Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9785B8C16211F1B016DCAECE1D38B0.roa
File:                     6D9785B8C16211F1B016DCAECE1D38B0.roa (raw, json)
Hash identifier:          WtCB3auXpZSuB65S+KWkJp+rRRu44nzHfsi4vwSoQmY=
Subject key identifier:   57:8B:46:7A:3D:C7:9A:70:9F:33:20:26:65:60:DE:FE:1D:8B:F8:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9785B8C16211F1B016DCAECE1D38B0.roa
Signing time:             Tue 06 Oct 2026 08:46:32 +0000
ROA not before:           Tue 06 Oct 2026 08:46:28 +0000
ROA not after:            Tue 10 Nov 2026 08:46:28 +0000
asID:                     51896
IP address blocks:        154.194.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126073 (0x1ec79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 08:46:28 2026 GMT
            Not After : Nov 10 08:46:28 2026 GMT
        Subject: CN=6ac4b568-8f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:80:96:7a:4d:49:f1:ee:0f:97:69:da:fe:
                    1e:c5:83:9f:18:cc:5d:d2:f3:7f:aa:15:0e:68:7f:
                    3f:ff:da:95:5b:d9:d2:27:30:e7:7d:38:34:43:26:
                    87:2e:ce:80:d2:2d:c4:4d:78:45:70:34:f5:98:b7:
                    68:69:e0:3a:46:7a:ed:90:14:9d:02:dc:ff:28:86:
                    68:c8:a3:e3:ae:6d:2e:a3:c5:77:8d:00:c2:27:80:
                    79:7e:ff:8f:19:74:17:da:13:0c:55:57:b3:02:fd:
                    fa:b7:0c:71:15:20:fc:bd:34:d9:21:41:b4:50:3b:
                    52:c1:95:48:ab:92:44:f3:f7:05:e8:f2:f7:7d:3e:
                    32:d4:9c:8e:c3:31:c3:e0:f6:4e:95:ca:5d:a3:03:
                    10:92:e7:fb:55:cd:fc:6b:5c:14:01:aa:1e:e1:2e:
                    7c:e7:d6:b4:a6:90:f3:ea:33:92:8a:db:19:0d:64:
                    56:23:c6:1f:7f:e9:46:28:3d:2d:c5:e1:c5:93:28:
                    53:4e:ef:cc:32:57:64:8d:cf:a4:9d:cc:ea:4f:42:
                    ef:b1:09:27:24:4e:93:96:b4:ec:47:5f:47:f5:ab:
                    fc:00:6b:48:9d:06:cf:d1:32:1a:87:5d:b8:2b:11:
                    76:84:60:93:ba:a6:3d:22:04:00:b3:16:a4:39:b1:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8B:46:7A:3D:C7:9A:70:9F:33:20:26:65:60:DE:FE:1D:8B:F8:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9785B8C16211F1B016DCAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:b6:e1:bb:99:98:69:51:a2:c1:c3:f7:b7:b9:1e:af:84:32:
         3f:76:7b:50:7a:3b:9f:4e:95:44:61:cc:ef:f6:97:45:92:cf:
         72:e3:69:53:95:56:63:64:e9:91:65:93:14:95:86:03:ba:82:
         79:94:07:a1:fa:35:e0:b4:af:6e:cf:89:ce:cf:fc:8a:36:e1:
         62:0f:d8:09:c7:4d:2c:cc:ae:f2:75:f5:64:a3:1b:08:82:01:
         9b:e2:5d:c8:be:e4:c2:dd:0f:12:73:32:78:9f:36:bc:90:f8:
         d8:06:d8:92:79:1b:c6:f0:17:3c:4c:74:67:5b:bc:42:25:1c:
         a7:af:f8:d4:74:77:e1:7e:77:a4:c4:20:71:df:de:db:06:29:
         d6:f3:65:e6:45:5a:dd:7e:b9:3d:f6:34:6a:df:4a:72:4c:40:
         a8:ac:d1:fd:fe:10:53:d1:d8:3f:78:c8:ab:a9:c7:27:e3:78:
         83:a6:95:70:49:cb:1c:f8:e1:a6:97:fc:2c:4f:d0:e0:c8:77:
         67:9b:3c:c8:53:ae:69:3a:bf:cc:6c:f2:d1:76:f2:8e:e0:6e:
         64:2d:55:33:f8:49:7a:39:53:10:2f:d5:70:d9:bb:a1:89:a9:
         b3:42:da:e3:2d:9b:b6:23:ea:e4:b1:3d:9e:bc:9c:aa:ca:1f:
         2e:1b:8f:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAex5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA2MDg0NjI4WhcNMjYxMTEwMDg0NjI4WjAYMRYw
FAYDVQQDEw02YWM0YjU2OC04Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0ViAlnpNSfHuD5dp2v4exYOfGMxd0vN/qhUOaH8//9qVW9nSJzDnfTg0
QyaHLs6A0i3ETXhFcDT1mLdoaeA6RnrtkBSdAtz/KIZoyKPjrm0uo8V3jQDCJ4B5
fv+PGXQX2hMMVVezAv36twxxFSD8vTTZIUG0UDtSwZVIq5JE8/cF6PL3fT4y1JyO
wzHD4PZOlcpdowMQkuf7Vc38a1wUAaoe4S5859a0ppDz6jOSitsZDWRWI8Yff+lG
KD0txeHFkyhTTu/MMldkjc+knczqT0LvsQknJE6TlrTsR19H9av8AGtInQbP0TIa
h124KxF2hGCTuqY9IgQAsxakObGBNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFeL
Rno9x5pwnzMgJmVg3v4di/j+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RDk3ODVCOEMxNjIxMUYxQjAxNkRDQUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIrMA0GCSqGSIb3DQEB
CwUAA4IBAQDOtuG7mZhpUaLBw/e3uR6vhDI/dntQejufTpVEYczv9pdFks9y42lT
lVZjZOmRZZMUlYYDuoJ5lAeh+jXgtK9uz4nOz/yKNuFiD9gJx00szK7ydfVkoxsI
ggGb4l3IvuTC3Q8SczJ4nza8kPjYBtiSeRvG8Bc8THRnW7xCJRynr/jUdHfhfnek
xCBx397bBinW82XmRVrdfrk99jRq30pyTECorNH9/hBT0dg/eMirqccn43iDppVw
Scsc+OGml/wsT9DgyHdnmzzIU65pOr/MbPLRdvKO4G5kLVUz+El6OVMQL9Vw2buh
iamzQtrjLZu2I+rksT2evJyqyh8uG4/w
-----END CERTIFICATE-----