Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3F40C15611F19ADDC1E0CE1D38B0.roa
File:                     413E3F40C15611F19ADDC1E0CE1D38B0.roa (raw, json)
Hash identifier:          q7txg1AmfWLp1Sr+gJ+isOHtxfOOmE/2NVoKBDqxnBQ=
Subject key identifier:   EF:EA:72:02:6D:37:CC:68:CA:65:64:BE:45:BE:F2:90:D8:F6:D0:06
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3F40C15611F19ADDC1E0CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 07:19:23 +0000
ROA not before:           Tue 06 Oct 2026 07:19:19 +0000
ROA not after:            Fri 13 Nov 2026 07:19:19 +0000
asID:                     401650
IP address blocks:        154.82.149.0/24 maxlen: 24
                          154.82.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126063 (0x1ec6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 07:19:19 2026 GMT
            Not After : Nov 13 07:19:19 2026 GMT
        Subject: CN=6ac4a0fb-e578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:b1:26:3a:c7:ab:53:36:b2:8c:3c:e9:2c:
                    5c:81:82:27:96:2f:f2:b7:65:cf:c0:87:90:e7:33:
                    ef:2f:8e:16:c0:4d:1b:8b:1f:67:7f:55:c7:d5:c4:
                    ad:89:21:1a:49:a7:29:eb:e5:81:3d:44:6f:81:0c:
                    ea:b2:3f:d0:d9:81:66:f0:70:99:c6:44:de:d5:e9:
                    bf:d9:fa:31:25:92:dd:0b:d6:9e:68:e5:b0:84:9c:
                    f2:3e:07:09:71:3a:b8:a5:8e:ac:63:1f:b8:04:6b:
                    df:4d:18:14:6c:59:dd:6f:6e:e4:18:f6:bb:fd:51:
                    ec:33:9d:5d:8c:7e:39:5a:57:05:cc:23:57:44:a5:
                    e8:8b:e9:b9:24:4f:46:c3:14:7a:ed:8a:d6:01:11:
                    17:fb:de:a9:62:af:a8:f7:3b:f3:1b:2b:d2:43:74:
                    9b:42:ff:26:7e:92:5c:35:b4:d6:28:68:30:19:e3:
                    a3:eb:82:81:32:e7:99:c5:f2:2d:5f:fe:06:25:ef:
                    14:e0:9d:01:51:4b:51:5e:89:10:a2:28:bc:b0:76:
                    5e:36:90:06:84:e2:64:dc:d3:d2:e8:ba:09:0e:37:
                    56:ed:0e:8b:1a:8b:cf:c2:d5:98:b6:b4:b5:7e:d3:
                    63:b9:08:50:96:ad:09:ec:30:66:19:44:5b:20:5f:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:72:02:6D:37:CC:68:CA:65:64:BE:45:BE:F2:90:D8:F6:D0:06
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3F40C15611F19ADDC1E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.149.0-154.82.150.255

    Signature Algorithm: sha256WithRSAEncryption
         02:13:4e:14:00:80:a9:1e:eb:4f:9c:11:0b:9c:42:a1:d2:12:
         2e:89:65:c0:fe:c0:f0:39:fc:0f:98:fe:21:43:c0:57:4d:c9:
         3a:99:43:4d:cd:b1:1d:1b:ee:13:95:48:14:1e:c6:6d:6e:c4:
         fe:e0:3a:2d:d9:de:23:7c:b1:42:eb:3c:4d:78:09:5a:66:89:
         ec:2e:f5:35:4a:76:07:fd:ea:0b:2a:13:06:25:f9:2b:eb:05:
         70:34:b9:2a:a6:a0:7d:9c:31:81:e6:da:5f:64:5a:ff:83:e6:
         3e:d0:e4:f8:ab:22:68:8a:48:92:8f:69:47:b8:2a:81:3a:f3:
         99:b2:7b:e1:2f:b9:0b:d8:9b:32:19:7e:fe:bb:9b:fb:4d:3d:
         89:41:3b:44:f1:aa:d6:c9:bb:4d:18:1d:e0:ad:70:60:0e:01:
         c1:8f:72:ec:c2:06:48:83:43:23:cf:1a:30:7d:48:ec:2b:92:
         a2:ce:bf:6b:3c:ba:77:48:20:3c:c6:0f:53:bc:f3:93:47:32:
         1d:8f:7a:7e:88:d4:28:cf:3b:b1:ad:64:fd:19:65:28:c3:88:
         35:ab:20:49:f4:99:f7:82:0a:52:d6:69:65:cf:8b:55:2c:1b:
         63:46:83:0b:03:20:ca:a0:96:05:99:59:bd:ae:e8:d1:86:58:
         0a:50:91:73
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAexvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA2MDcxOTE5WhcNMjYxMTEzMDcxOTE5WjAYMRYw
FAYDVQQDEw02YWM0YTBmYi1lNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvmixJjrHq1M2sow86SxcgYInli/yt2XPwIeQ5zPvL44WwE0bix9nf1XH
1cStiSEaSacp6+WBPURvgQzqsj/Q2YFm8HCZxkTe1em/2foxJZLdC9aeaOWwhJzy
PgcJcTq4pY6sYx+4BGvfTRgUbFndb27kGPa7/VHsM51djH45WlcFzCNXRKXoi+m5
JE9GwxR67YrWAREX+96pYq+o9zvzGyvSQ3SbQv8mfpJcNbTWKGgwGeOj64KBMueZ
xfItX/4GJe8U4J0BUUtRXokQoii8sHZeNpAGhOJk3NPS6LoJDjdW7Q6LGovPwtWY
trS1ftNjuQhQlq0J7DBmGURbIF/KiQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFO/q
cgJtN8xoymVkvkW+8pDY9tAGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MTNFM0Y0MEMxNTYxMUYxOUFEREMxRTBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUpUDBACaUpYwDQYJ
KoZIhvcNAQELBQADggEBAAITThQAgKke60+cEQucQqHSEi6JZcD+wPA5/A+Y/iFD
wFdNyTqZQ03NsR0b7hOVSBQexm1uxP7gOi3Z3iN8sULrPE14CVpmiewu9TVKdgf9
6gsqEwYl+SvrBXA0uSqmoH2cMYHm2l9kWv+D5j7Q5PirImiKSJKPaUe4KoE685my
e+EvuQvYmzIZfv67m/tNPYlBO0TxqtbJu00YHeCtcGAOAcGPcuzCBkiDQyPPGjB9
SOwrkqLOv2s8undIIDzGD1O885NHMh2Pen6I1CjPO7GtZP0ZZSjDiDWrIEn0mfeC
ClLWaWXPi1UsG2NGgwsDIMqglgWZWb2u6NGGWApQkXM=
-----END CERTIFICATE-----