:   A3:F0:EE:51:B7:6A:73:48:C9:9B:3E:74:1C:54:52:AD:B0:F5:8A:5F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2220C6B0A8FA11F1A73631A3CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 07:19:30 +0000
ROA not before:           Sat 05 Sep 2026 07:19:26 +0000
ROA not after:            Tue 15 Sep 2026 07:19:26 +0000
asID:                     147176
IP address blocks:        154.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 09:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124331 (0x1e5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  5 07:19:26 2026 GMT
            Not After : Sep 15 07:19:26 2026 GMT
        Subject: CN=6a9bc281-a27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:9b:be:ab:70:a3:46:33:38:23:2f:51:a6:
                    e7:92:54:ae:41:6e:aa:6a:01:a7:9e:85:40:f6:65:
                    5a:b1:bc:52:8c:e7:f5:c3:a7:2c:41:01:eb:9f:f7:
                    66:35:ed:fd:fb:2c:16:59:9c:5a:c8:63:0b:e0:87:
                    bd:ac:bb:ae:52:71:04:22:ca:37:04:81:5f:02:fa:
                    51:bc:75:fb:d0:ab:3a:c4:3f:65:a8:b9:2b:70:27:
                    a4:1c:9f:81:10:22:8a:8b:09:f6:81:85:82:0b:ef:
                    f4:19:f8:9d:b9:00:de:16:dd:e5:6e:d5:95:15:da:
                    b4:f1:da:94:c0:f5:2a:e6:f6:6f:1b:07:ed:1f:54:
                    e3:32:c7:92:57:2b:eb:01:ea:92:91:c5:4a:3c:96:
                    80:3c:6e:a9:21:48:2a:37:04:5d:ef:0b:2e:01:45:
                    40:a8:b3:4d:4b:15:6c:90:63:86:a1:63:fa:df:e5:
                    07:50:98:c8:34:94:03:57:1c:27:46:1d:19:4c:e7:
                    18:50:d0:f7:b6:9d:41:3b:22:f2:d1:90:cf:2d:15:
                    fd:2f:65:97:9b:4f:98:ee:96:5b:ed:c9:61:e0:2e:
                    b9:57:fc:0c:65:a0:7e:a0:b5:e7:91:a4:a1:9e:f0:
                    7f:48:42:81:bc:96:67:0b:b7:39:7d:de:0f:ed:75:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:EE:51:B7:6A:73:48:C9:9B:3E:74:1C:54:52:AD:B0:F5:8A:5F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2220C6B0A8FA11F1A73631A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:41:cd:12:7f:b4:93:5b:ef:19:f6:01:d5:3f:f9:83:d8:
         82:ac:42:1b:4b:b0:de:45:ba:e9:73:e0:e1:8c:ef:99:64:35:
         9d:a3:ed:f6:6e:db:03:f3:3d:b0:d1:67:d6:67:ff:04:94:19:
         c2:2c:da:e0:14:f5:7b:ab:87:ce:6e:8e:40:a8:fc:43:3b:7d:
         f7:10:9e:ed:80:c9:44:5e:dd:3e:51:cf:6f:d7:45:e7:16:6a:
         2c:6a:6f:68:0c:02:16:75:97:17:d8:3c:4a:d7:f6:33:85:6e:
         3a:1a:36:77:9b:9c:3e:2f:f4:25:a1:44:f2:5a:bf:19:85:28:
         1c:04:93:c9:8f:fc:2a:42:3d:7d:f8:55:ae:5f:d9:6c:32:9e:
         a4:44:da:ed:d7:35:43:65:6a:4d:6d:13:55:40:0e:d9:ed:83:
         ac:74:01:10:c2:c1:9f:ac:ce:72:f6:c6:57:9d:bb:25:21:20:
         5c:34:c1:a2:b1:62:9b:dd:d2:d1:4a:8d:4c:d2:9f:29:e2:02:
         b4:9d:55:f7:60:c8:8e:6d:58:2d:90:36:25:ba:f7:e9:48:07:
         4d:be:bf:af:9e:6d:e7:71:78:24:35:c5:ee:75:f1:45:5c:00:
         91:71:06:b1:df:a1:7a:f7:94:37:9f:21:b5:dd:ef:5c:5e:cf:
         c6:05:ff:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeWrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA1MDcxOTI2WhcNMjYwOTE1MDcxOTI2WjAYMRYw
FAYDVQQDEw02YTliYzI4MS1hMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAog6bvqtwo0YzOCMvUabnklSuQW6qagGnnoVA9mVasbxSjOf1w6csQQHr
n/dmNe39+ywWWZxayGML4Ie9rLuuUnEEIso3BIFfAvpRvHX70Ks6xD9lqLkrcCek
HJ+BECKKiwn2gYWCC+/0GfiduQDeFt3lbtWVFdq08dqUwPUq5vZvGwftH1TjMseS
VyvrAeqSkcVKPJaAPG6pIUgqNwRd7wsuAUVAqLNNSxVskGOGoWP63+UHUJjINJQD
VxwnRh0ZTOcYUND3tp1BOyLy0ZDPLRX9L2WXm0+Y7pZb7clh4C65V/wMZaB+oLXn
kaShnvB/SEKBvJZnC7c5fd4P7XWrbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKPw
7lG3anNIyZs+dBxUUq2w9YpfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjIwQzZCMEE4RkExMUYxQTczNjMxQTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSZMA0GCSqGSIb3DQEB
CwUAA4IBAQAZj0HNEn+0k1vvGfYB1T/5g9iCrEIbS7DeRbrpc+DhjO+ZZDWdo+32
btsD8z2w0WfWZ/8ElBnCLNrgFPV7q4fObo5AqPxDO333EJ7tgMlEXt0+Uc9v10Xn
Fmosam9oDAIWdZcX2DxK1/YzhW46GjZ3m5w+L/QloUTyWr8ZhSgcBJPJj/wqQj19
+FWuX9lsMp6kRNrt1zVDZWpNbRNVQA7Z7YOsdAEQwsGfrM5y9sZXnbslISBcNMGi
sWKb3dLRSo1M0p8p4gK0nVX3YMiObVgtkDYluvfpSAdNvr+vnm3ncXgkNcXudfFF
XACRcQax36F695Q3nyG13e9cXs/GBf+t
-----END CERTIFICATE-----