Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B79F0A2BF1011F1B82CE204CF1D38B0.roa
File:                     2B79F0A2BF1011F1B82CE204CF1D38B0.roa (raw, json)
Hash identifier:          jGngfS2Px9erBKi+I7ij8QRoFdO7eCGadEKwAt8DoF4=
Subject key identifier:   4E:24:DA:EA:82:3F:41:4C:B9:07:B9:0A:62:24:22:BE:E2:B3:9E:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B79F0A2BF1011F1B82CE204CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:52:40 +0000
ROA not before:           Sat 03 Oct 2026 09:52:36 +0000
ROA not after:            Tue 10 Nov 2026 09:52:36 +0000
asID:                     154177
IP address blocks:        154.90.32.0/23 maxlen: 24
                          154.90.34.0/23 maxlen: 24
                          154.90.36.0/23 maxlen: 24
                          154.90.38.0/23 maxlen: 24
                          154.90.40.0/23 maxlen: 24
                          154.90.42.0/23 maxlen: 24
                          154.90.48.0/23 maxlen: 24
                          154.90.50.0/23 maxlen: 24
                          154.90.54.0/23 maxlen: 24
                          154.90.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125946 (0x1ebfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 09:52:36 2026 GMT
            Not After : Nov 10 09:52:36 2026 GMT
        Subject: CN=6ac0d068-3b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:ad:0d:c0:bc:ac:3a:d7:9a:d9:d5:34:10:
                    30:04:ac:16:a5:08:43:fc:65:1a:8f:2a:c5:f0:8a:
                    2a:bf:f9:92:24:76:7a:b3:3b:88:70:29:59:80:83:
                    8e:ec:73:c0:bb:fc:e6:c9:cb:04:71:e3:1f:dd:31:
                    48:bd:7e:ed:1c:c6:4f:e9:cd:a8:ec:8f:d6:81:ab:
                    f5:48:2a:49:08:dc:37:10:a2:fc:a7:f3:b9:e9:98:
                    2b:2d:9d:ce:b1:34:31:cd:a7:d6:59:b6:e6:d1:6e:
                    bc:57:a9:37:48:0e:90:87:95:1b:6b:c3:2d:f6:ed:
                    21:ee:1e:79:9b:3e:5a:b0:f9:02:a3:ad:49:dd:68:
                    c3:5c:ea:ae:14:61:fb:f0:38:92:8e:41:bb:92:63:
                    da:a2:47:95:43:97:99:42:e5:7c:36:af:57:ea:ac:
                    d9:7e:ff:60:41:b7:2e:ab:57:7c:ca:59:5b:96:b1:
                    0e:d5:38:f4:ff:6e:25:81:1b:a5:01:7a:bb:0c:46:
                    9d:2a:3a:b8:74:f3:3f:fc:86:3d:90:41:d3:81:b3:
                    9d:a5:b2:83:26:4f:1d:7d:67:13:4d:9f:21:6c:e8:
                    e2:58:d1:91:64:89:29:88:c6:0c:39:3e:fd:70:1b:
                    3c:24:b2:44:cc:1d:0a:bd:e2:4d:dd:9a:87:78:1a:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:24:DA:EA:82:3F:41:4C:B9:07:B9:0A:62:24:22:BE:E2:B3:9E:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B79F0A2BF1011F1B82CE204CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.32.0-154.90.43.255
                  154.90.48.0/22
                  154.90.54.0/23
                  154.90.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:98:db:7b:54:f8:27:1a:e7:5e:a6:71:e8:dc:31:8c:09:42:
         ae:b2:c5:9e:82:73:50:7c:de:f4:bc:c1:27:c0:22:49:b8:9c:
         ea:a1:1b:89:24:9e:37:c7:49:3e:91:75:22:4c:65:8e:7f:b0:
         8b:e8:5c:ef:3d:f0:32:fd:6f:06:3b:50:37:b3:8f:08:46:75:
         82:40:50:64:58:9d:ac:c0:23:f4:db:73:f1:57:f2:53:36:c5:
         32:af:e6:2f:83:79:67:e8:27:03:c6:b3:dd:9f:51:3d:8f:31:
         34:fa:eb:0a:39:24:02:e0:f0:09:d9:de:11:f8:b8:06:5b:e5:
         60:ed:ef:4d:44:6a:d1:c5:5b:49:6d:5b:f6:db:21:1b:00:d5:
         8c:81:55:00:72:52:80:51:a3:1a:57:02:be:db:e7:4e:f2:22:
         d1:59:bf:65:14:fe:ef:9c:12:17:6a:a8:c5:d2:27:3e:fc:b0:
         10:3e:d4:62:42:2e:ec:77:74:00:6e:00:36:81:65:59:1a:dc:
         a9:bb:39:30:41:dd:5a:2b:23:5f:a8:6e:e8:f7:2f:c7:59:3c:
         fd:5a:99:fa:6c:c0:ee:2b:d7:a4:a2:a9:1c:75:bb:4f:74:be:
         b6:63:3b:57:4e:4e:48:cb:34:63:c8:99:96:37:8f:52:ab:f2:
         80:54:4e:e3
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAev6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDAzMDk1MjM2WhcNMjYxMTEwMDk1MjM2WjAYMRYw
FAYDVQQDEw02YWMwZDA2OC0zYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwuOtDcC8rDrXmtnVNBAwBKwWpQhD/GUajyrF8Ioqv/mSJHZ6szuIcClZ
gIOO7HPAu/zmycsEceMf3TFIvX7tHMZP6c2o7I/Wgav1SCpJCNw3EKL8p/O56Zgr
LZ3OsTQxzafWWbbm0W68V6k3SA6Qh5Uba8Mt9u0h7h55mz5asPkCo61J3WjDXOqu
FGH78DiSjkG7kmPaokeVQ5eZQuV8Nq9X6qzZfv9gQbcuq1d8yllblrEO1Tj0/24l
gRulAXq7DEadKjq4dPM//IY9kEHTgbOdpbKDJk8dfWcTTZ8hbOjiWNGRZIkpiMYM
OT79cBs8JLJEzB0KveJN3ZqHeBo/hwIDAQABo4ICvzCCArswHQYDVR0OBBYEFE4k
2uqCP0FMuQe5CmIkIr7is54uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQjc5RjBBMkJGMTAxMUYxQjgyQ0UyMDRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAWaWiADBAKaWigDBAKa
WjADBAGaWjYDBAGaWjwwDQYJKoZIhvcNAQELBQADggEBAEeY23tU+Cca516mcejc
MYwJQq6yxZ6Cc1B83vS8wSfAIkm4nOqhG4kknjfHST6RdSJMZY5/sIvoXO898DL9
bwY7UDezjwhGdYJAUGRYnazAI/Tbc/FX8lM2xTKv5i+DeWfoJwPGs92fUT2PMTT6
6wo5JALg8AnZ3hH4uAZb5WDt701EatHFW0ltW/bbIRsA1YyBVQByUoBRoxpXAr7b
507yItFZv2UU/u+cEhdqqMXSJz78sBA+1GJCLux3dABuADaBZVka3Km7OTBB3Vor
I1+obuj3L8dZPP1amfpswO4r16SiqRx1u090vrZjO1dOTkjLNGPImZY3j1Kr8oBU
TuM=
-----END CERTIFICATE-----