Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD191349D4211F193CBF0EDCE1D38B0.roa
File:                     7CD191349D4211F193CBF0EDCE1D38B0.roa (raw, json)
Hash identifier:          fzd4mnQ9PLfn/if9KCpV9slKuvpsgcjo7HqkxNqFwf0=
Subject key identifier:   99:56:92:05:F0:1D:5F:19:C3:73:A1:E8:D1:F9:C9:20:E9:77:13:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD191349D4211F193CBF0EDCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:27:11 +0000
ROA not before:           Fri 21 Aug 2026 09:27:07 +0000
ROA not after:            Sat 28 Nov 2026 09:27:07 +0000
asID:                     40779
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123264 (0x1e180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:27:07 2026 GMT
            Not After : Nov 28 09:27:07 2026 GMT
        Subject: CN=6a8819ef-293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:a2:af:47:82:f3:8e:45:0d:ff:03:ec:b9:
                    8a:f9:fd:14:ce:3f:c4:50:d0:ca:fb:fc:ef:56:9e:
                    a5:a2:7e:d6:58:75:ec:a3:29:ce:8b:cd:66:88:fb:
                    10:26:7a:28:fb:cd:53:9e:7a:0f:f3:5c:18:c3:54:
                    ab:5f:c8:41:09:27:26:f9:cb:6e:87:e8:4c:4d:08:
                    c1:e4:6d:4e:64:c3:39:57:13:ea:8e:f3:82:0e:34:
                    d3:c8:70:74:6c:82:68:8c:9f:c2:dc:d1:1c:d1:73:
                    c6:22:13:1d:a8:cc:67:66:01:7d:62:b4:3e:c3:b1:
                    87:ae:e1:55:2a:fa:7f:ac:a4:a4:e9:da:b9:9b:30:
                    b2:53:bf:90:05:c1:ee:32:67:71:9d:fa:1f:9f:3b:
                    00:f2:bb:9f:0b:92:c8:33:6e:cc:ed:0d:72:91:7f:
                    ba:03:61:16:45:5c:60:5d:50:8c:c3:da:d8:b5:bc:
                    8a:20:27:b6:28:f9:12:f1:5d:89:36:59:54:d1:9f:
                    f5:a2:a2:6f:ac:c7:4d:e5:5c:d4:21:87:7a:7d:cf:
                    f5:18:c2:2a:4d:70:c2:43:5f:25:1e:7b:26:e3:cd:
                    a7:c3:23:45:38:e0:eb:0a:87:a8:99:a2:4d:c0:17:
                    ab:13:46:d1:05:83:0f:8f:f2:b1:53:55:a8:c0:67:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:92:05:F0:1D:5F:19:C3:73:A1:E8:D1:F9:C9:20:E9:77:13:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD191349D4211F193CBF0EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:be:60:6c:4d:f3:e8:2b:ce:a6:3a:aa:18:e0:c3:98:3b:
         11:66:49:0c:73:d5:07:6a:bb:56:65:89:a9:20:a7:30:9b:7e:
         52:ae:3b:5d:61:c1:88:fd:3a:5a:11:40:b5:92:63:d8:25:c3:
         9d:e9:12:e0:57:83:41:d2:f4:e6:af:4a:65:31:27:7a:27:af:
         78:db:a8:03:be:15:bc:4a:ee:1c:59:24:c4:42:cf:f2:7f:86:
         0c:4e:2e:31:c3:15:fd:48:d8:41:a1:8d:e6:39:8f:05:ea:91:
         f2:46:fe:b4:b0:22:ea:67:24:04:1e:b8:f0:f0:02:16:de:60:
         ef:4b:7b:77:0e:04:db:f3:85:c3:4d:b7:09:fa:f5:d1:92:f9:
         5a:fd:90:c8:f7:00:e8:8a:05:a6:93:66:4e:06:e6:6e:78:70:
         ec:a1:d7:a0:18:64:4d:83:60:80:c0:30:67:a2:0b:58:b5:c7:
         0b:d3:2e:5a:ee:16:b3:bf:cc:54:da:4e:45:38:22:8f:04:c4:
         08:0b:4f:d1:a0:6d:a4:fa:6f:aa:f3:d5:89:b0:45:96:d3:c7:
         b3:d0:dc:7d:e1:6b:fc:c9:6f:cb:f2:e3:e2:e6:e6:73:50:9b:
         cb:0f:4d:0b:71:42:de:9b:06:bd:42:53:e4:eb:6c:39:f2:99:
         fe:5f:1f:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeGAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMDkyNzA3WhcNMjYxMTI4MDkyNzA3WjAYMRYw
FAYDVQQDEw02YTg4MTllZi0yOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsDeir0eC845FDf8D7LmK+f0Uzj/EUNDK+/zvVp6lon7WWHXsoynOi81m
iPsQJnoo+81TnnoP81wYw1SrX8hBCScm+ctuh+hMTQjB5G1OZMM5VxPqjvOCDjTT
yHB0bIJojJ/C3NEc0XPGIhMdqMxnZgF9YrQ+w7GHruFVKvp/rKSk6dq5mzCyU7+Q
BcHuMmdxnfofnzsA8rufC5LIM27M7Q1ykX+6A2EWRVxgXVCMw9rYtbyKICe2KPkS
8V2JNllU0Z/1oqJvrMdN5VzUIYd6fc/1GMIqTXDCQ18lHnsm482nwyNFOODrCoeo
maJNwBerE0bRBYMPj/KxU1WowGe21wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJlW
kgXwHV8Zw3Oh6NH5ySDpdxNoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0QxOTEzNDlENDIxMUYxOTNDQkYwRURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQBW9r5gbE3z6CvOpjqqGODDmDsRZkkMc9UHartWZYmpIKcwm35Srjtd
YcGI/TpaEUC1kmPYJcOd6RLgV4NB0vTmr0plMSd6J69426gDvhW8Su4cWSTEQs/y
f4YMTi4xwxX9SNhBoY3mOY8F6pHyRv60sCLqZyQEHrjw8AIW3mDvS3t3DgTb84XD
TbcJ+vXRkvla/ZDI9wDoigWmk2ZOBuZueHDsodegGGRNg2CAwDBnogtYtccL0y5a
7hazv8xU2k5FOCKPBMQIC0/RoG2k+m+q89WJsEWW08ez0Nx94Wv8yW/L8uPi5uZz
UJvLD00LcULemwa9QlPk62w58pn+Xx+d
-----END CERTIFICATE-----