Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F035BCC48D11F182895EEFCE1D38B0.roa
File:                     96F035BCC48D11F182895EEFCE1D38B0.roa (raw, json)
Hash identifier:          gK1hyIDqwNbZjA5G4wrXEZEuMBbTc1rdq3ne2ZfhoN8=
Subject key identifier:   FB:F8:AF:DA:16:1A:21:35:C0:2A:AF:F2:F7:23:6B:44:8A:09:45:CB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F035BCC48D11F182895EEFCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 09:33:03 +0000
ROA not before:           Sat 10 Oct 2026 09:32:58 +0000
ROA not after:            Tue 17 Nov 2026 09:32:58 +0000
asID:                     22773
IP address blocks:        154.82.3.0/24 maxlen: 24
                          154.82.4.0/24 maxlen: 24
                          154.82.5.0/24 maxlen: 24
                          154.82.6.0/24 maxlen: 24
                          154.82.7.0/24 maxlen: 24
                          154.82.8.0/24 maxlen: 24
                          154.82.9.0/24 maxlen: 24
                          154.82.10.0/24 maxlen: 24
                          154.82.11.0/24 maxlen: 24
                          154.82.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126271 (0x1ed3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 09:32:58 2026 GMT
            Not After : Nov 17 09:32:58 2026 GMT
        Subject: CN=6aca064f-8f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:b3:83:81:d5:83:ec:e1:dd:bf:6d:14:9d:
                    c0:95:0e:37:cc:7d:d2:64:a4:14:01:09:68:2c:41:
                    68:ff:b2:56:32:89:7c:11:a2:10:45:d7:34:f2:1c:
                    59:a3:2b:30:f3:c8:fc:4b:1c:9f:fc:73:4a:a3:f6:
                    16:bb:26:9e:61:95:45:51:2f:56:7f:62:ee:97:49:
                    6a:7f:ed:4a:ed:f7:05:6e:fb:3c:78:5a:15:72:e9:
                    6f:5a:9f:60:55:36:93:b1:cf:e6:4d:83:a7:f3:9f:
                    d8:bf:76:bb:53:29:61:62:cd:0c:33:52:00:6b:30:
                    96:d8:ee:59:71:b5:80:13:ef:a2:71:13:49:47:b7:
                    86:d0:2d:46:f5:95:ce:b1:89:03:8a:48:e8:98:81:
                    bc:21:d6:2e:9c:99:61:61:52:c1:02:6f:0c:32:5a:
                    9e:90:ad:4b:55:36:c4:28:13:52:cd:24:7f:f7:e1:
                    d7:7e:5a:b4:41:12:c6:cb:9f:de:3d:b5:5c:b8:e4:
                    46:fe:31:25:7e:48:ec:7c:fd:1e:33:a2:80:14:71:
                    c4:c3:29:1f:b5:51:4d:19:6e:78:92:24:6a:dd:64:
                    01:61:87:02:8f:69:dc:cc:d1:f2:35:51:c4:d0:e5:
                    70:14:14:a7:39:98:e9:b1:13:da:60:33:a1:47:8e:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:AF:DA:16:1A:21:35:C0:2A:AF:F2:F7:23:6B:44:8A:09:45:CB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F035BCC48D11F182895EEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.3.0-154.82.12.255

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:30:5a:5c:80:63:2c:58:9d:47:f7:9f:1d:bb:26:d3:f3:
         7a:a0:be:c2:ca:62:11:bb:c2:02:84:68:de:0d:f7:f1:06:85:
         18:9f:11:e0:81:9e:f5:b3:95:02:4c:f2:b1:c3:c8:8e:fc:59:
         6c:71:9f:20:b7:2b:d1:ea:14:f2:97:38:a7:bb:eb:f4:0c:c5:
         cd:47:b7:3c:80:ef:4a:4c:c0:ac:40:ba:38:00:0e:6a:a6:a3:
         e4:0b:d0:55:8d:f6:ec:8a:b5:04:56:04:75:35:a5:aa:04:5e:
         ae:38:53:43:48:1f:1f:dd:15:0b:42:5d:d8:3f:c5:d9:f2:37:
         b0:2b:d1:cc:7a:e0:a7:ea:f8:be:8f:91:48:42:69:df:e9:5f:
         7d:82:80:62:dc:77:25:45:0b:a7:e3:9c:f6:42:67:52:f3:f6:
         e8:8e:84:aa:c3:f9:6a:d5:d8:8a:40:95:2f:b0:4f:fb:db:f7:
         65:92:46:a6:de:94:81:13:08:dd:02:80:64:5f:11:da:87:ea:
         cf:47:c7:03:3f:c1:e4:7a:20:a0:ee:ab:b2:67:26:f4:88:8f:
         6c:c1:a5:5d:3d:5c:9d:6e:1c:9d:86:bc:2d:63:c0:c5:67:f0:
         43:f9:31:c4:47:a5:64:1f:a7:bf:47:cb:61:f9:a7:6a:87:4c:
         36:c0:71:ea
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAe0/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDEwMDkzMjU4WhcNMjYxMTE3MDkzMjU4WjAYMRYw
FAYDVQQDEw02YWNhMDY0Zi04ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1zezg4HVg+zh3b9tFJ3AlQ43zH3SZKQUAQloLEFo/7JWMol8EaIQRdc0
8hxZoysw88j8Sxyf/HNKo/YWuyaeYZVFUS9Wf2Lul0lqf+1K7fcFbvs8eFoVculv
Wp9gVTaTsc/mTYOn85/Yv3a7UylhYs0MM1IAazCW2O5ZcbWAE++icRNJR7eG0C1G
9ZXOsYkDikjomIG8IdYunJlhYVLBAm8MMlqekK1LVTbEKBNSzSR/9+HXflq0QRLG
y5/ePbVcuORG/jElfkjsfP0eM6KAFHHEwykftVFNGW54kiRq3WQBYYcCj2nczNHy
NVHE0OVwFBSnOZjpsRPaYDOhR443xwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPv4
r9oWGiE1wCqv8vcja0SKCUXLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NkYwMzVCQ0M0OEQxMUYxODI4OTVFRUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUgMDBACaUgwwDQYJ
KoZIhvcNAQELBQADggEBAKsPMFpcgGMsWJ1H958duybT83qgvsLKYhG7wgKEaN4N
9/EGhRifEeCBnvWzlQJM8rHDyI78WWxxnyC3K9HqFPKXOKe76/QMxc1HtzyA70pM
wKxAujgADmqmo+QL0FWN9uyKtQRWBHU1paoEXq44U0NIHx/dFQtCXdg/xdnyN7Ar
0cx64Kfq+L6PkUhCad/pX32CgGLcdyVFC6fjnPZCZ1Lz9uiOhKrD+WrV2IpAlS+w
T/vb92WSRqbelIETCN0CgGRfEdqH6s9HxwM/weR6IKDuq7JnJvSIj2zBpV09XJ1u
HJ2GvC1jwMVn8EP5McRHpWQfp79Hy2H5p2qHTDbAceo=
-----END CERTIFICATE-----