Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AB3AF0C08B11F1811E17B4CE1D38B0.roa
File:                     71AB3AF0C08B11F1811E17B4CE1D38B0.roa (raw, json)
Hash identifier:          z6MB643YWkLllmYVcES2/hjnuUtMyookZTY206VNLFw=
Subject key identifier:   CC:93:35:87:B0:06:7F:F0:26:65:77:8F:FD:D8:92:CA:E2:79:E5:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AB3AF0C08B11F1811E17B4CE1D38B0.roa
Signing time:             Mon 05 Oct 2026 07:07:37 +0000
ROA not before:           Mon 05 Oct 2026 07:07:33 +0000
ROA not after:            Sat 24 Oct 2026 07:07:33 +0000
asID:                     147281
IP address blocks:        154.84.177.0/24 maxlen: 24
                          154.86.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126014 (0x1ec3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 07:07:33 2026 GMT
            Not After : Oct 24 07:07:33 2026 GMT
        Subject: CN=6ac34cb9-e53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:7e:68:d8:e0:48:2e:ca:87:40:ac:17:48:
                    ea:bb:01:81:55:d6:ca:e2:68:a0:46:7a:0e:e0:02:
                    2e:4c:cd:67:48:ca:33:e9:41:01:76:c2:b0:a2:1f:
                    e3:6b:fa:01:bc:e8:96:25:ef:e0:d5:5c:0e:bf:b1:
                    75:7f:ca:17:25:15:c6:90:ed:5b:f6:0c:f4:02:4c:
                    97:c6:99:6a:0d:a6:95:2e:9e:c0:34:5d:fa:a1:5d:
                    9d:c1:7a:fa:54:72:55:ce:d2:aa:4e:a7:d2:0b:93:
                    0d:1c:c4:4d:c0:cb:e0:e4:71:4a:b0:48:79:d4:db:
                    40:a4:e6:14:b1:6d:91:b0:20:ae:ff:01:59:72:8e:
                    32:5d:1a:3c:43:14:b8:52:c5:a5:36:98:f7:a0:f4:
                    8d:be:0b:10:72:3d:e4:c6:41:c6:54:23:53:42:a0:
                    be:b1:8f:82:66:9a:73:54:85:d7:33:5e:0d:5d:57:
                    91:68:ca:d1:fc:a2:c3:49:a9:38:8f:94:4d:b8:43:
                    08:34:ba:94:1d:bd:89:b4:4f:63:e0:3a:be:eb:1c:
                    9d:ad:aa:8a:a9:c9:f7:f6:98:6c:6a:51:25:83:a2:
                    c9:8b:4e:22:46:dd:0a:e6:b0:a9:05:b5:89:34:73:
                    cd:ea:9a:ba:c0:1c:f1:e0:5a:5e:50:97:ab:f2:7d:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:35:87:B0:06:7F:F0:26:65:77:8F:FD:D8:92:CA:E2:79:E5:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AB3AF0C08B11F1811E17B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.177.0/24
                  154.86.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:52:07:90:51:8b:3e:31:e9:e2:d2:c5:4f:68:33:22:92:85:
         18:bb:33:f5:2f:95:b4:bf:7d:5b:2c:7c:64:b9:7b:4d:ff:dd:
         71:3a:f9:a0:bd:53:9d:55:b7:98:6e:6b:36:1a:95:65:71:e6:
         29:5c:5a:01:44:70:e3:93:86:3b:b0:72:f7:0e:b6:39:d2:8b:
         e2:c0:de:53:88:fe:e9:b3:d0:bc:36:e3:4c:b8:cf:7a:9b:6f:
         62:7a:ac:65:12:ea:20:fc:67:fc:f1:91:2f:50:4c:45:10:17:
         ac:c2:16:91:62:15:54:40:59:26:e7:36:55:50:b7:1a:f2:2e:
         21:23:15:25:fb:a9:f8:af:c9:10:ff:de:17:e9:a1:49:2c:5e:
         57:8f:f6:75:20:62:28:07:ac:a9:21:7a:f1:40:8a:8b:42:55:
         a4:f9:57:65:f0:a8:90:46:db:78:c7:f9:11:ca:1e:84:87:f3:
         36:df:e8:b3:8f:ed:80:06:51:e9:af:bb:eb:3a:39:ce:f8:be:
         9f:0a:c5:a2:88:bc:8d:c6:e2:3f:88:76:f5:bc:bf:bf:24:a5:
         60:93:75:29:89:22:8a:27:c6:8b:7e:fe:75:37:d8:04:ce:f0:
         1c:27:3d:84:e4:65:c0:e8:11:ea:43:3f:01:e8:a4:3d:5e:13:
         58:cd:76:39
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAew+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA1MDcwNzMzWhcNMjYxMDI0MDcwNzMzWjAYMRYw
FAYDVQQDEw02YWMzNGNiOS1lNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuWx+aNjgSC7Kh0CsF0jquwGBVdbK4migRnoO4AIuTM1nSMoz6UEBdsKw
oh/ja/oBvOiWJe/g1VwOv7F1f8oXJRXGkO1b9gz0AkyXxplqDaaVLp7ANF36oV2d
wXr6VHJVztKqTqfSC5MNHMRNwMvg5HFKsEh51NtApOYUsW2RsCCu/wFZco4yXRo8
QxS4UsWlNpj3oPSNvgsQcj3kxkHGVCNTQqC+sY+CZppzVIXXM14NXVeRaMrR/KLD
Sak4j5RNuEMINLqUHb2JtE9j4Dq+6xydraqKqcn39phsalElg6LJi04iRt0K5rCp
BbWJNHPN6pq6wBzx4FpeUJer8n2S1QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMyT
NYewBn/wJmV3j/3YksrieeVVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MUFCM0FGMEMwOEIxMUYxODExRTE3QjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlSxAwQAmlZ+MA0GCSqG
SIb3DQEBCwUAA4IBAQDKUgeQUYs+Meni0sVPaDMikoUYuzP1L5W0v31bLHxkuXtN
/91xOvmgvVOdVbeYbms2GpVlceYpXFoBRHDjk4Y7sHL3DrY50oviwN5TiP7ps9C8
NuNMuM96m29ieqxlEuog/Gf88ZEvUExFEBeswhaRYhVUQFkm5zZVULca8i4hIxUl
+6n4r8kQ/94X6aFJLF5Xj/Z1IGIoB6ypIXrxQIqLQlWk+Vdl8KiQRtt4x/kRyh6E
h/M23+izj+2ABlHpr7vrOjnO+L6fCsWiiLyNxuI/iHb1vL+/JKVgk3UpiSKKJ8aL
fv51N9gEzvAcJz2E5GXA6BHqQz8B6KQ9XhNYzXY5
-----END CERTIFICATE-----