Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2766E664B7EA11F1B6E29FE5CE1D38B0.roa
File:                     2766E664B7EA11F1B6E29FE5CE1D38B0.roa (raw, json)
Hash identifier:          /m0ujTltgYRXetsK6saRN0qvvdf+2ArolEqKVXDpD5Y=
Subject key identifier:   CD:BC:9B:93:A6:BD:43:F5:0E:CF:44:CD:10:45:3C:8C:BF:8F:AC:1E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2766E664B7EA11F1B6E29FE5CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:32:54 +0000
ROA not before:           Thu 24 Sep 2026 07:32:50 +0000
ROA not after:            Sun 01 Nov 2026 07:32:50 +0000
asID:                     62240
IP address blocks:        154.194.90.0/24 maxlen: 24
                          154.194.91.0/24 maxlen: 24
                          154.195.0.0/24 maxlen: 24
                          154.195.1.0/24 maxlen: 24
                          154.195.100.0/24 maxlen: 24
                          154.195.121.0/24 maxlen: 24
                          154.195.122.0/24 maxlen: 24
                          154.195.173.0/24 maxlen: 24
                          154.195.174.0/24 maxlen: 24
                          154.195.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125579 (0x1ea8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:32:50 2026 GMT
            Not After : Nov  1 07:32:50 2026 GMT
        Subject: CN=6ab4d226-c506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:52:a6:26:36:ba:ac:d5:28:1b:da:19:4e:
                    07:6b:bf:57:7b:d7:2d:ea:4d:43:8f:ea:90:b0:c6:
                    1a:58:c0:41:07:ab:d9:43:a0:15:c7:12:d7:49:76:
                    83:48:26:ae:7e:06:d3:91:f6:9a:08:b9:9a:2d:11:
                    ed:bc:d7:aa:61:61:a0:27:7f:02:fd:63:33:86:66:
                    97:93:49:e9:89:02:38:14:b0:29:16:98:e4:64:99:
                    68:6d:04:ad:ff:55:11:aa:fc:fc:15:e8:b1:94:c8:
                    68:4c:67:7c:e2:45:7b:cf:80:5f:d4:36:33:1b:1c:
                    23:74:f7:1b:2c:f0:37:99:c7:ce:c2:e1:5a:7a:8d:
                    3f:ac:c6:8d:b4:ec:ff:b0:2a:5b:56:7b:39:1f:db:
                    17:fe:b5:bf:16:04:4f:63:36:90:1e:5e:c1:70:64:
                    83:f0:2d:bc:b3:2d:ff:4e:3c:c4:3e:14:53:dc:3f:
                    69:9f:4d:c4:2c:d1:9c:d4:72:c6:4a:6e:5e:d7:5f:
                    2e:96:96:da:3d:79:51:42:79:c4:51:2b:33:8d:af:
                    d7:d9:0a:5b:dc:56:ad:90:3c:4e:a7:50:0a:dc:c5:
                    b4:9d:ac:14:54:07:8d:f5:fa:9e:11:85:3c:f9:24:
                    22:2e:a1:f0:a0:07:1d:95:c9:b5:50:08:c4:57:59:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:9B:93:A6:BD:43:F5:0E:CF:44:CD:10:45:3C:8C:BF:8F:AC:1E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2766E664B7EA11F1B6E29FE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.90.0/23
                  154.195.0.0/23
                  154.195.100.0/24
                  154.195.121.0-154.195.122.255
                  154.195.173.0-154.195.175.255

    Signature Algorithm: sha256WithRSAEncryption
         62:14:18:5a:b0:59:e0:b0:18:ee:95:7e:d7:07:48:35:1c:6e:
         af:05:a1:85:d5:68:c3:50:36:07:17:c7:99:b1:41:06:c7:de:
         55:85:b5:21:cc:bd:48:f7:3f:de:a4:51:c6:08:b9:94:0e:d6:
         d6:c4:2b:f6:52:7b:50:21:61:7b:cd:43:10:b7:40:0b:cf:66:
         13:f8:d6:ad:66:12:58:51:e2:d5:df:e0:7c:7f:72:ee:0b:d5:
         7d:8c:7a:d0:97:7e:e3:fd:95:9a:13:00:38:37:ee:27:01:d5:
         e9:92:5f:eb:45:86:26:d2:0f:86:df:c7:cb:8f:77:b8:ad:9e:
         f4:60:ec:b8:8a:12:c7:bd:ec:19:b6:92:82:92:f5:dd:70:a4:
         d6:41:e4:33:fe:2a:96:ea:56:92:be:c5:75:f0:63:8e:03:0e:
         cf:d1:ee:da:41:0d:fb:77:57:08:47:04:c5:8e:43:4b:fd:ca:
         f9:92:6f:6e:c2:a6:de:0e:0d:bc:94:9e:a7:3e:fe:36:19:32:
         51:2a:8b:0a:67:8f:de:21:01:a4:c4:92:2e:9b:d1:03:60:eb:
         27:8b:ed:e6:d6:84:4e:df:9f:22:61:0e:00:b6:07:16:bc:3f:
         30:7b:cb:9d:f5:2a:e7:9b:a5:c6:d9:0d:d2:3c:35:7d:96:5d:
         75:42:0c:84
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAeqLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI0MDczMjUwWhcNMjYxMTAxMDczMjUwWjAYMRYw
FAYDVQQDEw02YWI0ZDIyNi1jNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAucNSpiY2uqzVKBvaGU4Ha79Xe9ct6k1Dj+qQsMYaWMBBB6vZQ6AVxxLX
SXaDSCaufgbTkfaaCLmaLRHtvNeqYWGgJ38C/WMzhmaXk0npiQI4FLApFpjkZJlo
bQSt/1URqvz8FeixlMhoTGd84kV7z4Bf1DYzGxwjdPcbLPA3mcfOwuFaeo0/rMaN
tOz/sCpbVns5H9sX/rW/FgRPYzaQHl7BcGSD8C28sy3/TjzEPhRT3D9pn03ELNGc
1HLGSm5e118ulpbaPXlRQnnEUSszja/X2Qpb3FatkDxOp1AK3MW0nawUVAeN9fqe
EYU8+SQiLqHwoAcdlcm1UAjEV1mKAwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFM28
m5OmvUP1Ds9EzRBFPIy/j6weMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNzY2RTY2NEI3RUExMUYxQjZFMjlGRTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmsJaAwQBmsMAAwQAmsNk
MAwDBACaw3kDBACaw3owDAMEAJrDrQMEBJrDoDANBgkqhkiG9w0BAQsFAAOCAQEA
YhQYWrBZ4LAY7pV+1wdINRxurwWhhdVow1A2BxfHmbFBBsfeVYW1Icy9SPc/3qRR
xgi5lA7W1sQr9lJ7UCFhe81DELdAC89mE/jWrWYSWFHi1d/gfH9y7gvVfYx60Jd+
4/2VmhMAODfuJwHV6ZJf60WGJtIPht/Hy493uK2e9GDsuIoSx73sGbaSgpL13XCk
1kHkM/4qlupWkr7FdfBjjgMOz9Hu2kEN+3dXCEcExY5DS/3K+ZJvbsKm3g4NvJSe
pz7+NhkyUSqLCmeP3iEBpMSSLpvRA2DrJ4vt5taETt+fImEOALYHFrw/MHvLnfUq
55ulxtkN0jw1fZZddUIMhA==
-----END CERTIFICATE-----