Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E1D822C22211F19C0DC514CF1D38B0.roa
File:                     A0E1D822C22211F19C0DC514CF1D38B0.roa (raw, json)
Hash identifier:          8O8nWbABMoqtTLFt+/9kEn6XhQH8/bo2uKXkN48hJkI=
Subject key identifier:   41:AE:2C:D3:6B:C4:1F:25:D1:42:50:82:CF:EF:DA:45:94:24:29:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E1D822C22211F19C0DC514CF1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:42:22 +0000
ROA not before:           Wed 07 Oct 2026 07:42:17 +0000
ROA not after:            Sat 17 Oct 2026 07:42:17 +0000
asID:                     137535
IP address blocks:        154.86.16.0/23 maxlen: 24
                          154.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126120 (0x1eca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 07:42:17 2026 GMT
            Not After : Oct 17 07:42:17 2026 GMT
        Subject: CN=6ac5f7dd-21f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:ee:3d:a0:e6:7e:d6:92:4b:3e:03:45:59:
                    76:57:5f:9d:a6:08:03:b8:ce:9b:3e:d3:8f:dd:7d:
                    10:4f:89:9d:3c:58:da:eb:c3:38:ad:8b:96:a7:5c:
                    f7:dd:e0:b7:75:42:f0:6f:b5:1b:f7:db:73:ee:7d:
                    fb:ae:8d:e3:0f:e1:a5:fe:18:b0:38:17:50:f4:e8:
                    08:81:5c:71:ba:d4:21:1f:3e:83:13:cf:66:46:db:
                    bb:33:1d:8f:34:5e:aa:98:ff:89:81:19:60:38:d2:
                    c4:f0:0e:02:03:25:a2:a5:71:f5:8e:7c:3b:fe:d9:
                    33:a1:b2:2e:e2:97:39:ca:58:42:ba:ef:90:16:c1:
                    53:ba:49:17:6b:4f:b3:7b:1d:13:45:67:3c:47:c6:
                    bf:b9:2c:20:f3:7d:8d:00:68:ab:09:0a:06:ca:88:
                    47:b3:41:05:9f:f0:3e:94:64:da:41:39:dd:35:f8:
                    f1:4d:21:d5:f9:f5:23:60:3e:d6:aa:83:8d:ba:96:
                    d9:15:c9:59:2f:e4:c8:3c:fa:48:d3:4e:08:e3:7a:
                    9b:77:8b:9f:e9:62:65:98:ff:11:63:5d:e7:21:e3:
                    2c:f4:d4:b3:ec:ea:ee:e4:c7:8f:28:ea:36:96:bf:
                    89:ad:f3:73:6a:e5:a7:b8:19:9b:8b:83:79:51:05:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:2C:D3:6B:C4:1F:25:D1:42:50:82:CF:EF:DA:45:94:24:29:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E1D822C22211F19C0DC514CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:32:7e:b4:d8:a6:41:f5:7c:8f:88:c1:a2:1b:f3:22:36:
         01:bc:34:63:19:fc:33:45:1c:dd:12:40:92:e7:22:ce:e6:7a:
         49:9f:b8:2d:7c:0c:50:d5:e3:30:7b:dc:3f:fa:94:36:46:83:
         d1:7a:04:e2:ee:b9:e1:96:8d:ff:cc:50:06:12:29:59:0b:b9:
         11:1c:4d:74:9a:73:35:08:f6:bf:ca:39:11:09:f4:87:b1:4b:
         10:79:46:35:61:d3:33:54:9c:06:59:66:34:dc:54:3c:96:91:
         15:fd:e0:c5:28:4a:73:03:b7:91:07:e7:93:96:b0:f4:3b:af:
         7d:99:57:57:d5:9b:2a:58:89:86:89:1b:19:a7:ce:43:de:9c:
         42:18:f8:10:f6:b2:6b:a5:7f:c7:92:7e:19:36:77:48:5e:61:
         3f:2d:1d:59:42:09:60:4c:16:a4:13:48:50:0d:39:09:59:a7:
         18:8f:ac:22:ba:52:67:79:a9:4a:83:39:47:ac:e0:30:b9:5c:
         df:c8:c3:55:cb:ac:3b:e5:3c:54:b5:c7:76:81:93:8a:2d:0a:
         88:1c:66:3a:10:d6:af:0a:7e:b8:61:1b:6a:9d:57:46:a9:50:
         26:8f:00:f3:d8:a2:c2:c5:e5:36:87:dc:df:a6:00:50:3a:ad:
         e0:09:ba:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeyoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA3MDc0MjE3WhcNMjYxMDE3MDc0MjE3WjAYMRYw
FAYDVQQDEw02YWM1ZjdkZC0yMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArhDuPaDmftaSSz4DRVl2V1+dpggDuM6bPtOP3X0QT4mdPFja68M4rYuW
p1z33eC3dULwb7Ub99tz7n37ro3jD+Gl/hiwOBdQ9OgIgVxxutQhHz6DE89mRtu7
Mx2PNF6qmP+JgRlgONLE8A4CAyWipXH1jnw7/tkzobIu4pc5ylhCuu+QFsFTukkX
a0+zex0TRWc8R8a/uSwg832NAGirCQoGyohHs0EFn/A+lGTaQTndNfjxTSHV+fUj
YD7WqoONupbZFclZL+TIPPpI004I43qbd4uf6WJlmP8RY13nIeMs9NSz7Oru5MeP
KOo2lr+JrfNzauWnuBmbi4N5UQXj+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEGu
LNNrxB8l0UJQgs/v2kWUJCl7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEUxRDgyMkMyMjIxMUYxOUMwREM1MTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQAByDJ+tNimQfV8j4jBohvzIjYBvDRjGfwzRRzdEkCS5yLO5npJn7gt
fAxQ1eMwe9w/+pQ2RoPRegTi7rnhlo3/zFAGEilZC7kRHE10mnM1CPa/yjkRCfSH
sUsQeUY1YdMzVJwGWWY03FQ8lpEV/eDFKEpzA7eRB+eTlrD0O699mVdX1ZsqWImG
iRsZp85D3pxCGPgQ9rJrpX/Hkn4ZNndIXmE/LR1ZQglgTBakE0hQDTkJWacYj6wi
ulJnealKgzlHrOAwuVzfyMNVy6w75TxUtcd2gZOKLQqIHGY6ENavCn64YRtqnVdG
qVAmjwDz2KLCxeU2h9zfpgBQOq3gCbq8
-----END CERTIFICATE-----