Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E195AD69D5111F1B0D3F5C4CE1D38B0.roa
File:                     2E195AD69D5111F1B0D3F5C4CE1D38B0.roa (raw, json)
Hash identifier:          UYf5c/JF4PGgsj454LZbjy0/ggSQzjtR0iF+1LmO2IM=
Subject key identifier:   6D:21:9F:8F:31:D0:2E:33:7A:4F:99:72:7C:3F:84:F1:76:0C:FB:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E192
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E195AD69D5111F1B0D3F5C4CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:12:22 +0000
ROA not before:           Fri 21 Aug 2026 11:12:18 +0000
ROA not after:            Thu 08 Oct 2026 11:12:18 +0000
asID:                     63099
IP address blocks:        154.82.134.0/24 maxlen: 24
                          154.82.148.0/24 maxlen: 24
                          154.82.158.0/24 maxlen: 24
                          154.83.106.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123282 (0x1e192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 11:12:18 2026 GMT
            Not After : Oct  8 11:12:18 2026 GMT
        Subject: CN=6a883296-8a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:dd:6d:1f:2f:7a:9b:af:a9:45:2e:a1:14:
                    95:69:ed:59:2b:9b:92:d6:93:60:24:d0:bd:1c:b8:
                    4d:95:c8:5d:82:6e:a3:47:1e:47:59:25:84:fe:2a:
                    0a:5a:15:e3:2a:e5:a3:89:b0:29:25:e0:8b:04:a6:
                    ed:dc:73:79:56:6a:03:c4:b9:4e:36:59:c1:7d:d5:
                    76:db:43:f3:c4:d7:03:93:dd:68:67:1f:2b:e6:3e:
                    71:22:ff:38:55:1c:e2:0d:76:21:a5:14:47:24:6c:
                    db:23:13:50:e6:e6:d2:bb:30:ec:b4:b1:b8:f0:e8:
                    13:7f:bc:a6:5b:d5:23:83:9b:b2:ac:b8:5e:9a:36:
                    72:37:07:26:35:08:ed:de:a1:19:03:43:28:a2:98:
                    75:48:19:59:4a:82:cd:2f:b4:80:a9:56:ab:06:83:
                    e5:06:bf:8f:02:1c:76:a5:41:f3:6b:9a:42:77:bd:
                    61:2e:ee:59:dd:d9:24:f2:c5:f5:3b:3b:49:f5:c9:
                    52:9d:f9:b8:d1:e9:07:58:0b:55:05:d4:56:d4:b9:
                    04:f1:56:03:9a:3a:6b:ae:a7:7b:d5:3e:61:4a:ce:
                    a0:0c:76:ee:99:8c:64:26:b6:b5:41:de:74:1a:d9:
                    ff:34:0a:97:eb:3a:c1:66:6c:93:26:3d:91:b3:95:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:21:9F:8F:31:D0:2E:33:7A:4F:99:72:7C:3F:84:F1:76:0C:FB:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E195AD69D5111F1B0D3F5C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.134.0/24
                  154.82.148.0/24
                  154.82.158.0/24
                  154.83.106.0/24
                  154.90.134.0/24
                  154.90.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:02:76:92:2b:90:95:bb:f4:49:b7:e8:82:c1:e9:0a:d8:17:
         e8:90:29:70:f3:2a:bc:3d:0d:de:4c:a4:2c:2a:fc:2a:13:3b:
         8c:69:d3:7d:0a:e5:a2:fb:fa:1c:c6:52:df:59:dd:2b:cf:71:
         0b:62:c0:f3:68:83:cd:0b:7f:d5:87:97:b0:c9:fb:28:80:3d:
         d3:09:ed:a4:1b:6c:69:c0:91:c9:f3:99:d0:8e:5f:c3:78:ab:
         10:1b:12:9b:f3:8e:f1:c8:af:48:cd:bc:68:8e:a0:0b:e3:ae:
         1d:b0:83:cf:44:d1:f4:a5:2d:1a:fa:f2:08:c6:db:b5:ea:9a:
         f1:83:58:b2:85:7d:0b:e0:06:5b:25:aa:6f:45:98:15:cc:6a:
         c7:e1:02:85:19:11:89:7e:7f:e5:31:b7:39:3e:80:a2:92:79:
         51:9b:9b:35:b2:e4:28:e5:f5:17:d9:a4:d3:b8:27:74:4b:43:
         47:fc:e5:f1:ad:2f:18:c7:cd:02:32:77:ff:a0:43:fb:d7:99:
         ad:c8:26:54:a4:1d:a1:97:56:69:85:33:3b:6c:c6:ce:3d:22:
         fc:d7:89:29:08:57:8e:5e:32:ee:fd:0e:0b:50:94:de:b0:25:
         17:40:6a:8d:b5:c2:22:c3:e0:5e:2a:d9:21:b1:c3:61:3c:ce:
         1d:b8:2c:52
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAeGSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMTExMjE4WhcNMjYxMDA4MTExMjE4WjAYMRYw
FAYDVQQDEw02YTg4MzI5Ni04YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA09/dbR8vepuvqUUuoRSVae1ZK5uS1pNgJNC9HLhNlchdgm6jRx5HWSWE
/ioKWhXjKuWjibApJeCLBKbt3HN5VmoDxLlONlnBfdV220PzxNcDk91oZx8r5j5x
Iv84VRziDXYhpRRHJGzbIxNQ5ubSuzDstLG48OgTf7ymW9Ujg5uyrLhemjZyNwcm
NQjt3qEZA0Mooph1SBlZSoLNL7SAqVarBoPlBr+PAhx2pUHza5pCd71hLu5Z3dkk
8sX1OztJ9clSnfm40ekHWAtVBdRW1LkE8VYDmjprrqd71T5hSs6gDHbumYxkJra1
Qd50Gtn/NAqX6zrBZmyTJj2Rs5V45QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFG0h
n48x0C4zek+Zcnw/hPF2DPtzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTE5NUFENjlENTExMUYxQjBEM0Y1QzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAmlKGAwQAmlKUAwQAmlKe
AwQAmlNqAwQAmlqGAwQAmlqMMA0GCSqGSIb3DQEBCwUAA4IBAQBhAnaSK5CVu/RJ
t+iCwekK2BfokClw8yq8PQ3eTKQsKvwqEzuMadN9CuWi+/ocxlLfWd0rz3ELYsDz
aIPNC3/Vh5ewyfsogD3TCe2kG2xpwJHJ85nQjl/DeKsQGxKb847xyK9IzbxojqAL
464dsIPPRNH0pS0a+vIIxtu16prxg1iyhX0L4AZbJapvRZgVzGrH4QKFGRGJfn/l
Mbc5PoCiknlRm5s1suQo5fUX2aTTuCd0S0NH/OXxrS8Yx80CMnf/oEP715mtyCZU
pB2hl1ZphTM7bMbOPSL814kpCFeOXjLu/Q4LUJTesCUXQGqNtcIiw+BeKtkhscNh
PM4duCxS
-----END CERTIFICATE-----