Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8B5244A8F411F18BFD4501CF1D38B0.roa
File:                     7A8B5244A8F411F18BFD4501CF1D38B0.roa (raw, json)
Hash identifier:          TYaDAR0gaGOe3WTi+DleaVhLOZY3zXF3WE2JXbWr4t4=
Subject key identifier:   03:E3:C2:58:32:F9:CF:B6:7F:9C:5D:0B:43:6B:B6:2C:32:DF:0A:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E59F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8B5244A8F411F18BFD4501CF1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:39:01 +0000
ROA not before:           Sat 05 Sep 2026 06:38:57 +0000
ROA not after:            Mon 14 Sep 2026 06:38:57 +0000
asID:                     18229
IP address blocks:        154.206.29.0/24 maxlen: 24
                          154.210.205.0/24 maxlen: 24
                          154.210.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124319 (0x1e59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  5 06:38:57 2026 GMT
            Not After : Sep 14 06:38:57 2026 GMT
        Subject: CN=6a9bb905-4fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:92:31:0e:cd:59:12:a0:71:43:c2:5e:eb:
                    46:92:2c:00:e3:52:df:54:f7:12:bd:21:34:31:5e:
                    82:b9:76:95:31:24:56:4e:25:0b:3f:e5:66:7a:49:
                    3e:be:b5:b8:98:c7:74:b2:66:43:f6:58:67:3f:c1:
                    82:f9:90:b7:c0:3d:c1:ef:86:5a:33:f3:f7:ab:c8:
                    89:19:11:00:5e:22:7d:b8:03:b7:8a:4d:de:d4:1c:
                    a9:fd:34:5b:aa:61:4a:a0:5e:75:f5:2d:aa:09:85:
                    5f:08:14:7f:c7:63:71:59:b6:21:3f:14:88:82:20:
                    5f:be:fa:7e:43:0e:2e:e7:b8:c5:43:79:99:33:9d:
                    36:80:3e:ad:2f:18:9c:1b:87:1b:70:fd:7c:36:48:
                    a9:c4:e1:70:1d:3d:78:b6:b7:42:a2:58:7b:29:35:
                    42:ff:67:d2:a3:93:ea:ee:9d:fe:80:5c:76:54:01:
                    f0:bb:e2:62:7b:d4:a0:f5:26:0a:6a:70:22:aa:38:
                    69:cc:64:74:fe:15:a0:2c:6f:f2:91:48:f2:0a:cc:
                    56:f3:bd:4e:c5:eb:b7:f6:b6:8c:2c:b0:1a:1a:1e:
                    86:bf:ed:5e:74:0c:0c:4b:b0:e4:d1:1d:70:5a:64:
                    82:a1:c5:90:e2:7b:21:43:c0:4c:fa:b1:a7:54:c8:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:C2:58:32:F9:CF:B6:7F:9C:5D:0B:43:6B:B6:2C:32:DF:0A:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8B5244A8F411F18BFD4501CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.29.0/24
                  154.210.205.0/24
                  154.210.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:16:84:91:cc:8c:58:a2:34:c5:43:04:36:14:ce:8e:dc:5b:
         6c:1e:29:ef:6e:f8:13:f0:11:bb:4e:f1:9c:29:db:20:e8:1e:
         4a:85:44:a6:68:cc:b7:69:40:28:29:d5:3c:59:14:13:c1:7f:
         63:40:f0:b0:ef:a8:ec:82:e1:5c:56:c8:f3:c3:61:0f:cc:8a:
         c3:3f:b9:11:f3:e1:fe:87:da:99:8c:a8:da:2c:31:87:d5:8e:
         ac:36:ce:a7:6b:94:d5:d9:8c:80:93:45:d7:ce:53:81:04:84:
         17:6f:9a:79:66:65:3e:1d:13:de:85:4d:25:f4:fb:c4:27:ec:
         1e:80:c5:6a:ef:58:34:99:9b:67:f1:45:99:9e:ea:b4:6e:e9:
         2f:b6:db:f6:eb:56:e9:09:b9:6b:6f:07:ac:b3:0a:c6:57:51:
         5d:27:bf:d9:6d:16:a9:fd:d2:f8:87:e7:46:bd:f0:31:0d:cb:
         b1:8c:92:d3:c9:5c:b9:a9:d7:bf:a2:08:bd:70:a8:7b:74:4e:
         2f:66:66:ba:67:61:4d:a3:c2:b1:cd:a9:2b:2f:5e:ca:e1:d0:
         41:b0:89:15:ad:c1:ff:76:f4:c7:31:8e:c2:9b:2a:86:d7:76:
         5c:ce:c0:9d:dc:d5:96:ad:45:bb:b9:60:87:47:61:42:ca:ee:
         09:36:b9:4f
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAeWfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA1MDYzODU3WhcNMjYwOTE0MDYzODU3WjAYMRYw
FAYDVQQDEw02YTliYjkwNS00ZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqm6SMQ7NWRKgcUPCXutGkiwA41LfVPcSvSE0MV6CuXaVMSRWTiULP+Vm
ekk+vrW4mMd0smZD9lhnP8GC+ZC3wD3B74ZaM/P3q8iJGREAXiJ9uAO3ik3e1Byp
/TRbqmFKoF519S2qCYVfCBR/x2NxWbYhPxSIgiBfvvp+Qw4u57jFQ3mZM502gD6t
LxicG4cbcP18NkipxOFwHT14trdColh7KTVC/2fSo5Pq7p3+gFx2VAHwu+Jie9Sg
9SYKanAiqjhpzGR0/hWgLG/ykUjyCsxW871Oxeu39raMLLAaGh6Gv+1edAwMS7Dk
0R1wWmSCocWQ4nshQ8BM+rGnVMihNwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFAPj
wlgy+c+2f5xdC0Nrtiwy3wp4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QThCNTI0NEE4RjQxMUYxOEJGRDQ1MDFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAms4dAwQAmtLNAwQAmtLq
MA0GCSqGSIb3DQEBCwUAA4IBAQCoFoSRzIxYojTFQwQ2FM6O3FtsHinvbvgT8BG7
TvGcKdsg6B5KhUSmaMy3aUAoKdU8WRQTwX9jQPCw76jsguFcVsjzw2EPzIrDP7kR
8+H+h9qZjKjaLDGH1Y6sNs6na5TV2YyAk0XXzlOBBIQXb5p5ZmU+HRPehU0l9PvE
J+wegMVq71g0mZtn8UWZnuq0bukvttv261bpCblrbwesswrGV1FdJ7/ZbRap/dL4
h+dGvfAxDcuxjJLTyVy5qde/ogi9cKh7dE4vZma6Z2FNo8KxzakrL17K4dBBsIkV
rcH/dvTHMY7CmyqG13ZczsCd3NWWrUW7uWCHR2FCyu4JNrlP
-----END CERTIFICATE-----