Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA38006C3B511F1BA3148EDCE1D38B0.roa
File:                     3CA38006C3B511F1BA3148EDCE1D38B0.roa (raw, json)
Hash identifier:          QN4YvFA9mRAJdDpgRwrsoXgm3cvIjPV+JKppSN529Fk=
Subject key identifier:   4C:0D:52:C7:21:15:93:1B:E4:1A:77:C2:FB:E0:22:75:17:94:F4:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA38006C3B511F1BA3148EDCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:44:20 +0000
ROA not before:           Fri 09 Oct 2026 07:44:16 +0000
ROA not after:            Thu 05 Nov 2026 07:44:16 +0000
asID:                     271956
IP address blocks:        154.88.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126208 (0x1ed00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 07:44:16 2026 GMT
            Not After : Nov  5 07:44:16 2026 GMT
        Subject: CN=6ac89b54-bae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:ce:37:aa:c1:e8:2e:d8:00:52:48:30:b6:
                    da:80:ff:b9:cc:6c:7a:02:72:15:f1:0a:98:8d:76:
                    df:89:93:f9:30:a8:36:95:4c:cc:43:a2:03:5c:b9:
                    0b:4f:53:7b:ad:69:8d:59:55:74:84:e3:61:66:95:
                    e3:84:21:3b:19:3d:f3:ff:e4:24:a3:20:76:81:da:
                    7b:b7:fb:30:7b:e3:ca:52:ea:dc:24:9a:6f:1f:40:
                    41:01:eb:8d:a8:da:24:f0:05:a7:72:6f:b3:3c:a7:
                    d1:ec:ec:1c:7a:3b:d0:5a:09:d2:12:50:f2:4a:9d:
                    dc:ff:a0:66:d9:4e:21:3b:35:1f:8c:57:92:f9:8c:
                    78:88:78:44:be:bf:3b:6c:0b:23:c4:7b:0d:f0:1f:
                    50:c3:14:79:e3:8f:29:7b:08:a6:91:a2:e6:68:3c:
                    89:a4:49:b1:56:81:e4:39:fe:d6:0d:8e:3f:62:64:
                    62:23:6f:d8:57:1a:0c:d9:96:b9:a0:7c:c1:36:99:
                    54:94:c1:29:a4:dc:06:38:56:1a:64:ea:44:9d:e2:
                    40:29:8e:81:ad:75:70:c4:a1:da:18:3c:07:26:75:
                    a6:5a:99:dc:94:0b:a6:3b:36:bf:62:7a:7c:1c:56:
                    95:0b:24:e7:93:96:83:d0:62:6d:89:1f:85:27:5a:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:52:C7:21:15:93:1B:E4:1A:77:C2:FB:E0:22:75:17:94:F4:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA38006C3B511F1BA3148EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:ae:38:ee:88:67:f5:51:1a:33:62:3f:5f:2f:e7:74:ce:
         3e:7b:3e:6d:a2:6f:d9:86:dc:be:e2:38:fa:90:56:61:37:c0:
         67:c6:56:5e:2e:aa:1a:eb:19:93:f9:38:f5:6c:8e:c8:73:e0:
         4a:6a:f0:90:18:c5:61:37:f0:e5:34:dd:63:ef:83:b9:ab:6d:
         1c:6c:a3:67:51:da:cf:4f:b1:5c:fd:4d:24:98:6b:82:d0:6d:
         ad:e2:a5:38:9b:18:71:fe:8d:56:2c:13:32:ec:62:ea:76:64:
         6e:b6:26:3a:4f:b8:df:27:55:66:75:c5:c6:d1:8e:58:f7:bf:
         a2:e1:51:94:7f:3d:22:09:ce:fe:c4:57:67:de:fe:93:6e:54:
         a0:9f:d6:66:f0:78:0e:d7:f6:6c:a7:55:33:89:ca:75:89:eb:
         ce:ca:30:6c:49:2c:32:f9:89:1d:a3:bc:07:f0:7d:41:db:7d:
         31:cf:00:83:74:08:58:c6:b9:b1:51:a8:7a:da:6a:17:1a:b6:
         79:63:7c:82:17:97:39:67:65:03:15:b0:37:e7:16:11:77:94:
         e0:95:b8:a5:77:33:82:dd:80:55:00:bf:82:7d:eb:92:21:d6:
         f2:b8:5e:e6:db:fa:a8:04:7f:27:e3:6e:50:31:07:2e:1d:6f:
         d4:0d:c6:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe0AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA5MDc0NDE2WhcNMjYxMTA1MDc0NDE2WjAYMRYw
FAYDVQQDEw02YWM4OWI1NC1iYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3yvON6rB6C7YAFJIMLbagP+5zGx6AnIV8QqYjXbfiZP5MKg2lUzMQ6ID
XLkLT1N7rWmNWVV0hONhZpXjhCE7GT3z/+QkoyB2gdp7t/swe+PKUurcJJpvH0BB
AeuNqNok8AWncm+zPKfR7OwcejvQWgnSElDySp3c/6Bm2U4hOzUfjFeS+Yx4iHhE
vr87bAsjxHsN8B9QwxR5448pewimkaLmaDyJpEmxVoHkOf7WDY4/YmRiI2/YVxoM
2Za5oHzBNplUlMEppNwGOFYaZOpEneJAKY6BrXVwxKHaGDwHJnWmWpnclAumOza/
Ynp8HFaVCyTnk5aD0GJtiR+FJ1rhZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEwN
UschFZMb5Bp3wvvgInUXlPSXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQ0EzODAwNkMzQjUxMUYxQkEzMTQ4RURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmli+MA0GCSqGSIb3DQEB
CwUAA4IBAQAVwa447ohn9VEaM2I/Xy/ndM4+ez5tom/Zhty+4jj6kFZhN8BnxlZe
Lqoa6xmT+Tj1bI7Ic+BKavCQGMVhN/DlNN1j74O5q20cbKNnUdrPT7Fc/U0kmGuC
0G2t4qU4mxhx/o1WLBMy7GLqdmRutiY6T7jfJ1VmdcXG0Y5Y97+i4VGUfz0iCc7+
xFdn3v6TblSgn9Zm8HgO1/Zsp1Uzicp1ievOyjBsSSwy+Ykdo7wH8H1B230xzwCD
dAhYxrmxUah62moXGrZ5Y3yCF5c5Z2UDFbA35xYRd5TglbildzOC3YBVAL+CfeuS
IdbyuF7m2/qoBH8n425QMQcuHW/UDcYG
-----END CERTIFICATE-----