Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2874A2A5DB11F1A58740C2CE1D38B0.roa
File:                     7E2874A2A5DB11F1A58740C2CE1D38B0.roa (raw, json)
Hash identifier:          eGF+ZAA1RYlXnfR4rFN99PAPSsOsL0YRhekr/Qd161M=
Subject key identifier:   68:BD:7C:59:78:F3:9E:35:9D:F3:D8:3F:D6:A0:E4:EC:40:8B:46:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E45C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2874A2A5DB11F1A58740C2CE1D38B0.roa
Signing time:             Tue 01 Sep 2026 08:02:36 +0000
ROA not before:           Tue 01 Sep 2026 08:01:07 +0000
ROA not after:            Thu 08 Oct 2026 08:01:07 +0000
asID:                     401362
IP address blocks:        154.197.62.0/24 maxlen: 24
                          154.208.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123996 (0x1e45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  1 08:01:07 2026 GMT
            Not After : Oct  8 08:01:07 2026 GMT
        Subject: CN=6a96869c-6f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:dd:0c:12:4f:2f:45:da:71:1d:c9:63:19:
                    9d:5d:18:9e:d1:52:7d:9e:47:df:41:ef:f1:39:dc:
                    4a:ad:e3:3d:a3:c0:59:8b:55:f1:8c:43:1b:47:95:
                    dd:ca:fe:17:e7:2a:b6:1b:7f:62:10:42:1c:05:d6:
                    65:d9:00:72:41:04:7f:2d:11:df:c8:38:75:e1:8a:
                    b3:b4:e2:4f:61:ff:e1:67:56:4c:19:7d:ca:b7:f8:
                    03:78:4a:c7:c5:ec:38:de:3b:d4:e0:a7:98:ad:01:
                    60:bb:ac:af:81:0e:cc:97:67:d7:16:d7:91:c1:6b:
                    85:f2:46:d3:53:81:42:12:91:bc:bc:03:c6:6a:94:
                    87:e3:f6:63:81:28:88:ef:56:e0:77:71:36:d4:89:
                    1e:62:4f:f4:66:8d:ab:d4:c1:9d:e6:34:f7:68:49:
                    cd:27:4a:83:f1:90:cf:6b:9d:b2:5b:12:a6:a4:27:
                    fe:7c:89:8d:b9:fa:e2:d6:15:bf:ad:db:3e:4e:0e:
                    a3:de:40:c1:2b:a0:3f:08:89:95:e0:17:16:d5:46:
                    90:d0:8c:b8:8b:80:d0:11:ed:a4:6e:68:41:13:46:
                    47:ea:84:3a:23:49:81:8d:cb:ac:f0:5b:b7:87:4f:
                    2a:94:70:8a:77:ee:c7:af:8d:62:ea:84:16:bd:7a:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:7C:59:78:F3:9E:35:9D:F3:D8:3F:D6:A0:E4:EC:40:8B:46:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2874A2A5DB11F1A58740C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.62.0/24
                  154.208.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c7:12:78:b4:1e:4f:5e:b4:84:8e:b5:95:3b:36:dd:a7:be:
         33:66:70:a7:c3:48:2e:7f:6a:61:89:dd:8b:c7:f6:d6:41:16:
         0a:c1:76:e3:9c:9c:cc:e5:cb:8d:00:e0:61:3e:03:93:1c:a8:
         4b:11:9a:a8:ab:ee:fa:db:c2:e2:2e:11:39:aa:c1:89:df:f8:
         d8:0d:18:8f:f7:40:29:b5:31:6b:a8:fd:f1:01:d0:7f:91:c8:
         62:7c:1f:96:25:0f:f3:11:5f:d4:78:56:d5:c7:d6:65:ef:f2:
         44:2d:30:a8:36:48:d5:e3:4f:89:10:d3:65:78:17:e3:89:b9:
         00:00:fd:03:b7:a7:80:a6:12:ca:24:db:a4:d9:16:9a:ff:ee:
         96:30:c8:e9:0f:f7:7b:0b:3c:0f:ef:3c:d5:60:d6:07:a3:b6:
         07:61:08:27:64:1a:00:7d:e2:14:2e:0b:37:b8:44:29:fa:69:
         e9:91:0f:3a:83:25:00:20:97:d0:5c:bc:c9:fd:b1:08:df:be:
         ad:4d:64:3c:3a:62:f0:2f:87:f5:e4:6f:a7:d7:b1:16:b1:f0:
         d4:2c:39:b8:45:ac:f2:af:93:3b:30:a2:5b:56:fc:b4:bc:7e:
         d2:ac:e4:08:81:4f:27:06:d3:38:1e:4c:8a:a9:1f:4a:81:15:
         f6:c4:f6:14
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAeRcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTAxMDgwMTA3WhcNMjYxMDA4MDgwMTA3WjAYMRYw
FAYDVQQDEw02YTk2ODY5Yy02ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvvjdDBJPL0XacR3JYxmdXRie0VJ9nkffQe/xOdxKreM9o8BZi1XxjEMb
R5Xdyv4X5yq2G39iEEIcBdZl2QByQQR/LRHfyDh14YqztOJPYf/hZ1ZMGX3Kt/gD
eErHxew43jvU4KeYrQFgu6yvgQ7Ml2fXFteRwWuF8kbTU4FCEpG8vAPGapSH4/Zj
gSiI71bgd3E21IkeYk/0Zo2r1MGd5jT3aEnNJ0qD8ZDPa52yWxKmpCf+fImNufri
1hW/rds+Tg6j3kDBK6A/CImV4BcW1UaQ0Iy4i4DQEe2kbmhBE0ZH6oQ6I0mBjcus
8Fu3h08qlHCKd+7Hr41i6oQWvXp2KQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGi9
fFl48541nfPYP9ag5OxAi0b0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTI4NzRBMkE1REIxMUYxQTU4NzQwQzJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsU+AwQAmtB0MA0GCSqG
SIb3DQEBCwUAA4IBAQCjxxJ4tB5PXrSEjrWVOzbdp74zZnCnw0guf2phid2Lx/bW
QRYKwXbjnJzM5cuNAOBhPgOTHKhLEZqoq+7628LiLhE5qsGJ3/jYDRiP90AptTFr
qP3xAdB/kchifB+WJQ/zEV/UeFbVx9Zl7/JELTCoNkjV40+JENNleBfjibkAAP0D
t6eAphLKJNuk2Raa/+6WMMjpD/d7CzwP7zzVYNYHo7YHYQgnZBoAfeIULgs3uEQp
+mnpkQ86gyUAIJfQXLzJ/bEI376tTWQ8OmLwL4f15G+n17EWsfDULDm4Razyr5M7
MKJbVvy0vH7SrOQIgU8nBtM4HkyKqR9KgRX2xPYU
-----END CERTIFICATE-----