Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD85B769C8811F18B7239FECE1D38B0.roa
File:                     6FD85B769C8811F18B7239FECE1D38B0.roa (raw, json)
Hash identifier:          5YsBz0NbnWC0DJeEqz+gNgfqDbLN0txLsMvjigxGojs=
Subject key identifier:   BB:68:F4:A7:28:17:A6:37:C4:2B:A4:09:CA:57:F7:38:D4:17:92:6A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E08C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD85B769C8811F18B7239FECE1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:15:23 +0000
ROA not before:           Thu 20 Aug 2026 11:15:19 +0000
ROA not after:            Sat 10 Oct 2026 11:15:19 +0000
asID:                     395793
IP address blocks:        154.81.50.0/24 maxlen: 24
                          154.82.162.0/23 maxlen: 24
                          154.82.164.0/22 maxlen: 24
                          154.83.8.0/24 maxlen: 24
                          154.83.9.0/24 maxlen: 24
                          154.83.10.0/24 maxlen: 24
                          154.83.11.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
                          154.91.152.0/24 maxlen: 24
                          154.91.153.0/24 maxlen: 24
                          154.91.154.0/24 maxlen: 24
                          154.91.155.0/24 maxlen: 24
                          154.91.156.0/24 maxlen: 24
                          154.93.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123020 (0x1e08c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:15:19 2026 GMT
            Not After : Oct 10 11:15:19 2026 GMT
        Subject: CN=6a86e1cb-04fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:bf:dd:77:0a:fc:b2:b8:ce:32:a5:66:7b:
                    72:76:47:9c:45:02:ed:16:8d:1a:0f:a2:8a:24:68:
                    a1:c9:ab:04:9f:f3:f4:53:c2:64:83:d9:8c:69:35:
                    78:0b:88:d6:63:59:a3:23:9a:c7:02:52:11:28:b8:
                    9d:16:aa:d0:b0:f2:b7:5e:b3:b0:18:95:7f:7d:d1:
                    d1:63:43:8f:09:43:79:fc:52:35:80:f6:b1:67:5f:
                    e9:d3:fb:1d:f8:79:70:e9:8f:55:8b:6b:0d:4a:b3:
                    42:0f:c7:7d:16:dc:46:53:40:13:54:98:88:ba:73:
                    25:55:ee:a1:c7:3c:68:29:62:8e:51:28:e6:97:89:
                    c1:75:52:56:3b:95:d9:66:3b:b7:c2:ba:67:86:f7:
                    52:a6:22:68:6e:e1:33:ea:e0:f1:70:b0:36:e1:ea:
                    e4:d0:25:f5:a1:b5:dd:42:30:93:f4:e3:1f:be:23:
                    03:7f:b2:73:7a:98:6c:67:c4:3f:5c:4d:a6:ba:3b:
                    52:ab:2d:2a:cf:4c:21:c0:b7:12:46:2c:f4:4e:38:
                    82:92:a8:05:ed:a9:98:e3:d2:70:c9:22:9e:c2:3f:
                    68:af:70:b2:7a:27:d9:ce:e2:fa:01:a6:e3:46:52:
                    dc:08:c6:d3:c3:d9:80:d6:14:2a:75:66:4f:88:65:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:68:F4:A7:28:17:A6:37:C4:2B:A4:09:CA:57:F7:38:D4:17:92:6A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD85B769C8811F18B7239FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24
                  154.82.162.0-154.82.167.255
                  154.83.8.0/22
                  154.83.24.0/24
                  154.91.152.0-154.91.156.255
                  154.93.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:7b:2d:51:c6:95:a1:5b:36:91:67:ea:f9:29:12:67:c4:
         05:26:03:9d:45:f3:a3:c9:77:4a:1e:64:8a:4c:80:4f:6a:57:
         dc:8c:d9:93:a7:57:f1:22:ea:f2:30:95:42:d1:ea:eb:b2:ac:
         a8:f3:73:fd:5c:4d:7e:14:69:29:1c:2c:91:21:f1:e5:f7:b1:
         51:a9:5e:86:a2:fb:8b:e4:4f:e2:bf:af:f8:02:c9:e7:3c:b4:
         b7:f2:fe:ca:0b:4a:8d:90:e6:e3:71:6f:c8:05:79:79:5c:01:
         39:44:48:52:44:b7:c1:48:3c:4c:a6:dd:dc:7b:d7:54:8e:60:
         68:c1:91:eb:2a:ed:0e:64:05:b1:2d:0a:3d:7b:1e:dc:e8:3b:
         e2:a4:b5:01:c8:6d:85:41:b7:5f:c9:12:ce:6e:47:b0:d2:ee:
         8a:a1:6a:1f:4b:f7:e3:5c:7c:71:dc:a9:9e:61:26:43:62:e6:
         b0:23:b7:95:b3:24:48:bc:c5:22:3a:14:e6:6f:33:e7:74:88:
         4a:64:a8:d7:06:22:7b:d6:9a:a2:23:85:78:90:94:44:53:d1:
         3b:ee:fe:28:42:5b:2f:30:3b:59:56:29:10:5d:d5:18:48:08:
         68:a4:9f:17:8a:ab:19:00:2a:d9:47:0c:e0:0e:25:37:81:d7:
         4c:c6:4a:fa
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAeCMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTExNTE5WhcNMjYxMDEwMTExNTE5WjAYMRYw
FAYDVQQDEw02YTg2ZTFjYi0wNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxhW/3XcK/LK4zjKlZntydkecRQLtFo0aD6KKJGihyasEn/P0U8Jkg9mM
aTV4C4jWY1mjI5rHAlIRKLidFqrQsPK3XrOwGJV/fdHRY0OPCUN5/FI1gPaxZ1/p
0/sd+Hlw6Y9Vi2sNSrNCD8d9FtxGU0ATVJiIunMlVe6hxzxoKWKOUSjml4nBdVJW
O5XZZju3wrpnhvdSpiJobuEz6uDxcLA24erk0CX1obXdQjCT9OMfviMDf7Jzephs
Z8Q/XE2mujtSqy0qz0whwLcSRiz0TjiCkqgF7amY49JwySKewj9or3CyeifZzuL6
AabjRlLcCMbTw9mA1hQqdWZPiGXtLQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFLto
9KcoF6Y3xCukCcpX9zjUF5JqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RkQ4NUI3NjlDODgxMUYxOEI3MjM5RkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAmlEyMAwDBAGaUqIDBAOa
UqADBAKaUwgDBACaUxgwDAMEA5pbmAMEAJpbnAMEAJpdADANBgkqhkiG9w0BAQsF
AAOCAQEAkD57LVHGlaFbNpFn6vkpEmfEBSYDnUXzo8l3Sh5kikyAT2pX3IzZk6dX
8SLq8jCVQtHq67KsqPNz/VxNfhRpKRwskSHx5fexUalehqL7i+RP4r+v+ALJ5zy0
t/L+ygtKjZDm43FvyAV5eVwBOURIUkS3wUg8TKbd3HvXVI5gaMGR6yrtDmQFsS0K
PXse3Og74qS1AchthUG3X8kSzm5HsNLuiqFqH0v341x8cdypnmEmQ2LmsCO3lbMk
SLzFIjoU5m8z53SISmSo1wYie9aaoiOFeJCURFPRO+7+KEJbLzA7WVYpEF3VGEgI
aKSfF4qrGQAq2UcM4A4lN4HXTMZK+g==
-----END CERTIFICATE-----