Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/624D589AB58711F194E53CD4CE1D38B0.roa
File:                     624D589AB58711F194E53CD4CE1D38B0.roa (raw, json)
Hash identifier:          1oLU5+Eqxx1EBbJKgqoT+tKFs2A4AyKtH8C5NA17Aes=
Subject key identifier:   1F:D4:2E:E6:FA:4A:A2:E0:43:FB:65:DC:02:2E:6D:43:58:AE:73:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E96E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/624D589AB58711F194E53CD4CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:40:50 +0000
ROA not before:           Mon 21 Sep 2026 06:40:46 +0000
ROA not after:            Mon 28 Sep 2026 06:40:46 +0000
asID:                     139613
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.140.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
                          154.81.164.0/24 maxlen: 24
                          154.81.178.0/24 maxlen: 24
                          154.81.181.0/24 maxlen: 24
                          154.81.191.0/24 maxlen: 24
                          154.82.18.0/24 maxlen: 24
                          154.82.20.0/24 maxlen: 24
                          154.83.128.0/24 maxlen: 24
                          154.83.135.0/24 maxlen: 24
                          154.83.137.0/24 maxlen: 24
                          154.83.141.0/24 maxlen: 24
                          154.83.158.0/24 maxlen: 24
                          154.83.187.0/24 maxlen: 24
                          154.83.190.0/24 maxlen: 24
                          154.83.191.0/24 maxlen: 24
                          154.83.209.0/24 maxlen: 24
                          154.83.211.0/24 maxlen: 24
                          154.83.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 09:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125294 (0x1e96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 06:40:46 2026 GMT
            Not After : Sep 28 06:40:46 2026 GMT
        Subject: CN=6ab0d172-e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:bf:e9:a0:31:96:f7:bc:e9:c1:27:e5:b4:
                    7a:ee:2b:a4:e4:88:19:08:6a:d6:42:35:21:53:50:
                    19:d7:55:2c:fc:bd:a5:c6:e0:43:f1:36:f7:df:72:
                    34:6a:6d:0a:a9:4b:f0:02:20:c3:2c:52:db:a7:8b:
                    81:2e:cd:9e:13:8f:7e:b6:1c:be:54:89:8e:7e:5a:
                    d0:ad:80:52:79:9e:cc:73:a0:a2:b4:95:81:6c:f7:
                    59:5a:16:94:35:ee:c9:1a:d3:76:98:9f:fa:4e:0b:
                    98:07:df:9e:34:b9:51:20:c3:b4:f4:aa:06:a8:67:
                    c6:7c:9c:fb:4d:9e:ef:76:03:7a:8a:2c:2a:8a:25:
                    c4:17:83:ae:1d:e4:18:38:8f:b4:66:78:9e:cc:c2:
                    58:f1:24:78:26:90:d4:49:c7:be:5e:ee:e9:c5:3c:
                    a7:b3:1f:fe:06:04:ed:44:0c:2b:f8:19:da:86:f6:
                    3c:4d:c1:22:34:1e:68:ae:ae:4d:e1:0e:fd:81:9a:
                    9c:bd:4e:d0:4e:88:4c:b5:43:2e:cf:fd:11:74:78:
                    a5:02:2e:3c:48:97:eb:b7:0b:6d:87:8f:7f:16:b0:
                    ba:6d:eb:80:86:b3:13:7b:62:e4:db:42:ad:43:20:
                    10:b4:22:b0:b8:b4:39:96:6b:76:90:68:6c:28:c6:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:2E:E6:FA:4A:A2:E0:43:FB:65:DC:02:2E:6D:43:58:AE:73:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/624D589AB58711F194E53CD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.140.0/24
                  154.81.161.0/24
                  154.81.164.0/24
                  154.81.178.0/24
                  154.81.181.0/24
                  154.81.191.0/24
                  154.82.18.0/24
                  154.82.20.0/24
                  154.83.128.0/24
                  154.83.135.0/24
                  154.83.137.0/24
                  154.83.141.0/24
                  154.83.158.0/24
                  154.83.187.0/24
                  154.83.190.0/23
                  154.83.209.0/24
                  154.83.211.0/24
                  154.83.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:68:b9:c3:3c:07:22:ed:63:d8:bb:59:61:ab:72:1b:89:bf:
         5d:04:7b:a1:cf:b0:9c:c9:12:38:b5:62:16:2b:50:02:9a:fa:
         74:10:01:1a:56:49:ad:d8:b7:72:95:28:7d:10:2d:4e:cc:78:
         64:79:b9:fd:25:54:53:b5:94:57:d3:69:b2:b8:90:66:19:5f:
         7e:fc:61:52:3f:f2:4e:5d:c4:ea:08:71:b9:81:2d:1b:c1:9e:
         0d:e3:8e:3d:57:d8:76:1c:2a:64:9f:64:1e:47:ce:97:b5:6d:
         d6:49:57:e6:e5:53:c7:99:7c:b6:63:e7:dd:0c:a0:04:b6:95:
         5f:56:68:64:f6:6b:af:b7:50:10:23:c3:53:04:29:78:1e:11:
         37:50:6f:7c:68:e6:2b:da:5f:7a:cd:81:b3:bd:2a:73:46:35:
         dd:30:7e:91:d5:2d:7c:c9:7b:29:ce:fc:14:0f:53:ee:27:d9:
         49:4c:ea:33:83:7a:aa:bd:f8:f7:7e:a0:d2:7a:fc:40:35:50:
         c5:28:f6:c4:c7:0c:19:79:46:94:7b:7e:c6:7e:cf:97:76:26:
         83:7d:66:86:77:36:c9:f1:f9:1d:46:e6:94:a7:51:1b:54:ba:
         1b:5d:d6:e3:7b:94:ad:00:8f:2a:ab:c8:67:d9:ec:c9:5f:8e:
         a8:ec:09:47
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIDAeluMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIxMDY0MDQ2WhcNMjYwOTI4MDY0MDQ2WjAYMRYw
FAYDVQQDEw02YWIwZDE3Mi1lNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwoC/6aAxlve86cEn5bR67iuk5IgZCGrWQjUhU1AZ11Us/L2lxuBD8Tb3
33I0am0KqUvwAiDDLFLbp4uBLs2eE49+thy+VImOflrQrYBSeZ7Mc6CitJWBbPdZ
WhaUNe7JGtN2mJ/6TguYB9+eNLlRIMO09KoGqGfGfJz7TZ7vdgN6iiwqiiXEF4Ou
HeQYOI+0ZniezMJY8SR4JpDUSce+Xu7pxTynsx/+BgTtRAwr+BnahvY8TcEiNB5o
rq5N4Q79gZqcvU7QTohMtUMuz/0RdHilAi48SJfrtwtth49/FrC6beuAhrMTe2Lk
20KtQyAQtCKwuLQ5lmt2kGhsKMaO+QIDAQABo4IDEjCCAw4wHQYDVR0OBBYEFB/U
Lub6SqLgQ/tl3AIubUNYrnPbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjRENTg5QUI1ODcxMUYxOTRFNTNDRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAJpRPQMEAJpRjAMEAJpR
oQMEAJpRpAMEAJpRsgMEAJpRtQMEAJpRvwMEAJpSEgMEAJpSFAMEAJpTgAMEAJpT
hwMEAJpTiQMEAJpTjQMEAJpTngMEAJpTuwMEAZpTvgMEAJpT0QMEAJpT0wMEAJpT
9zANBgkqhkiG9w0BAQsFAAOCAQEArGi5wzwHIu1j2LtZYatyG4m/XQR7oc+wnMkS
OLViFitQApr6dBABGlZJrdi3cpUofRAtTsx4ZHm5/SVUU7WUV9NpsriQZhlffvxh
Uj/yTl3E6ghxuYEtG8GeDeOOPVfYdhwqZJ9kHkfOl7Vt1klX5uVTx5l8tmPn3Qyg
BLaVX1ZoZPZrr7dQECPDUwQpeB4RN1BvfGjmK9pfes2Bs70qc0Y13TB+kdUtfMl7
Kc78FA9T7ifZSUzqM4N6qr34936g0nr8QDVQxSj2xMcMGXlGlHt+xn7Pl3Ymg31m
hnc2yfH5HUbmlKdRG1S6G13W43uUrQCPKqvIZ9nsyV+OqOwJRw==
-----END CERTIFICATE-----