Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A6DB882AB8411F1AA4096FACE1D38B0.roa
File:                     2A6DB882AB8411F1AA4096FACE1D38B0.roa (raw, json)
Hash identifier:          cpcWgNf6TnAzCrMzrdfzkEslQqMnHyQTshsqGL8EMz4=
Subject key identifier:   A3:A7:1D:D9:B2:3B:EB:98:76:C6:B7:B7:1C:55:EE:DA:52:A8:94:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E670
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A6DB882AB8411F1AA4096FACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:52:36 +0000
ROA not before:           Tue 08 Sep 2026 12:52:32 +0000
ROA not after:            Wed 04 Nov 2026 12:52:32 +0000
asID:                     32043
IP address blocks:        154.82.162.0/23 maxlen: 24
                          154.82.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 13:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124528 (0x1e670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 12:52:32 2026 GMT
            Not After : Nov  4 12:52:32 2026 GMT
        Subject: CN=6aa00514-70e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:cf:c9:27:77:a3:23:50:09:98:fa:c0:01:
                    f0:f2:bc:f5:b3:fd:8a:95:1d:f8:40:1e:98:3e:e3:
                    dc:96:ec:ec:d8:3a:c9:fd:55:75:db:e6:d0:60:a9:
                    cb:0f:fd:cc:c1:6a:74:05:db:1d:f4:16:c4:26:ca:
                    a7:dc:ad:ec:72:1f:e6:e1:18:8c:ad:45:fd:1d:ce:
                    59:8c:25:c4:d3:69:2d:88:cd:58:b0:df:da:88:5e:
                    bf:5f:38:98:d1:58:00:7c:6f:79:91:ec:9c:6d:18:
                    e2:2d:54:af:4e:e1:74:43:3a:9c:8d:40:47:cc:22:
                    cd:a1:58:d3:1c:89:d1:cf:2f:28:5a:78:46:ed:4b:
                    2f:42:d6:65:4b:8c:35:0b:ea:22:c5:31:48:6e:bb:
                    2d:8b:6f:80:50:35:e7:4d:90:1e:83:a9:00:6a:50:
                    fd:4d:cb:18:88:9e:1b:8d:71:27:93:4c:7d:a4:02:
                    5d:2f:c8:d1:1b:f2:ba:bb:7f:fa:6a:27:c6:92:75:
                    b0:f7:f7:31:87:b2:ce:95:af:62:c9:a1:c3:89:b9:
                    68:e0:d2:ee:6c:a9:96:89:18:00:b4:51:4c:8b:d0:
                    b4:00:7c:26:e9:e6:f7:89:91:79:4a:d1:8e:a5:cd:
                    49:ab:a1:5e:3c:7f:4a:4e:e4:b1:6e:8b:40:60:11:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A7:1D:D9:B2:3B:EB:98:76:C6:B7:B7:1C:55:EE:DA:52:A8:94:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A6DB882AB8411F1AA4096FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.162.0-154.82.167.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:24:c7:97:fd:bf:8e:ef:fc:ee:40:54:ca:70:38:56:aa:
         2b:94:a0:d8:6a:29:6b:4b:02:02:98:3e:c2:a5:d3:a2:60:4c:
         48:6a:59:ca:a1:47:a5:47:30:bf:28:6d:34:36:72:b6:f4:24:
         95:d6:60:da:fb:58:40:25:fc:94:62:d4:a2:19:3e:d1:c2:b0:
         2e:c4:fa:32:38:39:65:0c:a3:94:d2:fc:72:0f:b7:0a:ac:0e:
         eb:a1:f1:5b:90:e0:cc:1f:37:5c:23:42:ae:69:be:1f:17:79:
         b3:b0:03:74:b1:5e:1f:69:6e:bf:09:cd:18:1c:5e:60:e1:0b:
         d3:bc:96:72:14:2b:33:24:22:6a:da:18:27:f3:81:cf:a3:03:
         56:2f:6e:06:6d:fa:25:6e:ff:7b:20:80:60:c7:b2:ee:ac:1b:
         45:16:28:48:f2:c0:8c:e7:8b:fc:53:af:2b:28:3a:1f:ca:31:
         bb:fa:68:59:bb:fe:9d:4f:c1:d2:57:f6:71:34:42:24:7b:a9:
         28:69:27:97:8c:c0:c7:7c:97:a3:f9:c1:43:c3:fb:d5:86:1c:
         6e:d8:ad:d8:eb:d1:ec:16:f5:ac:8d:37:58:2b:6c:4e:fd:6e:
         d2:ca:2a:34:14:81:d6:9b:1d:44:24:69:88:27:f9:db:e0:29:
         4b:81:f5:90
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeZwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MTI1MjMyWhcNMjYxMTA0MTI1MjMyWjAYMRYw
FAYDVQQDEw02YWEwMDUxNC03MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvbnPySd3oyNQCZj6wAHw8rz1s/2KlR34QB6YPuPcluzs2DrJ/VV12+bQ
YKnLD/3MwWp0Bdsd9BbEJsqn3K3sch/m4RiMrUX9Hc5ZjCXE02ktiM1YsN/aiF6/
XziY0VgAfG95keycbRjiLVSvTuF0QzqcjUBHzCLNoVjTHInRzy8oWnhG7UsvQtZl
S4w1C+oixTFIbrsti2+AUDXnTZAeg6kAalD9TcsYiJ4bjXEnk0x9pAJdL8jRG/K6
u3/6aifGknWw9/cxh7LOla9iyaHDiblo4NLubKmWiRgAtFFMi9C0AHwm6eb3iZF5
StGOpc1Jq6FePH9KTuSxbotAYBFxIQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKOn
HdmyO+uYdsa3txxV7tpSqJQmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQTZEQjg4MkFCODQxMUYxQUE0MDk2RkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUqIDBAOaUqAwDQYJ
KoZIhvcNAQELBQADggEBAB0MJMeX/b+O7/zuQFTKcDhWqiuUoNhqKWtLAgKYPsKl
06JgTEhqWcqhR6VHML8obTQ2crb0JJXWYNr7WEAl/JRi1KIZPtHCsC7E+jI4OWUM
o5TS/HIPtwqsDuuh8VuQ4MwfN1wjQq5pvh8XebOwA3SxXh9pbr8JzRgcXmDhC9O8
lnIUKzMkImraGCfzgc+jA1YvbgZt+iVu/3sggGDHsu6sG0UWKEjywIzni/xTryso
Oh/KMbv6aFm7/p1PwdJX9nE0QiR7qShpJ5eMwMd8l6P5wUPD+9WGHG7Yrdjr0ewW
9ayNN1grbE79btLKKjQUgdabHUQkaYgn+dvgKUuB9ZA=
-----END CERTIFICATE-----