Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5D86B4BC9D11F1A313A30CCF1D38B0.roa
File:                     4C5D86B4BC9D11F1A313A30CCF1D38B0.roa (raw, json)
Hash identifier:          P0vN16YOoiB7c27Y34Ubm+sUTLors9HeV+I/TJFD2D8=
Subject key identifier:   FA:C8:D8:E3:F0:2A:73:EE:82:2F:E1:54:A9:DA:70:87:D5:60:19:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5D86B4BC9D11F1A313A30CCF1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:05:21 +0000
ROA not before:           Wed 30 Sep 2026 07:05:16 +0000
ROA not after:            Fri 06 Nov 2026 07:05:16 +0000
asID:                     44559
IP address blocks:        154.209.147.0/24 maxlen: 24
                          154.209.149.0/24 maxlen: 24
                          154.209.150.0/24 maxlen: 24
                          154.209.151.0/24 maxlen: 24
                          154.209.156.0/24 maxlen: 24
                          154.209.159.0/24 maxlen: 24
                          154.209.192.0/24 maxlen: 24
                          154.209.193.0/24 maxlen: 24
                          154.209.194.0/24 maxlen: 24
                          154.209.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125820 (0x1eb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:05:16 2026 GMT
            Not After : Nov  6 07:05:16 2026 GMT
        Subject: CN=6abcb4b0-6c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:56:be:33:6e:cc:72:db:6a:a9:5c:eb:35:
                    c2:3e:0b:ba:0a:6a:15:65:8f:a1:8b:a9:cf:91:13:
                    c1:ad:c1:c6:d2:51:fa:ef:c2:ee:6f:d0:13:6b:dd:
                    47:1c:36:e2:76:30:63:b2:30:21:b7:46:42:85:42:
                    df:72:e0:43:9c:65:5b:3c:36:dc:88:52:cb:fb:00:
                    80:3a:56:ff:96:8c:81:ab:df:64:77:b5:b2:83:44:
                    fa:c3:63:0c:5c:84:db:be:14:e3:79:76:2f:de:85:
                    27:64:58:02:64:85:83:02:77:42:13:65:73:68:b6:
                    d2:96:c0:77:3c:43:8c:43:46:75:e4:2c:aa:56:1f:
                    5b:bc:f6:a7:24:11:8e:34:d5:61:11:56:4c:62:03:
                    a0:a3:99:01:60:17:ce:87:e5:3f:d2:67:db:86:ca:
                    31:ae:cc:48:30:c8:bc:46:4f:05:23:b4:0c:33:d0:
                    1a:54:92:8c:58:11:af:a1:7d:cb:b5:55:13:73:7d:
                    ee:02:20:a4:23:9e:43:da:98:fa:41:9b:a4:8e:e7:
                    cf:d1:75:b9:a4:89:7b:42:63:6e:7c:c0:c5:d4:3a:
                    00:a4:82:b0:5c:7f:c4:23:c8:b9:8a:42:24:07:43:
                    bf:e3:e2:01:6c:cc:05:c8:6d:0b:2d:58:81:b6:26:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C8:D8:E3:F0:2A:73:EE:82:2F:E1:54:A9:DA:70:87:D5:60:19:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5D86B4BC9D11F1A313A30CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.147.0/24
                  154.209.149.0-154.209.151.255
                  154.209.156.0/24
                  154.209.159.0/24
                  154.209.192.0-154.209.194.255
                  154.209.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:21:2c:e1:bd:66:23:93:2d:7f:e5:5f:8d:db:62:49:24:55:
         97:9f:f1:3b:cf:7f:c6:05:cd:40:f5:53:c1:ca:80:10:73:c7:
         6f:c7:7f:98:b1:e2:42:24:c1:85:c0:8c:3e:49:ae:83:b9:a4:
         ee:a6:0d:92:80:3c:54:7e:bd:84:5c:12:4a:c6:6c:0b:da:73:
         3d:96:e7:8c:6c:3d:bf:06:e0:3d:69:57:2c:58:a4:e0:2f:c8:
         1c:e8:f4:2c:1c:3e:86:1f:21:18:8b:06:bd:5c:88:2a:96:6e:
         3e:5f:5a:dd:c2:3c:42:4e:f4:0e:a7:39:de:49:0a:b9:a6:5d:
         e3:70:a8:53:3d:51:e5:d6:0c:56:ed:b2:54:44:52:6e:3c:52:
         1d:66:07:df:95:a6:b2:93:b6:1b:fe:e0:1f:92:0a:26:2a:a1:
         2e:bc:f1:3b:9f:23:48:8c:ef:99:e4:5f:c9:e9:3b:f3:5d:c7:
         8f:ae:ab:7c:13:49:70:a2:bc:dc:68:e2:53:10:b5:1d:de:db:
         5a:f1:2d:88:a3:20:ca:a3:be:51:57:5b:f1:84:f5:c6:67:6f:
         17:7b:95:34:76:9b:19:ff:e2:42:c0:35:e3:5f:36:e5:25:85:
         4e:73:a6:ab:50:a4:78:dc:5c:85:c1:39:20:ae:98:87:e1:3c:
         23:a2:78:2d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAet8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTMwMDcwNTE2WhcNMjYxMTA2MDcwNTE2WjAYMRYw
FAYDVQQDEw02YWJjYjRiMC02Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHZWvjNuzHLbaqlc6zXCPgu6CmoVZY+hi6nPkRPBrcHG0lH678Lub9AT
a91HHDbidjBjsjAht0ZChULfcuBDnGVbPDbciFLL+wCAOlb/loyBq99kd7Wyg0T6
w2MMXITbvhTjeXYv3oUnZFgCZIWDAndCE2VzaLbSlsB3PEOMQ0Z15CyqVh9bvPan
JBGONNVhEVZMYgOgo5kBYBfOh+U/0mfbhsoxrsxIMMi8Rk8FI7QMM9AaVJKMWBGv
oX3LtVUTc33uAiCkI55D2pj6QZukjufP0XW5pIl7QmNufMDF1DoApIKwXH/EI8i5
ikIkB0O/4+IBbMwFyG0LLViBtib0GwIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFPrI
2OPwKnPugi/hVKnacIfVYBn2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QzVEODZCNEJDOUQxMUYxQTMxM0EzMENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAmtGTMAwDBACa0ZUDBAOa
0ZADBACa0ZwDBACa0Z8wDAMEBprRwAMEAJrRwgMEAJrRxTANBgkqhkiG9w0BAQsF
AAOCAQEAJCEs4b1mI5Mtf+VfjdtiSSRVl5/xO89/xgXNQPVTwcqAEHPHb8d/mLHi
QiTBhcCMPkmug7mk7qYNkoA8VH69hFwSSsZsC9pzPZbnjGw9vwbgPWlXLFik4C/I
HOj0LBw+hh8hGIsGvVyIKpZuPl9a3cI8Qk70Dqc53kkKuaZd43CoUz1R5dYMVu2y
VERSbjxSHWYH35WmspO2G/7gH5IKJiqhLrzxO58jSIzvmeRfyek7813Hj66rfBNJ
cKK83GjiUxC1Hd7bWvEtiKMgyqO+UVdb8YT1xmdvF3uVNHabGf/iQsA141825SWF
TnOmq1CkeNxchcE5IK6Yh+E8I6J4LQ==
-----END CERTIFICATE-----