Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCFDA209D2D11F196E0C8EECE1D38B0.roa
File:                     4FCFDA209D2D11F196E0C8EECE1D38B0.roa (raw, json)
Hash identifier:          lIkhO52NqyMQwxGCqnOHjK9zgQTwGZ3Apmp920TwyOU=
Subject key identifier:   B0:70:AB:C8:7C:FA:96:CA:79:F4:6D:14:8C:E4:BE:7D:8C:48:E0:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E140
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCFDA209D2D11F196E0C8EECE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:55:37 +0000
ROA not before:           Fri 21 Aug 2026 06:55:33 +0000
ROA not after:            Sat 19 Sep 2026 06:55:33 +0000
asID:                     8796
IP address blocks:        154.193.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123200 (0x1e140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 06:55:33 2026 GMT
            Not After : Sep 19 06:55:33 2026 GMT
        Subject: CN=6a87f668-64d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:44:c1:f8:85:5c:ea:6c:73:ae:1e:b2:10:
                    89:67:82:55:14:d0:bc:62:a7:69:47:42:4f:6b:66:
                    ce:d6:88:44:8c:c8:a0:f3:2d:a6:60:45:c5:4e:1c:
                    6e:23:8e:98:cb:36:25:5e:27:2b:fb:89:19:ca:eb:
                    18:20:18:5a:fa:22:18:0c:8c:fc:d5:38:53:a3:4d:
                    a9:6f:54:c0:5f:31:30:1d:2c:64:fa:27:6f:ab:40:
                    f4:87:ed:08:7b:19:91:b7:0e:f5:b5:94:d4:fe:5e:
                    68:bf:1d:48:0b:0f:18:d1:d8:6a:d2:14:d1:6e:48:
                    08:e0:81:67:73:14:34:72:77:9f:ef:bf:6d:6e:17:
                    d4:20:ee:7e:8d:42:0e:fc:ea:67:3d:77:43:9a:8d:
                    cf:a1:60:81:3b:3b:2a:c4:2f:3d:e0:1c:66:30:65:
                    b7:ca:fd:e6:b6:b3:3f:59:cf:a7:a5:26:05:69:2b:
                    65:33:d8:21:4e:42:fb:8a:32:2b:24:02:70:07:54:
                    8a:d7:d3:16:83:95:bf:9c:24:23:4a:46:32:d3:1d:
                    2a:ef:8d:ff:56:98:e3:33:0c:fa:c7:61:8c:8f:4d:
                    3e:77:41:55:0c:4d:c5:c2:56:0b:5c:c2:ae:d0:f0:
                    15:fd:ce:51:0e:29:6d:0e:62:7e:ac:98:1c:ed:c0:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:AB:C8:7C:FA:96:CA:79:F4:6D:14:8C:E4:BE:7D:8C:48:E0:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCFDA209D2D11F196E0C8EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:53:10:90:a2:96:16:3a:9e:9f:f0:a6:21:18:40:bc:f8:
         46:cb:61:46:1d:71:40:6e:91:32:27:e0:39:da:af:d3:c2:d8:
         35:69:d2:87:0c:65:3f:56:bc:75:88:8c:8d:db:5a:6b:62:13:
         bf:f2:b9:9f:0b:70:1f:ad:ea:d6:56:76:f1:8e:4f:e4:bf:15:
         af:2e:d0:fe:91:07:d6:29:2f:5a:2c:39:6a:b8:e1:76:87:ca:
         81:40:59:2f:73:63:6c:60:f8:0a:ad:3f:76:b0:44:77:87:cf:
         b1:c6:bd:f4:24:56:29:30:e2:26:18:08:92:87:46:61:3e:24:
         98:db:39:a6:c0:cd:98:85:8b:28:54:11:59:16:1c:5e:04:db:
         cb:8f:33:d0:98:0e:f4:65:5b:a9:13:a1:72:b5:10:e3:3b:0e:
         9b:86:e2:9c:bf:a1:b1:41:20:94:00:60:97:ee:02:ec:bb:60:
         aa:88:ed:c4:36:7f:d5:a1:2f:ad:f2:13:67:a0:66:fb:ed:bb:
         eb:30:22:39:27:d7:32:5a:80:88:26:d4:dd:f9:8e:92:8a:fc:
         49:f3:80:a8:3d:44:e3:0f:62:f0:fb:d0:a3:c2:70:4c:f9:fe:
         a7:aa:e7:0d:24:76:d2:bf:a5:f3:0c:b9:fb:fe:fd:8b:15:48:
         02:bb:ac:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeFAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMDY1NTMzWhcNMjYwOTE5MDY1NTMzWjAYMRYw
FAYDVQQDEw02YTg3ZjY2OC02NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzXJEwfiFXOpsc64eshCJZ4JVFNC8YqdpR0JPa2bO1ohEjMig8y2mYEXF
ThxuI46YyzYlXicr+4kZyusYIBha+iIYDIz81ThTo02pb1TAXzEwHSxk+idvq0D0
h+0IexmRtw71tZTU/l5ovx1ICw8Y0dhq0hTRbkgI4IFncxQ0cnef779tbhfUIO5+
jUIO/OpnPXdDmo3PoWCBOzsqxC894BxmMGW3yv3mtrM/Wc+npSYFaStlM9ghTkL7
ijIrJAJwB1SK19MWg5W/nCQjSkYy0x0q743/VpjjMwz6x2GMj00+d0FVDE3FwlYL
XMKu0PAV/c5RDiltDmJ+rJgc7cALBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLBw
q8h8+pbKefRtFIzkvn2MSOD+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkNGREEyMDlEMkQxMUYxOTZFMEM4RUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsHAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ+VMQkKKWFjqen/CmIRhAvPhGy2FGHXFAbpEyJ+A52q/Twtg1adKH
DGU/Vrx1iIyN21prYhO/8rmfC3AfrerWVnbxjk/kvxWvLtD+kQfWKS9aLDlquOF2
h8qBQFkvc2NsYPgKrT92sER3h8+xxr30JFYpMOImGAiSh0ZhPiSY2zmmwM2YhYso
VBFZFhxeBNvLjzPQmA70ZVupE6FytRDjOw6bhuKcv6GxQSCUAGCX7gLsu2CqiO3E
Nn/VoS+t8hNnoGb77bvrMCI5J9cyWoCIJtTd+Y6SivxJ84CoPUTjD2Lw+9CjwnBM
+f6nqucNJHbSv6XzDLn7/v2LFUgCu6yv
-----END CERTIFICATE-----