Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98843A8E949711F18572A0D8CE1D38B0.roa
File:                     98843A8E949711F18572A0D8CE1D38B0.roa (raw, json)
Hash identifier:          uGO0kglMuRaraaqVxbAVq+VPQRtQcfgaszXeXAsGjv0=
Subject key identifier:   DC:32:DD:E2:EC:4F:16:ED:6D:C6:9B:3C:70:AB:52:E3:65:BA:30:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98843A8E949711F18572A0D8CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 08:43:45 +0000
ROA not before:           Mon 10 Aug 2026 08:43:41 +0000
ROA not after:            Thu 10 Sep 2026 08:43:41 +0000
asID:                     213169
IP address blocks:        154.83.91.0/24 maxlen: 24
                          154.83.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122340 (0x1dde4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 08:43:41 2026 GMT
            Not After : Sep 10 08:43:41 2026 GMT
        Subject: CN=6a798f41-35ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:5b:9e:a0:98:2d:0f:4f:19:62:d8:7f:b7:
                    c3:51:34:c0:7f:b3:34:bf:95:e2:9d:4c:38:e9:b2:
                    51:54:19:e1:9b:7c:9c:c5:a5:53:5d:91:94:3f:d6:
                    27:95:45:69:76:cd:3a:72:76:04:47:af:1f:a4:03:
                    1a:63:26:29:23:9b:80:08:10:13:94:a9:8a:8c:36:
                    d1:04:00:c0:b9:6b:08:32:1a:3f:f7:84:88:f6:74:
                    ee:c9:2d:e0:e4:b6:f2:bc:a3:e8:74:c1:4e:0a:16:
                    8e:01:dc:b5:92:11:26:15:10:e1:fe:cf:0a:5a:29:
                    3d:0d:36:88:e9:9b:61:84:d5:aa:97:47:98:82:ce:
                    c3:b8:69:19:30:53:e7:c9:0d:04:5a:26:a4:17:af:
                    3b:d8:61:1f:49:1d:4d:e0:97:04:f2:6d:68:77:ec:
                    a2:8f:12:0c:d1:59:be:cf:4f:94:89:c8:61:cc:75:
                    aa:ac:5a:e8:31:1c:c0:ef:de:c2:1a:1d:68:61:47:
                    da:f1:29:7b:6c:00:20:5c:5d:35:37:6d:8c:82:8f:
                    16:8f:86:f9:8e:09:10:df:18:e8:83:e6:0f:07:94:
                    b1:fa:dc:78:47:ad:39:98:79:60:6a:f0:0e:c2:e1:
                    d9:98:3e:1c:f4:63:e2:32:c1:89:c1:76:94:45:45:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:DD:E2:EC:4F:16:ED:6D:C6:9B:3C:70:AB:52:E3:65:BA:30:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98843A8E949711F18572A0D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.91.0-154.83.95.255

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:29:95:a1:8d:60:11:8c:68:7d:a9:a6:f2:2c:b6:34:f6:
         96:f5:3e:e2:d0:4e:10:44:54:45:f2:e7:22:34:40:c4:f2:85:
         ba:a3:10:dd:a1:7f:2c:ae:19:6b:43:99:0f:3a:4b:a6:bd:fd:
         c0:48:d2:cf:5c:08:e4:b5:9f:d1:ec:37:33:fa:15:80:10:3d:
         cd:31:24:26:95:58:ba:40:b0:39:27:b8:f5:21:29:be:e3:bd:
         90:ac:53:a8:ba:6d:52:e9:e7:ee:16:58:26:6b:cc:4b:83:51:
         97:2f:3f:35:53:76:0e:d0:6e:4e:b6:69:98:12:54:38:1c:2f:
         cf:b7:ae:f7:9a:4e:54:a7:a6:18:59:ae:4d:d2:f1:8c:59:b2:
         80:f7:f0:4e:a0:e5:39:8a:9c:f3:f8:50:38:fd:1d:1e:e8:f5:
         b7:a6:1d:df:7e:de:ed:05:85:5d:73:13:3e:01:1f:cd:1a:11:
         45:d3:13:b3:90:9d:77:31:1b:59:6e:38:bb:04:c5:82:a9:ed:
         0c:16:9b:b8:58:9b:5b:fd:b2:db:1b:b7:3b:8d:6e:87:ff:47:
         76:d2:83:7f:9e:1d:da:ed:de:96:4e:9a:06:cb:1b:c0:b2:49:
         4c:7a:da:31:e8:43:69:ac:4c:15:71:e8:70:c6:9e:bb:c4:19:
         68:37:aa:2a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAd3kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEwMDg0MzQxWhcNMjYwOTEwMDg0MzQxWjAYMRYw
FAYDVQQDEw02YTc5OGY0MS0zNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsJBbnqCYLQ9PGWLYf7fDUTTAf7M0v5XinUw46bJRVBnhm3ycxaVTXZGU
P9YnlUVpds06cnYER68fpAMaYyYpI5uACBATlKmKjDbRBADAuWsIMho/94SI9nTu
yS3g5LbyvKPodMFOChaOAdy1khEmFRDh/s8KWik9DTaI6ZthhNWql0eYgs7DuGkZ
MFPnyQ0EWiakF6872GEfSR1N4JcE8m1od+yijxIM0Vm+z0+UichhzHWqrFroMRzA
797CGh1oYUfa8Sl7bAAgXF01N22Mgo8Wj4b5jgkQ3xjog+YPB5Sx+tx4R605mHlg
avAOwuHZmD4c9GPiMsGJwXaURUURqwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNwy
3eLsTxbtbcabPHCrUuNlujAbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODg0M0E4RTk0OTcxMUYxODU3MkEwRDhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaU1sDBAWaU0AwDQYJ
KoZIhvcNAQELBQADggEBAHexKZWhjWARjGh9qabyLLY09pb1PuLQThBEVEXy5yI0
QMTyhbqjEN2hfyyuGWtDmQ86S6a9/cBI0s9cCOS1n9HsNzP6FYAQPc0xJCaVWLpA
sDknuPUhKb7jvZCsU6i6bVLp5+4WWCZrzEuDUZcvPzVTdg7Qbk62aZgSVDgcL8+3
rveaTlSnphhZrk3S8YxZsoD38E6g5TmKnPP4UDj9HR7o9bemHd9+3u0FhV1zEz4B
H80aEUXTE7OQnXcxG1luOLsExYKp7QwWm7hYm1v9stsbtzuNbof/R3bSg3+eHdrt
3pZOmgbLG8CySUx62jHoQ2msTBVx6HDGnrvEGWg3qio=
-----END CERTIFICATE-----