Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D741CAAC79711F18EBC7FC6CE1D38B0.roa
File:                     6D741CAAC79711F18EBC7FC6CE1D38B0.roa (raw, json)
Hash identifier:          t+R2GpHBh1coPFpgMmZ/A0Oc7wlHcYw0GdbishYoxQQ=
Subject key identifier:   F0:DD:7A:5E:52:F9:4C:4E:0F:FC:6B:62:0D:A7:94:5F:67:4A:1A:64
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D741CAAC79711F18EBC7FC6CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:21:02 +0000
ROA not before:           Wed 14 Oct 2026 06:20:57 +0000
ROA not after:            Fri 13 Nov 2026 06:20:57 +0000
asID:                     17497
IP address blocks:        154.90.138.0/23 maxlen: 24
                          154.90.138.0/24 maxlen: 24
                          154.90.139.0/24 maxlen: 24
                          154.90.174.0/23 maxlen: 24
                          154.90.174.0/24 maxlen: 24
                          154.90.175.0/24 maxlen: 24
                          154.92.188.0/23 maxlen: 24
                          154.92.188.0/24 maxlen: 24
                          154.92.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126427 (0x1eddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 06:20:57 2026 GMT
            Not After : Nov 13 06:20:57 2026 GMT
        Subject: CN=6acf1f4e-453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:8b:30:3d:c5:4e:46:3a:0c:5f:54:af:5c:
                    a4:48:20:f5:8d:ca:57:41:b5:9b:a7:68:d5:42:b7:
                    b3:54:38:61:5a:98:c9:4a:ef:5e:1c:f9:10:60:53:
                    6c:28:37:b2:75:02:32:f8:6e:dc:0b:ae:ac:61:71:
                    98:f8:42:0d:68:7b:29:e4:09:1e:1d:be:51:57:a6:
                    30:ce:2a:96:50:9e:d1:c7:25:75:ec:c3:32:57:7d:
                    bc:46:c1:0a:36:ec:7e:ca:8a:62:4d:4e:64:d2:57:
                    47:26:cf:1d:df:6a:ab:cc:29:b0:e0:a6:1f:b5:ec:
                    b8:62:ab:ae:9f:87:59:27:4d:95:0a:df:17:80:bb:
                    2d:93:39:c1:6b:48:13:e5:d3:01:fa:1b:95:61:aa:
                    c9:71:60:5c:36:63:6b:4a:73:34:2e:26:cb:ae:72:
                    07:b1:8d:c9:90:b4:03:0b:89:da:c9:0e:0f:c7:38:
                    f9:72:45:55:0a:90:9d:7d:34:09:92:c7:43:59:ac:
                    b4:ec:99:dc:07:54:ac:9a:32:54:3b:dd:b0:9a:a1:
                    3a:4b:24:18:94:55:fd:13:a1:43:7e:0f:df:24:1f:
                    a9:92:cb:2e:24:80:30:9a:f2:07:ff:f1:dc:a1:e4:
                    67:de:da:05:68:2e:51:70:12:bb:0c:c8:33:8c:8d:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:7A:5E:52:F9:4C:4E:0F:FC:6B:62:0D:A7:94:5F:67:4A:1A:64
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D741CAAC79711F18EBC7FC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.138.0/23
                  154.90.174.0/23
                  154.92.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:10:92:f6:df:7a:b8:58:3f:ce:0b:86:fa:ff:14:94:e8:56:
         0f:63:25:f4:91:0a:e3:a4:11:cc:b7:6a:d3:bf:95:60:6a:3d:
         cd:e9:ff:a0:cc:19:9f:d2:14:a5:65:df:d9:97:18:5e:bf:73:
         89:7a:44:8c:56:62:89:4e:62:36:6f:c9:e4:4b:eb:e2:74:5b:
         4b:b7:ff:ea:b9:2d:61:af:e3:9e:88:ee:af:06:9d:8a:6c:98:
         0e:ab:16:a0:77:8d:65:52:cb:05:6d:ad:1f:b7:13:27:7a:6d:
         62:0f:f4:2c:83:61:93:f2:ce:83:d2:5f:54:60:c3:48:51:76:
         ee:b6:2a:86:2c:cc:12:aa:d4:ac:58:d5:f6:01:a0:08:15:1d:
         d5:6f:88:c1:1f:47:c6:b5:ee:9f:94:ec:72:50:42:59:ab:5a:
         36:b5:ce:09:1c:af:2f:88:24:d2:ec:ad:4b:20:25:bf:46:df:
         51:98:70:eb:e6:80:b8:e6:86:10:36:59:12:52:c0:74:1f:b2:
         a2:8a:f0:8f:72:72:ed:2f:b3:ca:56:0d:32:f2:fd:6b:c4:df:
         b9:71:33:9d:9b:e6:64:5f:9c:6c:5d:3d:3d:db:d9:ce:12:64:
         15:16:e1:53:d4:30:79:48:27:75:a0:02:d9:c5:4d:a0:ec:7a:
         21:d4:e9:04
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAe3bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE0MDYyMDU3WhcNMjYxMTEzMDYyMDU3WjAYMRYw
FAYDVQQDEw02YWNmMWY0ZS00NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4xaLMD3FTkY6DF9Ur1ykSCD1jcpXQbWbp2jVQrezVDhhWpjJSu9eHPkQ
YFNsKDeydQIy+G7cC66sYXGY+EINaHsp5AkeHb5RV6YwziqWUJ7RxyV17MMyV328
RsEKNux+yopiTU5k0ldHJs8d32qrzCmw4KYftey4Yquun4dZJ02VCt8XgLstkznB
a0gT5dMB+huVYarJcWBcNmNrSnM0LibLrnIHsY3JkLQDC4nayQ4Pxzj5ckVVCpCd
fTQJksdDWay07JncB1SsmjJUO92wmqE6SyQYlFX9E6FDfg/fJB+pkssuJIAwmvIH
//HcoeRn3toFaC5RcBK7DMgzjI1/xwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPDd
el5S+UxOD/xrYg2nlF9nShpkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RDc0MUNBQUM3OTcxMUYxOEVCQzdGQzZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmlqKAwQBmlquAwQBmly8
MA0GCSqGSIb3DQEBCwUAA4IBAQB3EJL233q4WD/OC4b6/xSU6FYPYyX0kQrjpBHM
t2rTv5Vgaj3N6f+gzBmf0hSlZd/Zlxhev3OJekSMVmKJTmI2b8nkS+vidFtLt//q
uS1hr+OeiO6vBp2KbJgOqxagd41lUssFba0ftxMnem1iD/Qsg2GT8s6D0l9UYMNI
UXbutiqGLMwSqtSsWNX2AaAIFR3Vb4jBH0fGte6flOxyUEJZq1o2tc4JHK8viCTS
7K1LICW/Rt9RmHDr5oC45oYQNlkSUsB0H7KiivCPcnLtL7PKVg0y8v1rxN+5cTOd
m+ZkX5xsXT0929nOEmQVFuFT1DB5SCd1oALZxU2g7Hoh1OkE
-----END CERTIFICATE-----