Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F392128AC4211F1A6615CFCCE1D38B0.roa
File:                     5F392128AC4211F1A6615CFCCE1D38B0.roa (raw, json)
Hash identifier:          8V6ruxbuzP3TZ3FFHgqMZ9T+St24wDoJ2tFBTD5s9jU=
Subject key identifier:   AF:0A:E2:20:16:99:B0:C8:6A:16:78:94:5A:29:17:D9:29:D2:0E:B9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F392128AC4211F1A6615CFCCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 11:34:09 +0000
ROA not before:           Wed 09 Sep 2026 11:34:05 +0000
ROA not after:            Tue 29 Sep 2026 11:34:05 +0000
asID:                     214483
IP address blocks:        154.86.2.0/24 maxlen: 24
                          154.86.3.0/24 maxlen: 24
                          154.86.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124588 (0x1e6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 11:34:05 2026 GMT
            Not After : Sep 29 11:34:05 2026 GMT
        Subject: CN=6aa14431-4611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:be:10:41:48:36:3d:3a:39:f5:d3:0a:f6:
                    9f:16:11:73:db:aa:be:56:71:5c:8e:db:22:04:46:
                    10:b5:00:09:92:64:3c:91:cb:94:57:54:82:15:8f:
                    9d:7a:7e:f7:00:3a:bf:d7:04:93:fb:0e:e2:e8:be:
                    ca:7d:ec:b8:9f:ce:5d:ee:30:89:20:4f:92:d9:92:
                    bd:95:33:8c:57:93:11:09:c1:c9:39:3e:29:8b:a1:
                    ce:9f:ce:61:72:3b:7c:7e:4b:9c:a2:7f:aa:59:cc:
                    95:b8:58:fe:c5:bf:3b:65:a3:16:51:d4:e7:64:29:
                    05:de:27:20:4c:df:2d:1f:37:e5:6c:69:95:e8:37:
                    66:1f:a3:48:7f:2f:fb:9b:ea:e3:58:12:aa:29:6b:
                    94:40:23:3b:a0:d6:5e:31:0e:0e:cc:21:9b:3c:cc:
                    aa:3c:26:59:c2:f1:fd:f8:62:01:e4:96:cc:93:5a:
                    c0:4c:9b:c3:45:8e:ee:78:c4:af:76:74:45:12:c8:
                    ee:c5:a1:89:8d:92:74:30:07:3b:ab:8e:65:cd:13:
                    fd:b3:43:53:03:56:74:63:41:1a:70:4c:bf:8b:d3:
                    97:94:05:b8:22:86:36:75:69:90:7e:9e:cb:2e:2e:
                    b6:fa:48:ef:52:36:5b:29:e3:f9:e1:5c:e7:67:f9:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:E2:20:16:99:B0:C8:6A:16:78:94:5A:29:17:D9:29:D2:0E:B9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F392128AC4211F1A6615CFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.2.0/23
                  154.86.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:26:59:24:35:e1:06:5f:7f:86:c9:e5:0c:cc:81:ee:16:0f:
         79:18:06:3a:13:76:97:70:bd:ab:32:21:4a:c0:04:d2:35:31:
         5a:0e:39:d1:17:46:75:1d:7d:b5:21:ed:d8:b9:73:6d:a0:61:
         98:b2:c0:71:4d:4c:36:68:ba:95:aa:54:81:b8:e9:77:57:92:
         44:55:17:29:98:af:84:e5:57:04:98:c1:06:39:90:34:42:1d:
         3f:b8:55:48:a0:93:af:69:ff:da:c2:af:1b:5a:7b:1b:38:7b:
         a2:61:4b:42:77:86:6e:38:c5:51:61:3f:a6:5e:6c:ff:1e:d4:
         b6:19:05:67:db:04:70:c4:1a:45:ba:d5:aa:8b:32:28:9a:78:
         e5:ea:5f:f4:d6:87:56:20:5e:8c:78:1f:a7:cc:28:08:25:46:
         fd:dc:16:7a:a9:85:ec:2f:6d:44:44:06:be:10:e9:1d:2a:a0:
         96:b4:06:6b:13:8b:21:19:78:ee:a5:2f:d5:84:80:18:4b:5b:
         75:46:d7:87:16:69:1e:55:68:e3:30:71:9b:07:bc:ad:e8:1b:
         d3:04:aa:68:bc:60:5c:00:ee:48:8d:67:91:c7:3a:9a:63:e3:
         af:bc:76:fa:e8:37:1d:cd:c7:aa:2f:c2:6a:2f:3a:2d:ba:61:
         eb:28:3e:f9
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAeasMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA5MTEzNDA1WhcNMjYwOTI5MTEzNDA1WjAYMRYw
FAYDVQQDEw02YWExNDQzMS00NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Q++EEFINj06OfXTCvafFhFz26q+VnFcjtsiBEYQtQAJkmQ8kcuUV1SC
FY+den73ADq/1wST+w7i6L7Kfey4n85d7jCJIE+S2ZK9lTOMV5MRCcHJOT4pi6HO
n85hcjt8fkucon+qWcyVuFj+xb87ZaMWUdTnZCkF3icgTN8tHzflbGmV6DdmH6NI
fy/7m+rjWBKqKWuUQCM7oNZeMQ4OzCGbPMyqPCZZwvH9+GIB5JbMk1rATJvDRY7u
eMSvdnRFEsjuxaGJjZJ0MAc7q45lzRP9s0NTA1Z0Y0EacEy/i9OXlAW4IoY2dWmQ
fp7LLi62+kjvUjZbKeP54VznZ/m57QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFK8K
4iAWmbDIahZ4lFopF9kp0g65MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjM5MjEyOEFDNDIxMUYxQTY2MTVDRkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmlYCAwQAmlYGMA0GCSqG
SIb3DQEBCwUAA4IBAQAHJlkkNeEGX3+GyeUMzIHuFg95GAY6E3aXcL2rMiFKwATS
NTFaDjnRF0Z1HX21Ie3YuXNtoGGYssBxTUw2aLqVqlSBuOl3V5JEVRcpmK+E5VcE
mMEGOZA0Qh0/uFVIoJOvaf/awq8bWnsbOHuiYUtCd4ZuOMVRYT+mXmz/HtS2GQVn
2wRwxBpFutWqizIomnjl6l/01odWIF6MeB+nzCgIJUb93BZ6qYXsL21ERAa+EOkd
KqCWtAZrE4shGXjupS/VhIAYS1t1RteHFmkeVWjjMHGbB7yt6BvTBKpovGBcAO5I
jWeRxzqaY+OvvHb66DcdzceqL8JqLzotumHrKD75
-----END CERTIFICATE-----