Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48862C84BCA811F1BE5811D4CE1D38B0.roa
File:                     48862C84BCA811F1BE5811D4CE1D38B0.roa (raw, json)
Hash identifier:          DyffYWG4ag2UTpHRlzuJf4Z7LCRP7ShZvFFm6Ye1JiQ=
Subject key identifier:   BF:21:46:39:A2:F3:AD:A3:27:78:50:FC:48:7D:65:58:7E:A0:45:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48862C84BCA811F1BE5811D4CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:23:59 +0000
ROA not before:           Wed 30 Sep 2026 08:23:54 +0000
ROA not after:            Fri 06 Nov 2026 08:23:54 +0000
asID:                     202656
IP address blocks:        154.218.25.0/24 maxlen: 24
                          154.218.26.0/24 maxlen: 24
                          154.219.201.0/24 maxlen: 24
                          154.219.202.0/24 maxlen: 24
                          154.219.203.0/24 maxlen: 24
                          154.219.208.0/24 maxlen: 24
                          154.219.209.0/24 maxlen: 24
                          154.219.210.0/24 maxlen: 24
                          154.219.212.0/24 maxlen: 24
                          154.219.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125866 (0x1ebaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:23:54 2026 GMT
            Not After : Nov  6 08:23:54 2026 GMT
        Subject: CN=6abcc71e-0d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:a9:0b:5c:e4:49:13:b5:99:2f:f6:39:34:
                    e8:83:3e:60:92:19:6e:52:f8:12:22:32:6f:e1:fb:
                    9e:4c:1b:56:df:d6:23:0a:51:c4:18:98:62:4e:da:
                    aa:2e:56:32:3a:c3:44:68:30:f8:c6:b5:e2:13:37:
                    b1:49:3f:96:e4:98:d0:76:68:14:99:66:26:ba:14:
                    62:a7:62:7f:0f:b0:85:9c:04:dc:c6:8c:8d:d2:27:
                    cf:68:db:5a:d1:4b:90:71:5e:60:42:5c:e2:15:2c:
                    b0:6a:47:07:8e:05:d7:6f:90:c4:d2:2c:57:24:e6:
                    ef:a8:a0:c0:11:81:87:d1:4a:f5:76:8f:81:c5:87:
                    aa:50:30:e9:fe:22:25:33:7a:c6:3b:e0:e4:d8:2c:
                    a9:c7:97:7b:d4:4b:eb:b2:91:4e:f7:06:32:a7:3c:
                    3d:d2:ce:10:d7:a2:4e:21:6c:a7:83:80:1b:20:06:
                    8c:e7:89:0d:82:9e:72:01:77:6d:fe:8c:39:09:16:
                    a3:b3:48:6f:24:ed:d1:f2:20:c3:a9:34:d7:1a:38:
                    6c:c7:21:28:e0:31:d4:87:02:75:14:66:9d:ad:7f:
                    05:da:99:ec:31:f3:ad:0e:5e:30:f3:9a:d9:ce:77:
                    f0:eb:d1:0d:7e:65:38:e9:f2:f3:d9:17:e9:6d:be:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:46:39:A2:F3:AD:A3:27:78:50:FC:48:7D:65:58:7E:A0:45:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48862C84BCA811F1BE5811D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.25.0-154.218.26.255
                  154.219.201.0-154.219.203.255
                  154.219.208.0-154.219.210.255
                  154.219.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:81:87:4f:3d:bf:c8:03:95:08:9c:48:28:2f:71:fc:10:2e:
         b5:a6:45:f1:f5:d4:12:1f:60:0f:07:9c:78:5b:ab:f3:f4:52:
         e6:fa:5b:91:8b:0a:31:1c:d0:61:44:d9:51:db:89:5c:0b:57:
         2d:cd:4b:8d:c6:34:5f:7c:af:ba:f4:c6:87:b8:29:08:83:ca:
         e4:df:a3:55:9e:90:a0:67:04:1e:ac:10:f4:1d:a8:5c:71:ee:
         ac:84:37:3f:bb:65:6e:c0:a6:a9:b3:17:3b:92:58:93:b1:b1:
         fe:bb:85:ba:07:f5:25:e4:18:aa:fa:e4:f6:73:1b:73:e9:04:
         f2:64:55:b9:e0:51:03:3d:dd:69:4c:32:e1:c6:04:02:1c:01:
         71:96:0a:fc:91:ee:f4:33:72:c0:dd:58:07:f0:03:c4:42:5a:
         d3:67:4d:cf:83:e2:e1:e5:6a:7a:8f:90:90:45:f1:a3:13:4c:
         66:b4:13:e5:03:0d:2e:88:72:0f:a2:6b:d4:0e:00:c2:5c:26:
         a7:2d:74:21:f1:0e:d7:ea:f2:84:d3:f7:f4:91:3c:ed:c3:7a:
         dd:b3:e5:9e:b1:9e:f3:38:8c:e2:d4:09:f1:a2:96:47:37:7a:
         2b:6e:6e:da:81:42:11:55:82:c6:90:39:9b:d1:ea:61:6f:b1:
         3f:69:67:22
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAeuqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTMwMDgyMzU0WhcNMjYxMTA2MDgyMzU0WjAYMRYw
FAYDVQQDEw02YWJjYzcxZS0wZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSCpC1zkSRO1mS/2OTTogz5gkhluUvgSIjJv4fueTBtW39YjClHEGJhi
TtqqLlYyOsNEaDD4xrXiEzexST+W5JjQdmgUmWYmuhRip2J/D7CFnATcxoyN0ifP
aNta0UuQcV5gQlziFSywakcHjgXXb5DE0ixXJObvqKDAEYGH0Ur1do+BxYeqUDDp
/iIlM3rGO+Dk2Cypx5d71EvrspFO9wYypzw90s4Q16JOIWyng4AbIAaM54kNgp5y
AXdt/ow5CRajs0hvJO3R8iDDqTTXGjhsxyEo4DHUhwJ1FGadrX8F2pnsMfOtDl4w
85rZznfw69ENfmU46fLz2Rfpbb549wIDAQABo4ICzzCCAsswHQYDVR0OBBYEFL8h
Rjmi862jJ3hQ/Eh9ZVh+oEVTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80ODg2MkM4NEJDQTgxMUYxQkU1ODExRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBACa2hkDBACa2howDAME
AJrbyQMEAprbyDAMAwQEmtvQAwQAmtvSAwQBmtvUMA0GCSqGSIb3DQEBCwUAA4IB
AQA1gYdPPb/IA5UInEgoL3H8EC61pkXx9dQSH2APB5x4W6vz9FLm+luRiwoxHNBh
RNlR24lcC1ctzUuNxjRffK+69MaHuCkIg8rk36NVnpCgZwQerBD0Hahcce6shDc/
u2VuwKapsxc7kliTsbH+u4W6B/Ul5Biq+uT2cxtz6QTyZFW54FEDPd1pTDLhxgQC
HAFxlgr8ke70M3LA3VgH8APEQlrTZ03Pg+Lh5Wp6j5CQRfGjE0xmtBPlAw0uiHIP
omvUDgDCXCanLXQh8Q7X6vKE0/f0kTztw3rds+WesZ7zOIzi1AnxopZHN3orbm7a
gUIRVYLGkDmb0ephb7E/aWci
-----END CERTIFICATE-----