Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5A230BE2A11F1984154B0CE1D38B0.roa
File:                     A4C5A230BE2A11F1984154B0CE1D38B0.roa (raw, json)
Hash identifier:          XF4eUu3gp1xfOQoDbtoxl4+xIlrgeG1eqbf01TCxPTw=
Subject key identifier:   AE:09:C8:68:FB:46:76:21:B9:D5:A1:EF:8A:EC:12:CA:43:04:0A:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5A230BE2A11F1984154B0CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:29:39 +0000
ROA not before:           Fri 02 Oct 2026 06:29:35 +0000
ROA not after:            Mon 09 Nov 2026 06:29:35 +0000
asID:                     151352
IP address blocks:        154.82.136.0/24 maxlen: 24
                          154.82.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125891 (0x1ebc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 06:29:35 2026 GMT
            Not After : Nov  9 06:29:35 2026 GMT
        Subject: CN=6abf4f53-ef39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:27:e4:35:da:b1:68:fe:5d:ce:03:40:8a:
                    e6:39:75:9f:bd:61:83:17:fc:6d:2e:08:91:d2:ff:
                    2e:64:7d:2d:66:ee:9a:4e:38:52:3d:8d:68:8f:d5:
                    21:67:91:eb:97:c9:5f:6a:34:42:37:70:de:ce:46:
                    81:38:e9:eb:a0:b5:23:ba:4e:50:f9:9b:a2:e5:de:
                    cb:93:5d:33:1f:86:c9:20:72:9f:09:31:8d:5d:2a:
                    65:fe:1f:94:d3:cb:75:e5:cd:54:d5:86:de:48:1d:
                    db:65:27:aa:32:0e:74:75:a9:d0:ce:37:89:27:ce:
                    ef:22:f4:1b:35:68:90:53:0d:cf:76:89:9c:81:17:
                    2f:ba:47:1e:64:94:6c:88:cf:04:10:d0:11:d2:36:
                    06:4b:f5:b6:87:aa:87:9a:e2:9f:bd:40:1d:9b:2b:
                    d7:0a:ad:a2:72:2a:47:15:52:de:98:90:79:60:a7:
                    47:f5:43:8b:e8:74:6e:68:cd:82:86:0d:68:b0:97:
                    f8:58:ee:6a:79:03:24:18:45:f8:a5:a5:aa:2a:0c:
                    a0:b4:0c:20:df:95:33:f6:7a:b5:49:eb:4c:ff:6c:
                    32:b8:7e:6a:df:c6:94:b5:6a:5b:68:56:2c:e7:f7:
                    92:86:d2:12:24:c9:73:9d:d6:3f:03:5c:62:82:80:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:09:C8:68:FB:46:76:21:B9:D5:A1:EF:8A:EC:12:CA:43:04:0A:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5A230BE2A11F1984154B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:da:c7:12:a0:2f:65:af:f8:6e:a9:17:46:78:de:c8:29:3f:
         bf:df:1e:1a:f1:48:3a:d1:95:21:a6:8c:70:27:c4:19:74:00:
         f2:c8:a8:ee:c6:ff:c9:b3:4e:75:01:fa:38:61:12:7e:a4:3f:
         42:65:d7:30:17:10:3f:cc:64:70:1b:bb:8b:21:01:8b:cf:1e:
         16:92:47:f6:0c:4d:4f:bc:7d:a9:41:fd:ff:2e:6a:a3:7d:3e:
         26:f8:6f:34:b0:07:5d:4c:ab:9e:4a:47:f4:a4:1c:12:77:4f:
         92:f3:bb:68:fc:36:df:9f:42:e1:91:a4:bd:4c:12:4f:07:ca:
         15:97:9d:d9:e7:cd:cb:91:ba:37:8b:0e:bb:d6:43:b8:34:41:
         d6:fe:8e:94:98:c0:ac:ce:56:51:84:15:7d:e1:91:6b:eb:e7:
         d5:a2:50:52:cc:d2:8a:3f:ed:fe:4d:3f:a1:d1:30:57:c5:eb:
         27:06:36:bb:d4:bf:4d:96:8c:68:8c:f2:32:da:8b:a3:f2:ec:
         18:83:6f:e4:77:29:3a:87:1e:13:1f:a1:6c:50:f9:6b:b0:3f:
         f0:0e:f8:bd:d8:be:87:c3:d4:30:c2:07:a3:24:31:d2:fd:c1:
         b5:dd:1a:16:43:a6:2f:b0:95:a6:f4:46:b0:f4:01:5b:7a:58:
         8a:e7:50:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAevDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDAyMDYyOTM1WhcNMjYxMTA5MDYyOTM1WjAYMRYw
FAYDVQQDEw02YWJmNGY1My1lZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA440n5DXasWj+Xc4DQIrmOXWfvWGDF/xtLgiR0v8uZH0tZu6aTjhSPY1o
j9UhZ5Hrl8lfajRCN3DezkaBOOnroLUjuk5Q+Zui5d7Lk10zH4bJIHKfCTGNXSpl
/h+U08t15c1U1YbeSB3bZSeqMg50danQzjeJJ87vIvQbNWiQUw3PdomcgRcvukce
ZJRsiM8EENAR0jYGS/W2h6qHmuKfvUAdmyvXCq2icipHFVLemJB5YKdH9UOL6HRu
aM2Chg1osJf4WO5qeQMkGEX4paWqKgygtAwg35Uz9nq1SetM/2wyuH5q38aUtWpb
aFYs5/eShtISJMlzndY/A1xigoDVmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK4J
yGj7RnYhudWh74rsEspDBApoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEM1QTIzMEJFMkExMUYxOTg0MTU0QjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlKIMA0GCSqGSIb3DQEB
CwUAA4IBAQCC2scSoC9lr/huqRdGeN7IKT+/3x4a8Ug60ZUhpoxwJ8QZdADyyKju
xv/Js051Afo4YRJ+pD9CZdcwFxA/zGRwG7uLIQGLzx4Wkkf2DE1PvH2pQf3/Lmqj
fT4m+G80sAddTKueSkf0pBwSd0+S87to/Dbfn0LhkaS9TBJPB8oVl53Z583Lkbo3
iw671kO4NEHW/o6UmMCszlZRhBV94ZFr6+fVolBSzNKKP+3+TT+h0TBXxesnBja7
1L9NloxojPIy2ouj8uwYg2/kdyk6hx4TH6FsUPlrsD/wDvi92L6Hw9QwwgejJDHS
/cG13RoWQ6YvsJWm9Eaw9AFbeliK51AR
-----END CERTIFICATE-----