Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50013972C79D11F18B17E1EBCE1D38B0.roa
File:                     50013972C79D11F18B17E1EBCE1D38B0.roa (raw, json)
Hash identifier:          zOF1GH+1iwRPFS+iNUafSf8znd/sjsXH1wYpPwIMJZY=
Subject key identifier:   E0:AF:7D:1A:FA:58:21:F8:6D:D6:91:6C:F0:69:1D:76:83:AA:D9:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50013972C79D11F18B17E1EBCE1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:03:09 +0000
ROA not before:           Wed 14 Oct 2026 07:03:04 +0000
ROA not after:            Fri 13 Nov 2026 07:03:04 +0000
asID:                     17497
IP address blocks:        154.217.232.0/23 maxlen: 24
                          154.217.232.0/24 maxlen: 24
                          154.217.233.0/24 maxlen: 24
                          154.222.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126441 (0x1ede9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:03:04 2026 GMT
            Not After : Nov 13 07:03:04 2026 GMT
        Subject: CN=6acf292d-8dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:8d:28:0a:43:83:ee:18:8c:1c:95:5d:ae:
                    dd:1f:ec:11:fc:b0:18:94:68:be:f4:fc:95:f4:d4:
                    28:75:db:eb:4c:38:54:8f:d0:2a:42:c1:7f:f2:12:
                    9e:86:85:c8:a9:12:9e:02:c9:d0:b4:ff:2b:d9:3c:
                    26:b4:1c:77:ec:72:43:84:29:cc:d9:1f:e4:18:4a:
                    55:48:67:61:0a:bc:3b:33:99:ea:a4:c2:cf:8c:87:
                    50:e7:fd:39:36:9c:46:5e:94:b4:7e:5b:19:69:ad:
                    63:09:6a:97:3b:5f:7c:9c:9b:23:73:93:1f:33:bf:
                    8f:b1:74:58:d7:8b:12:76:6a:df:ab:05:3c:0f:97:
                    e9:7c:88:1d:f3:f5:89:f4:e0:66:f0:7a:0a:bf:b9:
                    f2:61:ec:6f:44:b5:1e:05:74:08:c7:9a:97:5c:26:
                    73:9d:52:a0:3b:77:d6:72:54:d6:97:37:56:28:2f:
                    f5:8d:4a:42:43:6a:6a:c0:9d:a2:4f:b4:79:16:a7:
                    66:ba:92:ca:af:e1:cc:15:50:fd:d3:6d:8d:4c:ab:
                    81:e5:da:10:12:c0:e2:aa:82:29:89:14:07:33:fe:
                    25:a6:45:59:d4:94:7b:41:4d:84:b7:9e:b9:e9:84:
                    8a:97:5d:24:12:85:99:55:d1:57:32:43:b9:05:b1:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AF:7D:1A:FA:58:21:F8:6D:D6:91:6C:F0:69:1D:76:83:AA:D9:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50013972C79D11F18B17E1EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.217.232.0/23
                  154.222.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:8b:23:f8:92:e3:9c:fe:30:96:25:7f:c4:46:04:28:69:
         0e:35:13:83:6d:9e:63:82:13:e1:5e:9e:6e:15:28:c3:0d:89:
         92:d4:52:97:a8:0e:48:5e:e0:10:78:0a:d5:ad:9c:9d:ac:12:
         58:77:f6:ea:86:29:75:b0:ab:dd:e4:33:be:d1:38:d5:4c:b6:
         52:73:f8:9f:57:f8:80:60:80:d8:ee:75:38:7e:c8:3e:76:90:
         13:27:c0:11:9f:7f:de:74:61:9f:f0:9d:75:97:2b:af:92:bf:
         92:f6:9a:fa:c6:0f:6b:21:18:28:be:89:fd:bc:a8:e8:af:7e:
         57:19:35:3c:25:5d:b6:a2:71:b2:d4:85:c9:83:21:8a:f0:b6:
         92:85:1a:19:70:a0:0c:49:3c:58:dd:b5:13:00:f0:0b:d1:76:
         b8:f3:ca:6f:9e:09:f0:7c:81:3d:c2:fb:bf:6a:98:df:fe:b5:
         b0:e0:14:9c:6a:6d:45:ba:c0:d0:b8:a3:04:2c:2f:60:f4:24:
         31:ac:99:f7:2d:76:1c:3b:04:f9:73:96:b6:70:fe:a7:5e:3e:
         d6:7f:cf:b8:18:ff:5e:97:7a:f7:c4:92:11:79:f6:01:6a:fc:
         3f:05:62:fc:09:b9:d4:33:0c:54:2f:26:ae:3d:26:bb:1a:75:
         8f:50:bf:56
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAe3pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE0MDcwMzA0WhcNMjYxMTEzMDcwMzA0WjAYMRYw
FAYDVQQDEw02YWNmMjkyZC04ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8+NKApDg+4YjByVXa7dH+wR/LAYlGi+9PyV9NQoddvrTDhUj9AqQsF/
8hKehoXIqRKeAsnQtP8r2TwmtBx37HJDhCnM2R/kGEpVSGdhCrw7M5nqpMLPjIdQ
5/05NpxGXpS0flsZaa1jCWqXO198nJsjc5MfM7+PsXRY14sSdmrfqwU8D5fpfIgd
8/WJ9OBm8HoKv7nyYexvRLUeBXQIx5qXXCZznVKgO3fWclTWlzdWKC/1jUpCQ2pq
wJ2iT7R5FqdmupLKr+HMFVD9022NTKuB5doQEsDiqoIpiRQHM/4lpkVZ1JR7QU2E
t5656YSKl10kEoWZVdFXMkO5BbEvAQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOCv
fRr6WCH4bdaRbPBpHXaDqtn5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDAxMzk3MkM3OUQxMUYxOEIxN0UxRUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmtnoAwQAmt6PMA0GCSqG
SIb3DQEBCwUAA4IBAQCUL4sj+JLjnP4wliV/xEYEKGkONRODbZ5jghPhXp5uFSjD
DYmS1FKXqA5IXuAQeArVrZydrBJYd/bqhil1sKvd5DO+0TjVTLZSc/ifV/iAYIDY
7nU4fsg+dpATJ8ARn3/edGGf8J11lyuvkr+S9pr6xg9rIRgovon9vKjor35XGTU8
JV22onGy1IXJgyGK8LaShRoZcKAMSTxY3bUTAPAL0Xa488pvngnwfIE9wvu/apjf
/rWw4BScam1FusDQuKMELC9g9CQxrJn3LXYcOwT5c5a2cP6nXj7Wf8+4GP9el3r3
xJIRefYBavw/BWL8CbnUMwxULyauPSa7GnWPUL9W
-----END CERTIFICATE-----