Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/584FCD54B00611F18B74A3D0CE1D38B0.roa
File:                     584FCD54B00611F18B74A3D0CE1D38B0.roa (raw, json)
Hash identifier:          vmGcJGUNYn+K5cIfYLP+UqYrCqftSBuXBcZiiKAETqo=
Subject key identifier:   4F:21:F4:E1:81:D4:57:8B:4F:60:9E:8E:92:55:17:35:7C:56:E2:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E800
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/584FCD54B00611F18B74A3D0CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 06:34:33 +0000
ROA not before:           Mon 14 Sep 2026 06:34:28 +0000
ROA not after:            Thu 22 Oct 2026 06:34:28 +0000
asID:                     395886
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124928 (0x1e800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 06:34:28 2026 GMT
            Not After : Oct 22 06:34:28 2026 GMT
        Subject: CN=6aa79578-9d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:d5:66:54:ea:f3:65:76:ab:92:4c:20:2e:
                    75:4d:5a:42:44:21:09:cf:33:e2:1c:26:58:9b:7a:
                    39:e7:a0:1b:25:64:42:71:27:4e:43:42:c2:6d:83:
                    b4:e2:8c:cc:90:0b:54:dc:ee:04:5f:04:16:bd:08:
                    6c:57:d5:7e:41:58:b0:c4:70:4d:82:e4:a3:26:a8:
                    54:96:a3:16:0f:9b:5b:02:f5:5d:1b:69:68:ab:db:
                    2b:e4:ff:6a:b9:76:9b:d3:0d:fa:da:ee:c2:e1:3c:
                    74:e7:ac:f9:1e:49:9c:c9:94:75:90:8b:4f:8b:04:
                    28:d3:80:7d:3b:ac:f0:53:75:73:ba:c1:bb:2d:50:
                    fb:6c:ab:ef:6b:02:0c:83:be:fa:96:29:eb:aa:0e:
                    1c:3a:2f:d0:55:75:af:b9:f5:60:76:b4:aa:ef:a5:
                    8b:27:73:3b:9e:46:fb:e9:55:6d:9b:ed:6a:01:af:
                    02:80:85:7d:41:4c:5e:43:69:e8:df:6f:1b:aa:96:
                    be:d7:f6:e9:f6:c9:51:93:14:34:b4:27:52:70:36:
                    ae:50:b5:27:4e:76:c8:b5:b2:f2:c6:56:17:5c:91:
                    30:b3:f6:c2:30:39:54:33:ab:83:27:bd:a6:fe:0a:
                    07:11:19:2f:6a:d0:90:36:43:17:64:a4:98:03:71:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:F4:E1:81:D4:57:8B:4F:60:9E:8E:92:55:17:35:7C:56:E2:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/584FCD54B00611F18B74A3D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:de:fd:72:88:9b:51:bb:a7:63:bf:94:35:77:62:e0:73:a2:
         f0:bb:19:47:80:f3:52:e5:61:a6:b9:c1:67:d4:82:ea:b4:0d:
         72:d4:10:7d:4e:5e:4e:f2:13:f7:8c:83:d4:1e:da:5f:b1:5f:
         a4:81:ce:a9:ab:db:56:42:cf:a3:29:c4:73:0a:a6:14:0d:c8:
         01:1c:1e:61:32:7b:65:20:22:79:38:9f:a2:85:b4:84:0d:e9:
         2a:05:c6:42:ea:65:1a:45:dd:79:a7:c5:e5:c6:6a:dc:2d:5c:
         83:33:e6:eb:d0:80:32:7b:07:64:1f:8b:c8:d0:5a:7e:66:bc:
         ac:35:3a:8b:bf:7d:ee:22:35:11:39:6f:9a:cb:36:ae:1d:cc:
         c2:b4:1c:a0:84:f3:a2:b0:2b:18:c1:a9:55:99:c4:a4:26:14:
         3f:c6:79:1f:5c:1e:6c:ea:48:42:22:cf:25:38:50:7a:d1:06:
         3b:01:bc:27:bc:93:a9:fd:11:0b:10:28:f7:d3:27:e5:39:2a:
         44:81:57:54:78:ff:76:5d:9d:25:ad:61:02:1c:bc:a3:37:b6:
         0c:98:31:8f:7d:74:c7:79:7d:d0:d8:3d:07:16:71:24:c6:28:
         51:93:ff:ca:f1:cf:1a:48:73:c5:65:f4:39:57:2a:7a:e8:bf:
         00:29:b8:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAegAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE0MDYzNDI4WhcNMjYxMDIyMDYzNDI4WjAYMRYw
FAYDVQQDEw02YWE3OTU3OC05ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4arVZlTq82V2q5JMIC51TVpCRCEJzzPiHCZYm3o556AbJWRCcSdOQ0LC
bYO04ozMkAtU3O4EXwQWvQhsV9V+QViwxHBNguSjJqhUlqMWD5tbAvVdG2loq9sr
5P9quXab0w362u7C4Tx056z5HkmcyZR1kItPiwQo04B9O6zwU3VzusG7LVD7bKvv
awIMg776linrqg4cOi/QVXWvufVgdrSq76WLJ3M7nkb76VVtm+1qAa8CgIV9QUxe
Q2no328bqpa+1/bp9slRkxQ0tCdScDauULUnTnbItbLyxlYXXJEws/bCMDlUM6uD
J72m/goHERkvatCQNkMXZKSYA3FJpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE8h
9OGB1FeLT2CejpJVFzV8VuK4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODRGQ0Q1NEIwMDYxMUYxOEI3NEEzRDBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQCe3v1yiJtRu6djv5Q1d2Lgc6LwuxlHgPNS5WGmucFn1ILqtA1y1BB9
Tl5O8hP3jIPUHtpfsV+kgc6pq9tWQs+jKcRzCqYUDcgBHB5hMntlICJ5OJ+ihbSE
DekqBcZC6mUaRd15p8XlxmrcLVyDM+br0IAyewdkH4vI0Fp+ZrysNTqLv33uIjUR
OW+ayzauHczCtByghPOisCsYwalVmcSkJhQ/xnkfXB5s6khCIs8lOFB60QY7Abwn
vJOp/RELECj30yflOSpEgVdUeP92XZ0lrWECHLyjN7YMmDGPfXTHeX3Q2D0HFnEk
xihRk//K8c8aSHPFZfQ5Vyp66L8AKbj7
-----END CERTIFICATE-----