Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957B6D22C15F11F19378981BCF1D38B0.roa
File:                     957B6D22C15F11F19378981BCF1D38B0.roa (raw, json)
Hash identifier:          D/aZiRU2Kc2GzSLQgMIG56PSWqaf21Eox3h3MgzXGVo=
Subject key identifier:   71:EE:90:A5:B6:5B:1E:16:B4:55:45:11:D4:66:8F:B6:7C:7C:BC:E6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957B6D22C15F11F19378981BCF1D38B0.roa
Signing time:             Tue 06 Oct 2026 08:26:10 +0000
ROA not before:           Tue 06 Oct 2026 08:26:06 +0000
ROA not after:            Thu 12 Nov 2026 08:26:06 +0000
asID:                     328608
IP address blocks:        154.88.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126071 (0x1ec77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 08:26:06 2026 GMT
            Not After : Nov 12 08:26:06 2026 GMT
        Subject: CN=6ac4b0a2-804f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:06:96:1e:7c:55:39:d1:f1:55:fb:c1:da:
                    10:94:15:75:5d:c2:53:05:0f:d7:92:1b:d0:b6:c1:
                    89:98:40:15:55:d1:2c:9e:3e:8e:c8:5c:6f:2c:ef:
                    0d:66:45:4c:b6:47:0c:95:93:1d:14:98:bd:cd:85:
                    7b:e6:ad:89:1f:7f:4c:8c:b7:1f:ad:ce:d4:0a:d3:
                    ce:38:51:93:63:57:f3:c3:c9:e6:c2:a0:4a:ee:99:
                    bd:0d:db:6a:01:8f:41:11:44:0a:f2:56:0e:c5:28:
                    77:e8:d5:d5:5a:c9:68:cb:5a:d6:0f:4b:80:6c:4d:
                    30:bc:d7:2d:12:2f:cc:1b:87:8f:f3:bb:39:33:0a:
                    6c:57:c6:c3:35:e4:cf:07:3a:44:40:2b:d7:c9:02:
                    cf:f1:0b:19:25:07:1c:b1:08:be:10:34:49:1b:49:
                    5c:2d:18:c8:41:47:e3:1e:de:1f:1e:1a:4a:3b:77:
                    96:11:e5:67:b8:22:d9:5a:94:17:92:11:50:1a:a4:
                    7c:52:0d:c4:be:64:a4:69:72:1f:9c:d9:8e:5e:9b:
                    ef:47:82:00:75:e1:ea:8a:dc:38:22:11:1f:0e:42:
                    04:ff:55:12:b0:b1:c8:85:06:5b:08:f6:c3:70:58:
                    e1:8c:06:2e:8d:69:0d:bb:9f:38:24:50:6d:4c:1f:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:90:A5:B6:5B:1E:16:B4:55:45:11:D4:66:8F:B6:7C:7C:BC:E6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957B6D22C15F11F19378981BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:4a:31:7a:83:70:be:e6:98:f9:46:f4:06:29:1c:33:1f:
         2c:28:28:a8:f6:bd:81:3a:9b:28:47:15:c9:26:e0:9f:ca:50:
         3a:da:34:b7:d5:50:36:19:50:bd:63:26:3b:0e:09:56:9e:3f:
         d8:59:d9:f1:75:90:86:d3:1f:51:61:52:fa:89:c2:b7:c1:8a:
         2e:2d:ee:e7:78:cd:5e:aa:47:f0:d4:6d:44:bb:38:2f:9b:ad:
         94:75:f1:40:0d:07:80:a4:73:f6:c3:d2:9d:39:5b:1c:03:90:
         cc:d6:4d:a2:6f:20:13:a0:29:e3:21:88:0d:a7:1c:d8:2a:80:
         cb:c2:9e:f2:ba:9d:7f:3c:06:f8:be:14:58:3b:3a:4d:56:ab:
         39:e3:81:d7:5c:b4:df:db:d5:7b:e6:b6:be:25:fd:e8:aa:88:
         27:60:1c:3c:24:f8:de:06:62:3b:e9:c4:b7:a9:e2:4e:28:06:
         ec:9c:ee:b0:eb:8c:fc:8d:24:d3:f0:6d:11:38:ad:a8:3d:db:
         4f:3f:20:d8:a5:f7:07:eb:35:a7:6f:b2:c8:e3:0f:4c:47:8e:
         da:7b:98:bb:9b:cd:cd:7b:06:34:70:2e:55:29:3d:1d:40:e6:
         5d:58:80:53:87:99:3d:0a:5b:d4:6b:80:a8:5f:bc:21:ea:fe:
         4f:6a:97:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAex3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA2MDgyNjA2WhcNMjYxMTEyMDgyNjA2WjAYMRYw
FAYDVQQDEw02YWM0YjBhMi04MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx/UGlh58VTnR8VX7wdoQlBV1XcJTBQ/XkhvQtsGJmEAVVdEsnj6OyFxv
LO8NZkVMtkcMlZMdFJi9zYV75q2JH39MjLcfrc7UCtPOOFGTY1fzw8nmwqBK7pm9
DdtqAY9BEUQK8lYOxSh36NXVWsloy1rWD0uAbE0wvNctEi/MG4eP87s5MwpsV8bD
NeTPBzpEQCvXyQLP8QsZJQccsQi+EDRJG0lcLRjIQUfjHt4fHhpKO3eWEeVnuCLZ
WpQXkhFQGqR8Ug3EvmSkaXIfnNmOXpvvR4IAdeHqitw4IhEfDkIE/1USsLHIhQZb
CPbDcFjhjAYujWkNu584JFBtTB+ArQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHHu
kKW2Wx4WtFVFEdRmj7Z8fLzmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NTdCNkQyMkMxNUYxMUYxOTM3ODk4MUJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlgAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9hUoxeoNwvuaY+Ub0BikcMx8sKCio9r2BOpsoRxXJJuCfylA62jS3
1VA2GVC9YyY7DglWnj/YWdnxdZCG0x9RYVL6icK3wYouLe7neM1eqkfw1G1Euzgv
m62UdfFADQeApHP2w9KdOVscA5DM1k2ibyAToCnjIYgNpxzYKoDLwp7yup1/PAb4
vhRYOzpNVqs544HXXLTf29V75ra+Jf3oqognYBw8JPjeBmI76cS3qeJOKAbsnO6w
64z8jSTT8G0ROK2oPdtPPyDYpfcH6zWnb7LI4w9MR47ae5i7m83NewY0cC5VKT0d
QOZdWIBTh5k9ClvUa4CoX7wh6v5Papey
-----END CERTIFICATE-----