Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9AD48963611F1BE5506ABCE1D38B0.roa
File:                     8CF9AD48963611F1BE5506ABCE1D38B0.roa (raw, json)
Hash identifier:          0ZDF/p4wEyC0tJCRKKy9FNMBipoQzfcf0Hx7O9pSf0k=
Subject key identifier:   A1:69:FD:FC:E8:56:BA:C9:0F:EC:9F:63:3A:51:CB:07:61:25:95:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9AD48963611F1BE5506ABCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:14:06 +0000
ROA not before:           Wed 12 Aug 2026 10:14:03 +0000
ROA not after:            Sun 12 Aug 2029 10:14:03 +0000
asID:                     17561
IP address blocks:        154.86.193.0/24 maxlen: 24
                          154.86.194.0/24 maxlen: 24
                          154.86.195.0/24 maxlen: 24
                          154.86.196.0/24 maxlen: 24
                          154.86.197.0/24 maxlen: 24
                          154.86.198.0/24 maxlen: 24
                          154.86.199.0/24 maxlen: 24
                          154.86.200.0/24 maxlen: 24
                          154.86.201.0/24 maxlen: 24
                          154.86.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122469 (0x1de65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:14:03 2026 GMT
            Not After : Aug 12 10:14:03 2029 GMT
        Subject: CN=6a7c476e-b3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:49:f4:0e:97:cf:b8:9c:11:eb:63:4a:5b:
                    f6:30:b0:f8:83:30:a0:1b:76:c5:e7:f6:98:21:8e:
                    07:4f:9c:4f:3e:9c:60:1a:46:d6:8f:69:05:00:69:
                    ab:02:9e:8f:61:ce:b7:5c:20:d1:5a:f7:27:49:b9:
                    29:a7:22:a3:88:62:9e:38:6b:1e:d8:35:60:c9:f7:
                    5c:00:ed:6c:dc:d9:2a:87:2f:26:ae:51:df:29:b4:
                    1e:36:60:1d:b6:ac:7b:b6:3c:ae:37:2b:e2:27:b0:
                    1e:7e:82:46:15:1c:cb:72:32:6e:26:4a:9f:0e:be:
                    10:a4:58:4f:cc:10:41:6f:73:c8:c5:38:a4:50:ea:
                    35:cc:7f:e6:28:fb:c7:e1:cf:6d:c9:29:fd:95:3a:
                    ff:36:0d:be:c7:8a:6d:51:9b:24:31:98:a6:52:0f:
                    4f:0b:e8:a3:9b:1c:2e:79:9a:85:29:72:86:c0:69:
                    e9:02:f8:6f:24:e5:d5:c7:43:0b:0e:2d:f6:06:b7:
                    b6:a5:09:b8:17:fb:20:b0:12:b3:b7:67:fb:1c:9e:
                    e1:8b:ed:2b:15:34:f4:97:b7:53:25:5f:db:72:61:
                    14:3a:31:31:63:df:40:ae:11:10:c5:2a:55:cf:34:
                    95:39:9d:13:02:1f:72:61:ad:af:de:c0:35:4a:9d:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:FD:FC:E8:56:BA:C9:0F:EC:9F:63:3A:51:CB:07:61:25:95:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9AD48963611F1BE5506ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.193.0-154.86.202.255

    Signature Algorithm: sha256WithRSAEncryption
         15:98:a8:64:7b:14:f0:84:58:99:1e:d4:5a:47:58:6a:0b:d0:
         5d:9a:c2:2a:c4:14:2e:1e:ea:df:e8:4f:11:f9:fc:05:c0:da:
         f1:5a:da:bc:54:27:78:a3:0e:84:f4:08:e6:08:1d:ad:16:0d:
         0c:11:bd:48:a1:17:d5:a5:2a:c2:23:3b:ea:4d:89:b6:23:20:
         94:0e:77:7b:7e:fd:28:be:ef:9f:4e:81:29:15:06:5d:cf:8e:
         46:7d:8c:9d:65:32:4a:0e:e7:92:a4:f3:aa:35:19:0f:5d:f7:
         e3:15:ba:22:24:41:cf:b0:68:81:20:c0:47:db:e4:66:98:04:
         33:a4:fd:69:7b:dc:06:f9:b1:eb:4b:ca:f3:d5:c4:9d:c3:9a:
         69:b2:bb:1d:35:f1:5b:75:9b:37:8e:24:db:a3:41:21:45:fd:
         bb:35:0f:fb:86:5f:ba:d0:4a:c3:e2:28:31:8c:69:69:9a:f5:
         75:d8:72:61:da:de:88:0c:c3:50:84:84:47:1e:9d:f9:62:f3:
         db:01:2e:ba:0d:db:d5:a7:d4:52:67:76:82:bb:82:55:50:44:
         7e:fd:4d:96:3f:b9:8a:45:e7:18:fb:36:b3:7e:b1:74:fa:88:
         c7:3b:e9:31:c7:1c:a2:b0:9c:e7:5d:f8:66:bf:8b:60:79:5c:
         99:be:c9:05
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAd5lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEyMTAxNDAzWhcNMjkwODEyMTAxNDAzWjAYMRYw
FAYDVQQDEw02YTdjNDc2ZS1iM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5idJ9A6Xz7icEetjSlv2MLD4gzCgG3bF5/aYIY4HT5xPPpxgGkbWj2kF
AGmrAp6PYc63XCDRWvcnSbkppyKjiGKeOGse2DVgyfdcAO1s3Nkqhy8mrlHfKbQe
NmAdtqx7tjyuNyviJ7AefoJGFRzLcjJuJkqfDr4QpFhPzBBBb3PIxTikUOo1zH/m
KPvH4c9tySn9lTr/Ng2+x4ptUZskMZimUg9PC+ijmxwueZqFKXKGwGnpAvhvJOXV
x0MLDi32Bre2pQm4F/sgsBKzt2f7HJ7hi+0rFTT0l7dTJV/bcmEUOjExY99ArhEQ
xSpVzzSVOZ0TAh9yYa2v3sA1Sp1WSwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKFp
/fzoVrrJD+yfYzpRywdhJZWsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Q0Y5QUQ0ODk2MzYxMUYxQkU1NTA2QUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaVsEDBACaVsowDQYJ
KoZIhvcNAQELBQADggEBABWYqGR7FPCEWJke1FpHWGoL0F2awirEFC4e6t/oTxH5
/AXA2vFa2rxUJ3ijDoT0COYIHa0WDQwRvUihF9WlKsIjO+pNibYjIJQOd3t+/Si+
759OgSkVBl3PjkZ9jJ1lMkoO55Kk86o1GQ9d9+MVuiIkQc+waIEgwEfb5GaYBDOk
/Wl73Ab5setLyvPVxJ3Dmmmyux018Vt1mzeOJNujQSFF/bs1D/uGX7rQSsPiKDGM
aWma9XXYcmHa3ogMw1CEhEcenfli89sBLroN29Wn1FJndoK7glVQRH79TZY/uYpF
5xj7NrN+sXT6iMc76THHHKKwnOdd+Ga/i2B5XJm+yQU=
-----END CERTIFICATE-----