Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB02034A50F11F1B01573F0CE1D38B0.roa
File:                     7BB02034A50F11F1B01573F0CE1D38B0.roa (raw, json)
Hash identifier:          +f0ahHBnyPZO5gz+u3XDK/6hgYKe35WtjIIZlbTgDhc=
Subject key identifier:   A1:11:98:1D:C3:EE:79:DE:70:A4:52:20:0B:5C:E4:B6:85:8D:5E:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E445
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB02034A50F11F1B01573F0CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 07:42:15 +0000
ROA not before:           Mon 31 Aug 2026 07:42:10 +0000
ROA not after:            Fri 11 Sep 2026 07:42:10 +0000
asID:                     11427
IP address blocks:        154.194.8.0/22 maxlen: 24
                          154.194.16.0/21 maxlen: 24
                          154.194.24.0/22 maxlen: 24
                          154.194.196.0/22 maxlen: 24
                          154.194.216.0/21 maxlen: 24
                          154.198.128.0/19 maxlen: 24
                          154.202.144.0/20 maxlen: 24
                          154.202.192.0/18 maxlen: 24
                          154.213.168.0/21 maxlen: 24
                          154.220.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123973 (0x1e445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 07:42:10 2026 GMT
            Not After : Sep 11 07:42:10 2026 GMT
        Subject: CN=6a953057-fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:35:1d:d7:da:cb:85:ec:f1:a1:ec:7d:d8:
                    e8:5c:3b:dd:4b:e5:37:6e:7e:68:61:7e:35:36:d9:
                    ab:b5:51:d7:26:88:05:cb:f0:0d:70:a8:48:08:59:
                    12:68:34:b5:14:8b:ee:0b:e2:84:12:7a:99:51:1a:
                    95:46:23:e2:56:b9:db:b8:6b:a3:e9:ad:b5:2f:f8:
                    17:f8:ef:e7:4d:99:7d:a2:34:a0:42:0d:46:2b:c6:
                    7e:a7:ba:50:fb:c9:dc:2f:b3:c3:6f:55:92:90:3b:
                    03:5d:b5:29:8c:58:d7:f1:ce:d1:86:5c:05:76:8e:
                    8e:f9:4b:bc:a4:8b:39:6d:8e:74:11:29:d5:a1:89:
                    20:f2:f1:b3:cb:0d:cd:bb:75:9e:1b:e2:49:96:89:
                    54:16:8d:3e:3b:e8:f9:6d:ce:fb:0e:35:79:98:9f:
                    19:43:02:c2:52:09:23:de:f2:ef:72:31:b2:15:61:
                    8c:54:00:3f:67:e2:6c:cd:27:45:b9:9b:8f:8c:de:
                    0b:69:51:c9:f0:87:72:65:30:20:7c:3f:8a:4a:93:
                    91:f5:ee:d1:2a:22:7f:2b:a0:35:a0:b0:bb:1c:b0:
                    dc:3f:bd:09:07:bf:24:5d:bb:fb:7d:bd:f8:44:5d:
                    30:be:44:77:7d:49:b6:8c:89:1b:71:5c:19:5f:4f:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:98:1D:C3:EE:79:DE:70:A4:52:20:0B:5C:E4:B6:85:8D:5E:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB02034A50F11F1B01573F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.8.0/22
                  154.194.16.0-154.194.27.255
                  154.194.196.0/22
                  154.194.216.0/21
                  154.198.128.0/19
                  154.202.144.0/20
                  154.202.192.0/18
                  154.213.168.0/21
                  154.220.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:8b:09:3d:44:16:0f:50:41:a5:46:2f:ca:44:2c:3c:b8:
         53:48:07:64:8f:5e:18:9a:0c:52:d6:dc:5c:3f:2a:1d:68:66:
         06:ae:16:46:c5:4f:5a:20:76:9e:d2:ce:e4:e8:3f:ae:cc:52:
         20:d2:ab:be:b2:e2:0c:db:9f:a1:f9:43:94:6e:8b:aa:14:31:
         5a:eb:e8:b7:5d:1f:27:1a:43:8d:17:1d:c7:7a:fc:8e:98:ad:
         12:13:10:3d:a1:44:ab:83:ae:ee:5c:8d:98:74:43:7f:6f:17:
         5c:ed:b3:ce:82:08:ba:bf:ad:95:af:fd:53:57:81:d2:ff:e5:
         3a:3b:c4:d8:c2:58:d7:77:77:37:fe:04:8d:9a:67:e3:45:b6:
         9a:d7:04:4d:75:7a:a0:9c:9b:e7:02:b4:4d:f9:71:2b:1a:d8:
         94:f8:c3:21:d3:23:0b:e3:8e:2b:10:f0:42:df:92:20:28:23:
         6c:92:31:f1:6f:b6:85:c3:25:09:70:9e:65:a8:ad:b5:a3:17:
         c8:6a:3b:c9:b5:74:09:41:cb:6a:21:7c:16:3b:15:3c:ce:9d:
         f6:0c:5f:1e:95:2b:df:02:a5:78:e4:d1:79:44:00:21:61:7e:
         d8:4c:84:10:8e:c1:42:92:75:29:6c:5f:e9:f1:2d:b8:d2:44:
         8e:3a:c5:b4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAeRFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMxMDc0MjEwWhcNMjYwOTExMDc0MjEwWjAYMRYw
FAYDVQQDEw02YTk1MzA1Ny1mY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs7Y1Hdfay4Xs8aHsfdjoXDvdS+U3bn5oYX41NtmrtVHXJogFy/ANcKhI
CFkSaDS1FIvuC+KEEnqZURqVRiPiVrnbuGuj6a21L/gX+O/nTZl9ojSgQg1GK8Z+
p7pQ+8ncL7PDb1WSkDsDXbUpjFjX8c7RhlwFdo6O+Uu8pIs5bY50ESnVoYkg8vGz
yw3Nu3WeG+JJlolUFo0+O+j5bc77DjV5mJ8ZQwLCUgkj3vLvcjGyFWGMVAA/Z+Js
zSdFuZuPjN4LaVHJ8IdyZTAgfD+KSpOR9e7RKiJ/K6A1oLC7HLDcP70JB78kXbv7
fb34RF0wvkR3fUm2jIkbcVwZX0+C2QIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFKER
mB3D7nnecKRSIAtc5LaFjV6QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QkIwMjAzNEE1MEYxMUYxQjAxNTczRjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCmsIIMAwDBASawhADBAKa
whgDBAKawsQDBAOawtgDBAWaxoADBASaypADBAaaysADBAOa1agDBAaa3IAwDQYJ
KoZIhvcNAQELBQADggEBADnPiwk9RBYPUEGlRi/KRCw8uFNIB2SPXhiaDFLW3Fw/
Kh1oZgauFkbFT1ogdp7SzuToP67MUiDSq76y4gzbn6H5Q5Rui6oUMVrr6LddHyca
Q40XHcd6/I6YrRITED2hRKuDru5cjZh0Q39vF1zts86CCLq/rZWv/VNXgdL/5To7
xNjCWNd3dzf+BI2aZ+NFtprXBE11eqCcm+cCtE35cSsa2JT4wyHTIwvjjisQ8ELf
kiAoI2ySMfFvtoXDJQlwnmWorbWjF8hqO8m1dAlBy2ohfBY7FTzOnfYMXx6VK98C
pXjk0XlEACFhfthMhBCOwUKSdSlsX+nxLbjSRI46xbQ=
-----END CERTIFICATE-----