Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E1178933511F1B27752F6CE1D38B0.roa
File:                     890E1178933511F1B27752F6CE1D38B0.roa (raw, json)
Hash identifier:          Hq1Fqx9KtpE23kcWaxoorCjmnqlXLqPKNWSTT76zYV4=
Subject key identifier:   29:1A:6D:38:C9:40:4E:3D:15:91:DC:DE:F8:B0:B6:E0:AE:BE:F8:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E1178933511F1B27752F6CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 14:29:17 +0000
ROA not before:           Sat 08 Aug 2026 14:29:13 +0000
ROA not after:            Sun 15 Aug 2027 14:29:13 +0000
asID:                     63199
IP address blocks:        154.89.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122252 (0x1dd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  8 14:29:13 2026 GMT
            Not After : Aug 15 14:29:13 2027 GMT
        Subject: CN=6a773d3d-ee49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:f8:06:25:af:c1:5a:f4:13:20:4a:fd:b4:
                    cd:30:16:3a:c1:38:35:ff:10:b8:74:12:9a:99:cf:
                    b3:27:ec:dc:b0:61:a4:fe:ef:e5:47:d4:2a:8a:71:
                    8a:3d:94:b2:b7:44:be:c2:45:73:4f:4f:bc:18:15:
                    02:ca:4c:49:47:6c:b4:b4:79:ff:5a:41:25:7d:30:
                    78:2d:ed:e4:7c:a0:77:3a:7a:85:15:40:d9:fa:2a:
                    07:9f:ce:7d:20:d0:5e:02:21:65:85:8e:e2:a2:1e:
                    1a:04:68:6e:4a:5c:a5:d0:87:0f:7e:7d:b4:d1:ec:
                    e5:1a:a0:86:24:7b:1a:d9:5c:51:89:d1:2a:07:83:
                    8e:34:e1:25:4f:1a:9c:40:03:96:8e:be:4b:dc:bf:
                    2b:d2:46:9e:61:04:a4:ab:e4:68:dd:92:e7:ea:42:
                    5c:2b:ef:d9:bc:0e:39:f3:95:9e:9c:eb:6a:70:d6:
                    cb:1e:69:5e:ac:7f:86:1d:bf:54:cd:de:dc:37:ba:
                    26:33:05:be:07:81:45:4d:02:a5:ca:68:9a:a6:84:
                    38:34:a7:3e:93:52:88:2a:a1:6e:81:1e:cd:93:9d:
                    d1:f9:c3:28:d6:df:ea:e3:15:34:54:45:8c:75:7f:
                    69:0d:c4:b0:f9:a8:8c:21:7e:03:3b:39:10:0b:a8:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:6D:38:C9:40:4E:3D:15:91:DC:DE:F8:B0:B6:E0:AE:BE:F8:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E1178933511F1B27752F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:61:9c:38:0f:4f:99:33:06:6b:f0:7f:b2:f0:e7:bf:f9:4f:
         2c:04:75:84:21:52:c3:37:df:3b:d4:bb:e5:26:49:66:c1:ef:
         ca:7e:92:60:83:0d:9a:5f:0c:49:1e:d3:bd:2a:d3:9d:eb:87:
         32:81:63:0a:fa:6e:ff:14:86:00:ac:e5:0e:80:04:e9:dd:46:
         69:15:b9:e5:7f:75:fb:fb:cb:d0:fb:f6:75:e9:a3:e0:79:c0:
         e0:e7:85:4d:3b:03:d2:85:68:a9:f1:c9:00:37:39:08:78:d3:
         d6:bb:5e:4e:96:a8:f7:56:cf:b2:91:21:1c:39:19:b4:2c:00:
         a8:c7:d5:66:bd:b0:02:b3:15:fd:23:cc:71:f1:b8:86:92:68:
         ae:29:c0:da:43:ce:fd:ed:f3:aa:5a:f4:f3:4c:72:ed:61:6b:
         47:51:6f:6c:15:88:5c:6b:50:2c:b9:1a:3c:3c:05:d0:3b:58:
         6d:76:2f:d4:8f:32:ec:b9:71:b6:59:04:6a:a9:45:79:bf:f5:
         2d:ba:35:ce:92:75:c9:f5:15:c5:02:16:66:7c:00:c0:cb:e9:
         50:42:97:c6:93:b0:34:c5:34:c8:0b:c7:35:c1:0c:e0:a6:8f:
         93:d6:19:25:bf:d0:c1:3f:0c:6a:c8:ce:ea:43:79:6d:13:82:
         fb:09:e7:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd2MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA4MTQyOTEzWhcNMjcwODE1MTQyOTEzWjAYMRYw
FAYDVQQDEw02YTc3M2QzZC1lZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlhX4BiWvwVr0EyBK/bTNMBY6wTg1/xC4dBKamc+zJ+zcsGGk/u/lR9Qq
inGKPZSyt0S+wkVzT0+8GBUCykxJR2y0tHn/WkElfTB4Le3kfKB3OnqFFUDZ+ioH
n859INBeAiFlhY7ioh4aBGhuSlyl0IcPfn200ezlGqCGJHsa2VxRidEqB4OONOEl
TxqcQAOWjr5L3L8r0kaeYQSkq+Ro3ZLn6kJcK+/ZvA4585WenOtqcNbLHmlerH+G
Hb9Uzd7cN7omMwW+B4FFTQKlymiapoQ4NKc+k1KIKqFugR7Nk53R+cMo1t/q4xU0
VEWMdX9pDcSw+aiMIX4DOzkQC6iwUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCka
bTjJQE49FZHc3viwtuCuvvgTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTBFMTE3ODkzMzUxMUYxQjI3NzUyRjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlmMMA0GCSqGSIb3DQEB
CwUAA4IBAQAWYZw4D0+ZMwZr8H+y8Oe/+U8sBHWEIVLDN9871LvlJklmwe/KfpJg
gw2aXwxJHtO9KtOd64cygWMK+m7/FIYArOUOgATp3UZpFbnlf3X7+8vQ+/Z16aPg
ecDg54VNOwPShWip8ckANzkIeNPWu15Olqj3Vs+ykSEcORm0LACox9VmvbACsxX9
I8xx8biGkmiuKcDaQ8797fOqWvTzTHLtYWtHUW9sFYhca1AsuRo8PAXQO1htdi/U
jzLsuXG2WQRqqUV5v/UtujXOknXJ9RXFAhZmfADAy+lQQpfGk7A0xTTIC8c1wQzg
po+T1hklv9DBPwxqyM7qQ3ltE4L7Ceee
-----END CERTIFICATE-----