Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45AD9D1E9C9E11F192CBF4FECE1D38B0.roa
File:                     45AD9D1E9C9E11F192CBF4FECE1D38B0.roa (raw, json)
Hash identifier:          3c4CQoTuTyoaxypU/cXiSky82+vA1dmhojPUghVTJ20=
Subject key identifier:   80:82:84:AD:29:9B:C6:9E:A8:8E:C4:B9:01:D6:83:F4:EB:AA:F1:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45AD9D1E9C9E11F192CBF4FECE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:51:42 +0000
ROA not before:           Thu 20 Aug 2026 13:51:38 +0000
ROA not after:            Sat 26 Sep 2026 13:51:38 +0000
asID:                     63139
IP address blocks:        154.203.172.0/24 maxlen: 24
                          154.203.173.0/24 maxlen: 24
                          154.203.174.0/24 maxlen: 24
                          154.203.175.0/24 maxlen: 24
                          154.203.176.0/24 maxlen: 24
                          154.203.177.0/24 maxlen: 24
                          154.203.178.0/24 maxlen: 24
                          154.203.179.0/24 maxlen: 24
                          154.203.180.0/24 maxlen: 24
                          154.203.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123074 (0x1e0c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:51:38 2026 GMT
            Not After : Sep 26 13:51:38 2026 GMT
        Subject: CN=6a87066d-822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:9a:12:3c:a7:a0:90:64:b5:b3:d5:63:01:
                    79:56:83:75:75:6d:f5:c9:35:bf:e3:a8:29:14:cd:
                    12:12:8e:25:fa:fb:88:25:f0:7f:f0:2d:b3:a1:42:
                    a2:34:e0:e0:c1:aa:41:40:fc:67:c9:46:39:be:72:
                    c6:3d:13:18:09:e5:58:82:4e:f1:de:f9:cc:fd:58:
                    28:eb:64:08:bd:9f:f7:51:a8:dc:26:bf:37:3b:5a:
                    14:03:47:af:7b:38:f8:57:09:0a:1e:a9:47:4b:13:
                    9f:c7:cf:1c:98:9a:39:c9:e8:0d:00:41:64:b3:a3:
                    90:a6:cf:95:93:0a:b7:36:96:76:e8:77:a5:6d:dd:
                    38:33:62:6a:f5:b9:0a:ac:e5:5e:d4:04:f1:4c:22:
                    43:99:f0:12:30:42:92:22:52:c6:7f:7d:86:d9:64:
                    54:9e:9f:49:50:d1:0e:86:16:f5:11:bd:ec:88:dc:
                    46:72:49:4b:41:4d:74:4b:9d:2f:e1:55:39:d9:ec:
                    e6:b6:49:46:da:7e:14:26:76:a3:1a:ac:30:09:5a:
                    27:1c:22:d2:68:ba:b5:72:a0:7a:95:72:99:f7:05:
                    cb:07:f4:99:e4:d6:e1:66:14:b2:dd:85:31:43:76:
                    30:8f:4b:3d:a0:c9:12:5e:bd:d7:75:fa:a5:e3:e4:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:84:AD:29:9B:C6:9E:A8:8E:C4:B9:01:D6:83:F4:EB:AA:F1:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45AD9D1E9C9E11F192CBF4FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.172.0-154.203.181.255

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:d7:b3:f0:0c:7c:76:ea:cd:1b:b3:3e:59:e3:08:fd:40:
         09:b3:fe:db:44:fb:66:34:5f:10:40:c9:c6:de:81:63:f3:58:
         41:ad:2c:73:fe:0a:55:33:60:c9:b5:c3:a7:9a:db:4b:da:ad:
         dc:ce:27:8c:f9:e9:07:55:8d:27:d1:b1:73:fc:ab:33:13:eb:
         51:03:ce:54:7e:aa:7c:4f:84:9a:f3:4a:69:80:1b:2e:94:e1:
         7e:82:57:b8:50:28:f4:e0:01:ca:5c:bf:87:f6:13:ee:fd:b0:
         a8:1e:f7:42:f2:b7:b1:0d:ae:ac:44:26:8b:6d:b0:f5:6f:30:
         dd:eb:fb:e9:0e:f3:55:87:5c:12:3c:c4:d9:19:e9:10:ea:a5:
         0a:d0:cd:22:21:5c:99:e2:49:65:3e:47:34:a0:b0:e9:8d:2a:
         2b:6f:2f:66:fa:7c:af:32:01:06:f4:5d:8d:60:94:e3:5b:fb:
         1a:58:e9:93:96:21:b3:88:eb:a2:9a:7e:04:1b:d3:b9:54:42:
         f8:b0:9e:10:ba:3f:6e:ea:d1:8f:75:0a:c1:29:4c:46:90:d6:
         84:f5:df:71:43:cb:15:76:86:13:ed:58:b6:8d:ec:75:c2:ab:
         c4:1f:58:75:15:e8:cf:48:c3:7a:64:53:6b:6d:e2:a5:de:a4:
         80:e6:fe:ec
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeDCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTM1MTM4WhcNMjYwOTI2MTM1MTM4WjAYMRYw
FAYDVQQDEw02YTg3MDY2ZC04MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3yCaEjynoJBktbPVYwF5VoN1dW31yTW/46gpFM0SEo4l+vuIJfB/8C2z
oUKiNODgwapBQPxnyUY5vnLGPRMYCeVYgk7x3vnM/Vgo62QIvZ/3UajcJr83O1oU
A0evezj4VwkKHqlHSxOfx88cmJo5yegNAEFks6OQps+Vkwq3NpZ26Helbd04M2Jq
9bkKrOVe1ATxTCJDmfASMEKSIlLGf32G2WRUnp9JUNEOhhb1Eb3siNxGcklLQU10
S50v4VU52ezmtklG2n4UJnajGqwwCVonHCLSaLq1cqB6lXKZ9wXLB/SZ5NbhZhSy
3YUxQ3Ywj0s9oMkSXr3Xdfql4+QOOwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFICC
hK0pm8aeqI7EuQHWg/TrqvG2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NUFEOUQxRTlDOUUxMUYxOTJDQkY0RkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKay6wDBAGay7QwDQYJ
KoZIhvcNAQELBQADggEBAAHX17PwDHx26s0bsz5Z4wj9QAmz/ttE+2Y0XxBAycbe
gWPzWEGtLHP+ClUzYMm1w6ea20vardzOJ4z56QdVjSfRsXP8qzMT61EDzlR+qnxP
hJrzSmmAGy6U4X6CV7hQKPTgAcpcv4f2E+79sKge90Lyt7ENrqxEJottsPVvMN3r
++kO81WHXBI8xNkZ6RDqpQrQzSIhXJniSWU+RzSgsOmNKitvL2b6fK8yAQb0XY1g
lONb+xpY6ZOWIbOI66KafgQb07lUQviwnhC6P27q0Y91CsEpTEaQ1oT133FDyxV2
hhPtWLaN7HXCq8QfWHUV6M9Iw3pkU2tt4qXepIDm/uw=
-----END CERTIFICATE-----