Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9C2C48ACE711F193D6C6E8CE1D38B0.roa
File:                     3A9C2C48ACE711F193D6C6E8CE1D38B0.roa (raw, json)
Hash identifier:          6av5mR7yw4DkqZdJvsi8nUTstX+3l9pNcCdgLtySaYs=
Subject key identifier:   F0:AD:90:9F:19:9A:7B:1D:AC:9B:26:6F:46:26:8C:CD:91:B1:96:8C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9C2C48ACE711F193D6C6E8CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:14:15 +0000
ROA not before:           Thu 10 Sep 2026 07:14:11 +0000
ROA not after:            Mon 21 Sep 2026 07:14:11 +0000
asID:                     18229
IP address blocks:        154.210.147.0/24 maxlen: 24
                          154.210.148.0/24 maxlen: 24
                          154.210.149.0/24 maxlen: 24
                          154.210.150.0/24 maxlen: 24
                          154.210.151.0/24 maxlen: 24
                          154.210.152.0/24 maxlen: 24
                          154.210.153.0/24 maxlen: 24
                          154.210.154.0/24 maxlen: 24
                          154.210.155.0/24 maxlen: 24
                          154.210.156.0/24 maxlen: 24
                          154.210.157.0/24 maxlen: 24
                          154.210.158.0/24 maxlen: 24
                          154.210.159.0/24 maxlen: 24
                          154.210.160.0/24 maxlen: 24
                          154.210.161.0/24 maxlen: 24
                          154.210.162.0/24 maxlen: 24
                          154.210.185.0/24 maxlen: 24
                          154.210.204.0/24 maxlen: 24
                          154.210.221.0/24 maxlen: 24
                          154.210.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124637 (0x1e6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:14:11 2026 GMT
            Not After : Sep 21 07:14:11 2026 GMT
        Subject: CN=6aa258c7-b1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:2d:c5:2f:f9:12:96:d5:d0:fc:2d:3e:6a:
                    4d:67:56:d9:6d:d8:6d:14:67:e3:1c:00:73:a8:65:
                    4c:03:db:96:67:94:87:a8:9d:ee:61:3c:1f:f1:54:
                    7c:4d:90:47:e1:da:da:a5:f2:88:5c:e1:90:87:b4:
                    dc:ca:ab:cd:85:f5:e9:3c:de:0b:81:75:86:40:91:
                    e1:ee:51:03:08:b6:f8:9b:98:bf:34:98:87:f4:f5:
                    90:39:32:ea:07:cc:08:7b:13:5e:58:5f:49:e0:96:
                    84:f8:59:f4:94:97:63:63:87:6d:4d:13:e0:3f:5d:
                    f1:09:12:00:0a:e1:de:fe:30:37:67:51:85:95:76:
                    37:f8:52:7a:86:26:20:54:1d:b0:93:9f:60:c0:33:
                    52:df:e0:17:6f:a0:cd:25:42:bc:89:d8:c0:97:b9:
                    f2:d7:cd:b5:fd:bc:b3:38:48:50:70:c8:18:c5:70:
                    37:9d:08:1d:6d:55:11:08:20:fb:48:29:99:0d:2f:
                    8c:f0:17:26:ae:4d:cc:f7:b4:39:8a:4d:8b:0b:30:
                    62:ba:d1:ff:86:33:2a:81:10:1c:87:54:67:5d:98:
                    fa:82:c4:6c:7e:1f:01:5f:65:3a:7b:b2:bf:7f:e0:
                    46:44:61:8b:d7:f7:44:89:ae:87:18:7f:5c:e8:d7:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AD:90:9F:19:9A:7B:1D:AC:9B:26:6F:46:26:8C:CD:91:B1:96:8C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9C2C48ACE711F193D6C6E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.147.0-154.210.162.255
                  154.210.185.0/24
                  154.210.204.0/24
                  154.210.221.0/24
                  154.210.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:5b:84:fa:0d:31:dd:74:57:df:42:ec:49:3e:39:12:d2:
         17:be:da:59:95:ca:cb:b4:c4:58:e2:0f:9d:33:33:26:ea:fa:
         d3:28:cc:27:69:a9:9a:92:77:72:69:93:61:d8:51:9c:fe:78:
         e8:10:5a:2b:a3:5b:b0:5e:b8:7f:05:25:cc:41:97:85:d0:ca:
         71:ab:9d:93:b9:83:b6:e0:57:5a:8b:b6:47:b9:ba:c4:b5:7a:
         5d:0f:e0:5a:28:31:fc:58:68:d9:b3:1e:63:9f:f0:5d:d3:fd:
         35:47:6f:7d:0f:d9:e2:db:5e:fe:40:f1:89:1a:69:3b:8c:1e:
         6f:a1:ad:36:39:28:5a:bf:03:a6:24:ea:cd:30:df:b7:6f:bb:
         6f:c6:e3:3e:cf:09:07:10:31:4b:3c:a3:d7:ff:ff:e2:69:9f:
         f5:46:6f:37:8f:1b:f1:f6:cd:c6:08:2e:d2:99:58:5a:57:05:
         29:e5:39:0d:81:cf:d0:a4:58:0a:96:e9:c0:04:d2:fc:4b:fb:
         a4:9a:ba:1b:57:c2:68:2b:2f:c6:40:12:6d:ad:f4:39:9c:dd:
         e5:ff:47:83:ca:51:17:e9:af:12:63:2e:b6:83:3d:fe:9e:5f:
         d9:33:76:4c:3c:b4:af:18:f2:17:96:ff:a9:12:3d:ba:b4:15:
         8b:10:04:3a
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAebdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEwMDcxNDExWhcNMjYwOTIxMDcxNDExWjAYMRYw
FAYDVQQDEw02YWEyNThjNy1iMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyoktxS/5EpbV0PwtPmpNZ1bZbdhtFGfjHABzqGVMA9uWZ5SHqJ3uYTwf
8VR8TZBH4drapfKIXOGQh7TcyqvNhfXpPN4LgXWGQJHh7lEDCLb4m5i/NJiH9PWQ
OTLqB8wIexNeWF9J4JaE+Fn0lJdjY4dtTRPgP13xCRIACuHe/jA3Z1GFlXY3+FJ6
hiYgVB2wk59gwDNS3+AXb6DNJUK8idjAl7ny1821/byzOEhQcMgYxXA3nQgdbVUR
CCD7SCmZDS+M8Bcmrk3M97Q5ik2LCzBiutH/hjMqgRAch1RnXZj6gsRsfh8BX2U6
e7K/f+BGRGGL1/dEia6HGH9c6NeamQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFPCt
kJ8ZmnsdrJsmb0YmjM2RsZaMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTlDMkM0OEFDRTcxMUYxOTNENkM2RThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACa0pMDBACa0qIDBACa
0rkDBACa0swDBACa0t0DBACa0t8wDQYJKoZIhvcNAQELBQADggEBAJ8bW4T6DTHd
dFffQuxJPjkS0he+2lmVysu0xFjiD50zMybq+tMozCdpqZqSd3Jpk2HYUZz+eOgQ
WiujW7BeuH8FJcxBl4XQynGrnZO5g7bgV1qLtke5usS1el0P4FooMfxYaNmzHmOf
8F3T/TVHb30P2eLbXv5A8YkaaTuMHm+hrTY5KFq/A6Yk6s0w37dvu2/G4z7PCQcQ
MUs8o9f//+Jpn/VGbzePG/H2zcYILtKZWFpXBSnlOQ2Bz9CkWAqW6cAE0vxL+6Sa
uhtXwmgrL8ZAEm2t9Dmc3eX/R4PKURfprxJjLraDPf6eX9kzdkw8tK8Y8heW/6kS
Pbq0FYsQBDo=
-----END CERTIFICATE-----