Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C5B46299F511F1B43E45E9CE1D38B0.roa
File:                     69C5B46299F511F1B43E45E9CE1D38B0.roa (raw, json)
Hash identifier:          HKeF0p3wgbm7roCr7QTPYoKyU6KlEYsF2Rnju3zUHWU=
Subject key identifier:   B1:4C:B0:7C:70:19:61:34:2C:F2:E8:38:49:0F:25:4D:D4:B7:2D:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C5B46299F511F1B43E45E9CE1D38B0.roa
Signing time:             Mon 17 Aug 2026 04:37:55 +0000
ROA not before:           Mon 17 Aug 2026 04:37:49 +0000
ROA not after:            Tue 08 Sep 2026 04:37:49 +0000
asID:                     397423
IP address blocks:        154.192.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 00:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122711 (0x1df57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 17 04:37:49 2026 GMT
            Not After : Sep  8 04:37:49 2026 GMT
        Subject: CN=6a829023-4d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:b8:43:e4:37:31:05:38:4a:4e:60:2b:b9:
                    91:f4:c3:e5:9f:02:8e:ed:e6:5b:78:36:66:e7:b2:
                    1a:3e:4e:0e:d5:51:f2:ca:b1:04:2d:8d:06:5f:16:
                    ef:6d:4a:1d:6e:b1:c2:20:64:26:9a:9b:90:d3:79:
                    76:91:33:67:aa:4e:9c:54:78:d9:31:ed:21:6d:88:
                    90:6e:d4:fd:a9:93:ad:e8:c5:66:ab:87:34:5a:f6:
                    7a:82:37:2b:04:97:ea:bb:36:60:f7:13:eb:8f:2d:
                    04:f9:83:ee:fd:c7:55:1e:01:3b:39:0a:39:aa:0b:
                    bd:a7:64:8c:10:26:1d:90:b8:b8:91:d7:52:1b:b3:
                    6c:7d:58:7d:df:86:07:4c:87:4d:98:ac:7e:46:e0:
                    cf:59:06:15:0d:f7:76:e3:ff:e0:aa:bf:29:8f:a2:
                    13:dd:0f:17:da:8b:5b:13:6b:bb:5f:7c:98:dc:95:
                    b4:7f:ef:b5:f1:28:a7:f7:d2:8e:0f:25:ab:7f:25:
                    ff:32:63:a1:a2:16:94:ff:f9:25:a5:68:fa:38:dd:
                    96:b2:64:1e:51:b2:de:e5:60:c0:d3:34:eb:fe:aa:
                    99:37:a5:f0:b0:24:76:c4:66:91:73:aa:d5:3d:48:
                    de:b4:b5:9c:2f:15:4e:19:a5:d5:ad:bb:59:3a:93:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:B0:7C:70:19:61:34:2C:F2:E8:38:49:0F:25:4D:D4:B7:2D:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C5B46299F511F1B43E45E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.192.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:0d:fb:48:bb:4b:b7:b9:01:ea:31:dc:51:bf:02:6e:17:fd:
         06:52:28:36:bb:93:c7:34:69:e6:1e:3c:18:17:67:04:71:37:
         59:3b:0c:b6:15:7e:3b:98:94:84:f4:44:85:30:44:ac:75:be:
         cf:3f:67:d4:48:33:4a:75:62:2f:54:ab:da:91:9f:03:3b:6c:
         db:ce:c7:f6:30:70:6d:97:ea:be:14:c7:88:43:d3:06:6a:ea:
         9f:86:1a:68:3d:6f:ee:45:d2:7b:98:8b:0b:d8:02:45:af:18:
         7c:41:61:b0:a6:05:ec:e5:6e:39:44:56:8e:7c:06:17:bf:43:
         80:21:8c:97:aa:7f:9f:bb:1c:d8:fd:26:95:18:98:a2:9c:84:
         e1:92:fb:50:ea:61:b6:9e:0e:74:69:03:40:61:cb:75:e6:4f:
         80:0d:4b:0c:b7:f0:46:f4:3d:29:19:23:59:3e:fd:90:ed:98:
         01:fa:dc:3a:74:4d:54:c7:ad:b9:51:df:ea:cd:8f:8c:9b:26:
         83:c8:d0:09:98:58:7e:33:94:ee:58:1a:b9:11:0d:0b:b3:6a:
         f1:e4:a5:9e:76:98:98:e4:7c:f9:4d:9e:29:ec:40:29:64:87:
         8b:b8:03:54:2b:94:18:0d:c6:3b:0e:7e:f3:30:94:0d:e0:0d:
         d5:98:28:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd9XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE3MDQzNzQ5WhcNMjYwOTA4MDQzNzQ5WjAYMRYw
FAYDVQQDEw02YTgyOTAyMy00ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1CO4Q+Q3MQU4Sk5gK7mR9MPlnwKO7eZbeDZm57IaPk4O1VHyyrEELY0G
XxbvbUodbrHCIGQmmpuQ03l2kTNnqk6cVHjZMe0hbYiQbtT9qZOt6MVmq4c0WvZ6
gjcrBJfquzZg9xPrjy0E+YPu/cdVHgE7OQo5qgu9p2SMECYdkLi4kddSG7NsfVh9
34YHTIdNmKx+RuDPWQYVDfd24//gqr8pj6IT3Q8X2otbE2u7X3yY3JW0f++18Sin
99KODyWrfyX/MmOhohaU//klpWj6ON2WsmQeUbLe5WDA0zTr/qqZN6XwsCR2xGaR
c6rVPUjetLWcLxVOGaXVrbtZOpO0ZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLFM
sHxwGWE0LPLoOEkPJU3Uty17MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUM1QjQ2Mjk5RjUxMUYxQjQzRTQ1RTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsAAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCDftIu0u3uQHqMdxRvwJuF/0GUig2u5PHNGnmHjwYF2cEcTdZOwy2
FX47mJSE9ESFMESsdb7PP2fUSDNKdWIvVKvakZ8DO2zbzsf2MHBtl+q+FMeIQ9MG
auqfhhpoPW/uRdJ7mIsL2AJFrxh8QWGwpgXs5W45RFaOfAYXv0OAIYyXqn+fuxzY
/SaVGJiinIThkvtQ6mG2ng50aQNAYct15k+ADUsMt/BG9D0pGSNZPv2Q7ZgB+tw6
dE1Ux625Ud/qzY+MmyaDyNAJmFh+M5TuWBq5EQ0Ls2rx5KWedpiY5Hz5TZ4p7EAp
ZIeLuANUK5QYDcY7Dn7zMJQN4A3VmCiq
-----END CERTIFICATE-----