Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E9DC6A9BA911F1A25719BCCE1D38B0.roa
File:                     87E9DC6A9BA911F1A25719BCCE1D38B0.roa (raw, json)
Hash identifier:          dEtgu0jqVCZT9HxQWlNvRo3a0qh19C4qwdoOmFMe+iY=
Subject key identifier:   0C:B6:41:DF:F8:FF:1A:62:27:2D:77:85:F0:9D:F3:3F:AB:47:9D:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E9DC6A9BA911F1A25719BCCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:39:46 +0000
ROA not before:           Wed 19 Aug 2026 08:39:42 +0000
ROA not after:            Mon 28 Sep 2026 08:39:42 +0000
asID:                     211826
IP address blocks:        154.194.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122861 (0x1dfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 08:39:42 2026 GMT
            Not After : Sep 28 08:39:42 2026 GMT
        Subject: CN=6a856bd2-8848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:e9:db:20:9b:87:20:a8:56:1b:6a:67:61:
                    4a:ed:f5:d1:cc:c3:88:56:6a:58:8c:89:03:32:5c:
                    b0:da:35:7b:e1:fe:df:80:9b:a4:fe:c6:82:04:0b:
                    2f:7f:dd:f8:97:bc:87:48:48:17:a8:d3:b3:31:59:
                    15:ae:fb:49:2a:7e:0d:1f:1e:b0:75:fc:d8:68:e2:
                    a3:b5:66:39:9e:ec:06:64:2e:9d:0d:d4:d3:13:5a:
                    f2:55:65:43:7e:6f:b5:df:9b:59:3b:f2:f6:30:2c:
                    de:72:bc:a5:e0:49:2f:2c:c5:f0:d4:44:35:57:59:
                    73:59:87:29:bd:d6:3d:de:21:bc:74:18:a1:f7:73:
                    b1:0a:46:70:e2:fa:eb:1a:73:3b:95:8d:eb:e6:be:
                    6f:dd:36:54:0b:69:f6:d8:c6:2b:14:e3:97:dc:51:
                    f7:99:0b:30:b3:39:b4:72:3c:d0:23:0e:85:53:46:
                    4d:6c:9d:a3:71:2b:be:6c:4b:8a:88:10:1b:fd:b8:
                    dc:85:88:ff:f0:e5:bc:a9:57:d9:5c:16:83:25:82:
                    6d:bc:54:03:49:fc:f6:e4:98:c8:c2:4f:94:11:22:
                    ad:ad:39:d0:0d:37:02:b2:c3:64:f4:6a:a4:9b:c7:
                    0d:4d:fe:33:97:e7:25:02:db:18:17:54:44:98:4c:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:41:DF:F8:FF:1A:62:27:2D:77:85:F0:9D:F3:3F:AB:47:9D:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E9DC6A9BA911F1A25719BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:7c:ac:b4:09:9f:f5:a8:a1:1d:49:3c:b1:a8:53:cf:9c:
         66:2b:99:ac:18:49:a5:ef:d7:56:69:e9:d7:72:7f:6c:ad:66:
         4a:b1:4d:46:1d:03:94:90:a4:d2:19:a2:08:43:fe:f7:50:19:
         83:37:e9:a1:cb:7a:af:24:ee:74:c7:ab:77:01:5d:23:ae:5d:
         ba:3f:1d:86:14:55:07:d8:30:f3:0a:43:f7:85:6a:02:1c:41:
         a5:37:7f:5f:cd:8d:e8:47:f5:4a:65:08:e6:20:1c:8e:08:c5:
         1a:52:d1:68:c0:89:bb:02:b0:0c:b1:d0:b9:4c:54:90:ef:09:
         de:76:ec:22:6e:31:e6:36:87:33:73:bf:a1:97:63:b6:b1:a0:
         d7:c6:ed:35:06:1a:fa:b2:29:35:c8:5b:04:c6:39:31:19:a8:
         a2:4b:88:82:06:cb:fa:1b:68:77:5a:73:82:f1:92:d0:79:cf:
         20:f2:ce:36:b1:f6:ed:79:5e:9d:6b:e6:7a:f3:6f:9b:e9:41:
         49:0f:30:64:e1:ce:8f:5e:1a:13:53:af:83:0e:a4:ca:f5:9d:
         84:92:0e:ee:c4:3a:84:c5:dc:be:6d:e8:4e:1d:97:0f:e6:0a:
         75:76:e0:f1:f8:ef:0d:98:a5:1c:e4:c2:64:f7:7d:5a:80:59:
         03:88:0f:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd/tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE5MDgzOTQyWhcNMjYwOTI4MDgzOTQyWjAYMRYw
FAYDVQQDEw02YTg1NmJkMi04ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAykXp2yCbhyCoVhtqZ2FK7fXRzMOIVmpYjIkDMlyw2jV74f7fgJuk/saC
BAsvf934l7yHSEgXqNOzMVkVrvtJKn4NHx6wdfzYaOKjtWY5nuwGZC6dDdTTE1ry
VWVDfm+135tZO/L2MCzecryl4EkvLMXw1EQ1V1lzWYcpvdY93iG8dBih93OxCkZw
4vrrGnM7lY3r5r5v3TZUC2n22MYrFOOX3FH3mQswszm0cjzQIw6FU0ZNbJ2jcSu+
bEuKiBAb/bjchYj/8OW8qVfZXBaDJYJtvFQDSfz25JjIwk+UESKtrTnQDTcCssNk
9Gqkm8cNTf4zl+clAtsYF1REmEz3VQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAy2
Qd/4/xpiJy13hfCd8z+rR52JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84N0U5REM2QTlCQTkxMUYxQTI1NzE5QkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI3MA0GCSqGSIb3DQEB
CwUAA4IBAQCC7HystAmf9aihHUk8sahTz5xmK5msGEml79dWaenXcn9srWZKsU1G
HQOUkKTSGaIIQ/73UBmDN+mhy3qvJO50x6t3AV0jrl26Px2GFFUH2DDzCkP3hWoC
HEGlN39fzY3oR/VKZQjmIByOCMUaUtFowIm7ArAMsdC5TFSQ7wneduwibjHmNocz
c7+hl2O2saDXxu01Bhr6sik1yFsExjkxGaiiS4iCBsv6G2h3WnOC8ZLQec8g8s42
sfbteV6da+Z682+b6UFJDzBk4c6PXhoTU6+DDqTK9Z2Ekg7uxDqExdy+behOHZcP
5gp1duDx+O8NmKUc5MJk931agFkDiA/f
-----END CERTIFICATE-----