Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5643ABA2A44911F1B7B916C1CE1D38B0.roa
File:                     5643ABA2A44911F1B7B916C1CE1D38B0.roa (raw, json)
Hash identifier:          YxMUmRwnIi+j4fMVkZC12riUJ4bm9+1Xwovo902ga1M=
Subject key identifier:   B5:A9:0E:02:EF:CE:77:F7:1D:BB:8F:32:49:D5:75:02:BD:38:DE:54
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5643ABA2A44911F1B7B916C1CE1D38B0.roa
Signing time:             Sun 30 Aug 2026 08:03:51 +0000
ROA not before:           Sun 30 Aug 2026 08:03:47 +0000
ROA not after:            Wed 07 Oct 2026 08:03:47 +0000
asID:                     49505
IP address blocks:        154.209.221.0/24 maxlen: 24
                          154.209.222.0/24 maxlen: 24
                          154.209.223.0/24 maxlen: 24
                          154.211.9.0/24 maxlen: 24
                          154.211.10.0/24 maxlen: 24
                          154.211.11.0/24 maxlen: 24
                          154.211.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123936 (0x1e420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 08:03:47 2026 GMT
            Not After : Oct  7 08:03:47 2026 GMT
        Subject: CN=6a93e3e7-e559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:f7:9f:73:e5:17:98:7c:8d:f4:5d:7b:05:
                    05:5c:99:10:28:97:5e:af:1f:11:38:3c:41:28:e1:
                    02:5b:1f:c5:8d:cf:29:9a:e6:c2:37:1e:f8:19:a7:
                    83:fc:52:1b:ab:ff:3c:78:34:5c:ee:70:5f:50:ed:
                    3e:90:3c:1f:ec:65:d6:38:02:06:db:65:e2:c2:ea:
                    41:b8:95:49:d3:68:7e:41:7e:4a:7c:75:cc:8b:11:
                    54:c4:eb:0c:ec:67:a6:97:50:dd:50:08:ff:b3:fe:
                    63:24:8b:9a:36:0f:5c:7c:25:b1:fb:92:40:34:2b:
                    9d:da:17:3e:ed:b2:fc:a0:b1:ff:3b:78:0c:3b:a1:
                    a5:d6:be:79:07:15:13:c9:c0:a7:7c:9d:e6:f4:7f:
                    94:9d:1f:a3:7f:47:27:9d:13:47:c8:fc:eb:1f:01:
                    72:12:43:2f:b1:1a:2c:dd:f0:0b:a2:05:20:a6:af:
                    64:72:89:df:2f:cf:e2:53:dc:f8:39:a0:75:5f:be:
                    dd:12:7a:f0:b8:e4:59:1a:0e:64:5d:7b:45:71:75:
                    eb:21:c6:46:93:85:7c:bd:88:7f:a4:a4:db:5b:0b:
                    a7:dc:ea:e9:13:f1:c3:57:8f:fb:37:d2:a0:da:0f:
                    53:5d:59:df:dc:cc:dd:64:b4:69:b3:df:d4:57:32:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:0E:02:EF:CE:77:F7:1D:BB:8F:32:49:D5:75:02:BD:38:DE:54
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5643ABA2A44911F1B7B916C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.221.0-154.209.223.255
                  154.211.9.0-154.211.11.255
                  154.211.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:76:12:20:26:64:fc:c8:16:d9:88:d6:d4:10:f3:92:87:
         05:3b:e3:08:02:01:09:11:b3:6d:e1:e2:b3:d1:6a:3b:0d:bb:
         97:9e:7d:b5:2a:01:fc:6e:95:a6:05:b4:42:20:6c:f2:2e:af:
         02:99:b8:c8:c9:4e:a0:6d:74:2d:86:de:80:70:dc:53:a4:4d:
         f1:cb:7c:2b:99:43:3c:d0:13:6d:6f:6c:ed:47:88:8c:6c:14:
         91:67:65:46:63:ce:62:6c:90:fc:04:83:af:e0:aa:b1:58:58:
         c6:3a:e3:45:75:b0:d0:eb:cd:5e:a8:19:49:53:84:f9:80:1b:
         f4:f1:66:05:86:6f:ed:d3:78:79:f3:90:74:9a:b8:b1:92:b5:
         a3:51:f6:a1:66:18:38:14:b0:7a:c2:cf:6d:7e:43:14:6c:fd:
         91:69:ba:ad:c2:9c:e0:10:c0:a0:85:96:3d:2f:4e:9c:24:ea:
         3e:df:f7:89:49:9c:7f:19:a6:e7:ba:1c:78:b7:0c:f6:43:99:
         ef:0c:ad:74:57:ca:74:88:b4:b2:9d:88:5f:5b:62:68:27:b0:
         a9:bc:a2:eb:5c:91:18:e0:aa:44:9f:e2:83:fc:e9:02:9e:89:
         98:73:fd:4a:47:4b:3d:9b:c0:c6:5d:82:8e:5d:a2:89:35:91:
         be:fd:64:e5
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAeQgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMwMDgwMzQ3WhcNMjYxMDA3MDgwMzQ3WjAYMRYw
FAYDVQQDEw02YTkzZTNlNy1lNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2b73n3PlF5h8jfRdewUFXJkQKJderx8RODxBKOECWx/Fjc8pmubCNx74
GaeD/FIbq/88eDRc7nBfUO0+kDwf7GXWOAIG22XiwupBuJVJ02h+QX5KfHXMixFU
xOsM7Geml1DdUAj/s/5jJIuaNg9cfCWx+5JANCud2hc+7bL8oLH/O3gMO6Gl1r55
BxUTycCnfJ3m9H+UnR+jf0cnnRNHyPzrHwFyEkMvsRos3fALogUgpq9kconfL8/i
U9z4OaB1X77dEnrwuORZGg5kXXtFcXXrIcZGk4V8vYh/pKTbWwun3OrpE/HDV4/7
N9Kg2g9TXVnf3MzdZLRps9/UVzKEPwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFLWp
DgLvznf3HbuPMknVdQK9ON5UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjQzQUJBMkE0NDkxMUYxQjdCOTE2QzFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACa0d0DBAWa0cAwDAME
AJrTCQMEAprTCAMEAJrTEDANBgkqhkiG9w0BAQsFAAOCAQEAMcZ2EiAmZPzIFtmI
1tQQ85KHBTvjCAIBCRGzbeHis9FqOw27l559tSoB/G6VpgW0QiBs8i6vApm4yMlO
oG10LYbegHDcU6RN8ct8K5lDPNATbW9s7UeIjGwUkWdlRmPOYmyQ/ASDr+CqsVhY
xjrjRXWw0OvNXqgZSVOE+YAb9PFmBYZv7dN4efOQdJq4sZK1o1H2oWYYOBSwesLP
bX5DFGz9kWm6rcKc4BDAoIWWPS9OnCTqPt/3iUmcfxmm57oceLcM9kOZ7wytdFfK
dIi0sp2IX1tiaCewqbyi61yRGOCqRJ/ig/zpAp6JmHP9SkdLPZvAxl2Cjl2iiTWR
vv1k5Q==
-----END CERTIFICATE-----