Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/963FA0F6962211F1BB580FB3CE1D38B0.roa
File:                     963FA0F6962211F1BB580FB3CE1D38B0.roa (raw, json)
Hash identifier:          48A1uLDlPEdTDPKh85ayuKhr9kR6SK6Is8cFACqiNgU=
Subject key identifier:   C1:20:B2:31:94:FD:58:F3:9D:44:12:32:11:2E:4E:DF:0C:3D:5D:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/963FA0F6962211F1BB580FB3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:51:12 +0000
ROA not before:           Wed 12 Aug 2026 07:51:08 +0000
ROA not after:            Sat 19 Sep 2026 07:51:08 +0000
asID:                     11404
IP address blocks:        154.83.160.0/20 maxlen: 24
                          154.89.240.0/20 maxlen: 24
                          154.90.80.0/20 maxlen: 24
                          154.90.96.0/19 maxlen: 24
                          154.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122430 (0x1de3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 07:51:08 2026 GMT
            Not After : Sep 19 07:51:08 2026 GMT
        Subject: CN=6a7c25f0-94ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:2b:a7:a9:23:d9:93:c1:cb:dd:82:06:35:
                    68:e3:61:2f:b4:20:65:d1:fa:35:08:75:6f:59:a6:
                    2d:b4:24:83:a7:9a:79:84:7f:8f:82:5b:26:c7:49:
                    f6:e5:9c:87:08:f4:db:cf:7a:38:a4:92:4d:c8:cd:
                    5e:54:36:e2:08:17:09:05:99:7a:60:89:c9:7b:88:
                    28:b5:46:b6:57:82:e6:94:6d:12:8d:0a:dd:ad:1e:
                    59:fe:10:07:c5:55:3a:0e:c4:4b:3d:75:d1:f7:b1:
                    24:8d:2c:4c:81:09:48:39:66:f4:a6:73:79:b5:be:
                    1e:8f:62:15:88:3e:1c:ef:30:24:d8:e5:aa:fb:34:
                    55:d4:ac:df:05:9b:cf:74:0e:29:62:0a:dc:8b:f7:
                    60:3f:fe:4c:6d:78:f2:31:54:5e:24:b6:56:27:49:
                    eb:a3:11:6d:a9:2a:f3:7a:27:cc:1a:90:fa:bf:4b:
                    db:dd:9c:31:7a:94:5c:81:15:18:ef:70:2e:d3:74:
                    ac:88:3f:99:87:f6:da:8f:9d:ab:32:8e:34:7f:f8:
                    5a:69:51:2e:6d:ca:d4:e1:2a:f6:1c:3b:83:bf:49:
                    18:b8:eb:11:97:ca:bf:b5:06:37:cc:64:ba:36:59:
                    15:7d:23:f6:5c:08:7c:e8:8d:04:3a:31:b9:91:52:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:B2:31:94:FD:58:F3:9D:44:12:32:11:2E:4E:DF:0C:3D:5D:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/963FA0F6962211F1BB580FB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.160.0/20
                  154.89.240.0/20
                  154.90.80.0-154.90.127.255
                  154.92.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:3e:cd:58:dc:bf:6e:c2:92:d3:f0:68:74:d1:b2:fb:1b:46:
         ae:24:3e:e9:16:ea:0f:83:ee:59:c6:8e:e5:a2:b7:a8:c6:ca:
         bc:4e:ff:97:d7:07:c0:bf:6a:39:33:c1:54:9c:fc:1b:24:95:
         d5:40:1e:a3:ef:12:cd:fb:de:85:a3:b5:e3:7b:0b:11:49:c6:
         26:5c:93:4a:60:37:a7:fd:96:1f:21:86:48:08:9b:a4:5c:f0:
         1b:7e:ec:39:8c:9b:d9:1e:0f:7d:18:9d:dd:32:47:5f:0e:08:
         ff:15:94:38:e0:f6:6e:09:5e:a8:8f:cb:82:1b:7b:bf:95:48:
         29:b9:bf:69:28:32:08:74:be:4a:38:b3:30:a3:82:14:9a:1e:
         e2:8f:57:9e:68:62:a8:b5:8f:00:83:a1:2d:8e:17:e0:ca:69:
         c3:b9:e4:71:9b:f1:34:c7:62:bd:6a:ac:c1:da:36:fc:ea:e0:
         04:31:d1:9b:75:c3:83:85:49:08:26:6f:35:7e:d7:9c:87:20:
         28:19:d5:6e:a0:ee:21:b8:41:67:f4:2d:79:7d:b5:3a:5b:f5:
         1d:de:bd:33:cc:66:63:c4:1e:09:0b:ff:50:9d:2b:b9:19:f1:
         9b:9a:48:da:65:c8:84:32:fd:8b:59:1d:56:03:1d:70:b9:d0:
         b2:f6:50:c8
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAd4+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEyMDc1MTA4WhcNMjYwOTE5MDc1MTA4WjAYMRYw
FAYDVQQDEw02YTdjMjVmMC05NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxGIrp6kj2ZPBy92CBjVo42EvtCBl0fo1CHVvWaYttCSDp5p5hH+Pglsm
x0n25ZyHCPTbz3o4pJJNyM1eVDbiCBcJBZl6YInJe4gotUa2V4LmlG0SjQrdrR5Z
/hAHxVU6DsRLPXXR97EkjSxMgQlIOWb0pnN5tb4ej2IViD4c7zAk2OWq+zRV1Kzf
BZvPdA4pYgrci/dgP/5MbXjyMVReJLZWJ0nroxFtqSrzeifMGpD6v0vb3ZwxepRc
gRUY73Au03SsiD+Zh/baj52rMo40f/haaVEubcrU4Sr2HDuDv0kYuOsRl8q/tQY3
zGS6NlkVfSP2XAh86I0EOjG5kVJHVwIDAQABo4ICvzCCArswHQYDVR0OBBYEFMEg
sjGU/VjznUQSMhEuTt8MPV01MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjNGQTBGNjk2MjIxMUYxQkI1ODBGQjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQEmlOgAwQEmlnwMAwDBASa
WlADBAeaWgADBASaXJAwDQYJKoZIhvcNAQELBQADggEBADI+zVjcv27CktPwaHTR
svsbRq4kPukW6g+D7lnGjuWit6jGyrxO/5fXB8C/ajkzwVSc/BskldVAHqPvEs37
3oWjteN7CxFJxiZck0pgN6f9lh8hhkgIm6Rc8Bt+7DmMm9keD30Ynd0yR18OCP8V
lDjg9m4JXqiPy4Ibe7+VSCm5v2koMgh0vko4szCjghSaHuKPV55oYqi1jwCDoS2O
F+DKacO55HGb8TTHYr1qrMHaNvzq4AQx0Zt1w4OFSQgmbzV+15yHICgZ1W6g7iG4
QWf0LXl9tTpb9R3evTPMZmPEHgkL/1CdK7kZ8ZuaSNplyIQy/YtZHVYDHXC50LL2
UMg=
-----END CERTIFICATE-----