Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F55DD1EC3A811F19FD46C1BCF1D38B0.roa
File:                     4F55DD1EC3A811F19FD46C1BCF1D38B0.roa (raw, json)
Hash identifier:          pGmYzd4dijh4xXOw+pi76PugwP5u1Dx+krc4NU2ZOwY=
Subject key identifier:   32:83:32:64:15:B4:2A:D3:FD:AC:1F:9F:47:8C:C1:F7:D7:4E:A7:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F55DD1EC3A811F19FD46C1BCF1D38B0.roa
Signing time:             Fri 09 Oct 2026 06:11:48 +0000
ROA not before:           Fri 09 Oct 2026 06:11:43 +0000
ROA not after:            Fri 08 Oct 2027 06:11:43 +0000
asID:                     328608
IP address blocks:        154.200.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126186 (0x1ecea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 06:11:43 2026 GMT
            Not After : Oct  8 06:11:43 2027 GMT
        Subject: CN=6ac885a4-9b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:c0:8d:3e:05:bf:86:90:e9:9b:9c:cf:98:
                    e2:1b:9e:4a:63:bd:bb:71:55:b3:72:ae:0e:d0:aa:
                    93:2f:51:ee:22:ca:0b:e3:c7:b5:32:aa:45:cd:d0:
                    ae:71:61:41:81:d8:5f:bc:32:73:5f:65:8e:c8:02:
                    52:a2:ff:23:95:d3:6f:c5:7e:0c:f4:4e:bc:88:16:
                    0e:1f:68:5b:3b:73:23:a1:2e:e2:b2:4a:75:1c:d6:
                    43:38:68:02:bb:b9:33:ea:7f:98:6b:66:e4:1b:56:
                    4f:fc:db:ad:cb:48:0e:35:be:76:16:20:b9:97:63:
                    4d:6d:00:2a:78:8c:a1:0e:f2:10:07:fd:69:3f:a4:
                    e6:ac:4a:36:9b:28:57:1c:8f:f7:de:20:fb:39:0e:
                    52:e8:91:2c:ce:87:c2:55:07:4a:cf:7d:b1:39:3b:
                    96:df:25:5a:bd:f2:db:b4:98:3a:e5:18:fc:12:39:
                    72:bf:ba:fd:7d:ca:6f:21:7a:39:1b:49:50:df:8f:
                    08:cd:56:5c:a3:71:dd:a3:b9:e7:36:3a:4b:c5:d2:
                    6f:7b:3d:7f:11:a1:3c:7e:ed:b1:3c:1b:55:09:f1:
                    59:4b:b5:ae:ca:f4:1d:a5:62:08:0a:e3:b6:ff:89:
                    a6:e7:ec:dd:51:5f:af:a1:e0:93:c0:23:82:12:89:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:32:64:15:B4:2A:D3:FD:AC:1F:9F:47:8C:C1:F7:D7:4E:A7:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F55DD1EC3A811F19FD46C1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:8d:a2:ca:3b:5a:ff:af:d7:24:1f:35:95:84:40:70:24:b6:
         00:45:27:d6:a0:a4:55:3b:10:40:01:46:d3:3b:f7:4f:3e:2d:
         ca:62:de:fb:48:61:c6:ec:43:5b:20:37:72:c1:04:fc:da:3a:
         63:c9:5f:2a:e4:79:e9:ea:51:db:0c:48:31:7e:72:c9:90:da:
         ca:23:72:7b:b0:0d:f6:07:af:20:a8:44:19:42:02:c7:2b:79:
         35:21:ee:d7:10:38:e6:17:63:82:9b:9c:67:49:36:ff:64:a3:
         bd:37:60:44:72:6d:9c:c7:ce:d1:ae:ab:5f:f6:91:ff:ff:55:
         14:9d:3a:27:fd:bb:2b:c3:b9:68:c7:f2:dd:a5:aa:a6:1f:d4:
         f4:ff:e9:a1:77:ea:db:c6:8a:9d:19:e5:97:36:65:68:35:d9:
         1b:ef:5b:d0:fd:40:50:0d:a7:7d:93:0a:9f:af:aa:17:74:b7:
         00:30:d7:13:78:e4:9d:1f:14:ea:a3:ff:59:93:3a:84:4c:a0:
         dc:0b:96:15:93:9f:37:4b:5f:ea:4c:42:3e:59:1a:a2:41:a4:
         ae:d9:68:bf:99:94:b0:7c:ed:e6:d7:fa:9d:f4:c7:09:56:49:
         25:7f:8f:bd:53:7e:55:1c:f3:19:4b:90:55:bd:18:0b:5f:54:
         34:6f:92:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAezqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA5MDYxMTQzWhcNMjcxMDA4MDYxMTQzWjAYMRYw
FAYDVQQDEw02YWM4ODVhNC05YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnJ/AjT4Fv4aQ6Zucz5jiG55KY727cVWzcq4O0KqTL1HuIsoL48e1MqpF
zdCucWFBgdhfvDJzX2WOyAJSov8jldNvxX4M9E68iBYOH2hbO3MjoS7iskp1HNZD
OGgCu7kz6n+Ya2bkG1ZP/Nuty0gONb52FiC5l2NNbQAqeIyhDvIQB/1pP6TmrEo2
myhXHI/33iD7OQ5S6JEszofCVQdKz32xOTuW3yVavfLbtJg65Rj8Ejlyv7r9fcpv
IXo5G0lQ348IzVZco3Hdo7nnNjpLxdJvez1/EaE8fu2xPBtVCfFZS7WuyvQdpWII
CuO2/4mm5+zdUV+voeCTwCOCEokrTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDKD
MmQVtCrT/awfn0eMwffXTqe8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RjU1REQxRUMzQTgxMUYxOUZENDZDMUJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsibMA0GCSqGSIb3DQEB
CwUAA4IBAQDPjaLKO1r/r9ckHzWVhEBwJLYARSfWoKRVOxBAAUbTO/dPPi3KYt77
SGHG7ENbIDdywQT82jpjyV8q5Hnp6lHbDEgxfnLJkNrKI3J7sA32B68gqEQZQgLH
K3k1Ie7XEDjmF2OCm5xnSTb/ZKO9N2BEcm2cx87Rrqtf9pH//1UUnTon/bsrw7lo
x/LdpaqmH9T0/+mhd+rbxoqdGeWXNmVoNdkb71vQ/UBQDad9kwqfr6oXdLcAMNcT
eOSdHxTqo/9ZkzqETKDcC5YVk583S1/qTEI+WRqiQaSu2Wi/mZSwfO3m1/qd9McJ
Vkklf4+9U35VHPMZS5BVvRgLX1Q0b5Lg
-----END CERTIFICATE-----