Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9C91358BFB911F1B1E15BDCCE1D38B0.roa
File:                     A9C91358BFB911F1B1E15BDCCE1D38B0.roa (raw, json)
Hash identifier:          Vbx4jm0vdCAE34P5sOOe/F1vFsnH4OzpW8ErjPwmDPw=
Subject key identifier:   88:8D:0A:EB:93:34:1E:AC:56:6E:1E:46:6F:EE:81:EF:01:F8:E8:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9C91358BFB911F1B1E15BDCCE1D38B0.roa
Signing time:             Sun 04 Oct 2026 06:05:57 +0000
ROA not before:           Sun 04 Oct 2026 06:05:53 +0000
ROA not after:            Thu 12 Nov 2026 06:05:53 +0000
asID:                     212042
IP address blocks:        154.83.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125985 (0x1ec21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  4 06:05:53 2026 GMT
            Not After : Nov 12 06:05:53 2026 GMT
        Subject: CN=6ac1ecc5-9afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:fc:df:de:14:f3:a1:25:5a:1e:0f:c4:d6:
                    26:85:21:8c:4c:a1:01:c8:44:4a:99:f8:d1:5a:31:
                    3a:a4:5a:b4:86:56:90:80:c4:60:8a:e3:10:f1:b7:
                    61:63:e9:12:33:88:bf:02:ab:48:64:58:89:3c:5a:
                    78:2d:39:1b:3d:14:c0:87:53:68:ec:70:b8:58:c8:
                    ff:34:5e:11:a6:75:df:07:4c:40:d6:4f:af:79:42:
                    ce:90:bd:9a:4f:7d:3c:02:fc:93:e5:8d:79:fe:ec:
                    9c:df:4e:e0:e6:27:45:e9:7c:c8:51:7f:bb:49:0d:
                    93:08:fd:3c:b3:e7:1d:60:fe:2c:74:e3:03:ca:98:
                    a6:9b:36:85:0f:d2:c6:9b:ca:61:91:21:e4:b6:6c:
                    99:eb:63:f5:20:fa:00:20:fa:b9:df:ed:a2:5a:eb:
                    99:f4:e2:a2:50:d2:0f:c4:c0:c7:d3:d5:06:c9:3d:
                    0e:ff:69:83:9d:96:df:de:2f:9c:18:13:6e:3b:db:
                    45:c8:67:a8:e1:58:5c:e3:a6:bc:15:4c:f1:0a:27:
                    cd:89:62:1a:3c:9a:16:bd:f3:2d:c7:43:df:d9:9d:
                    0f:2b:af:08:9f:8f:2e:e4:9a:ad:73:ec:42:2c:d2:
                    d7:94:57:1f:b7:36:16:cb:83:d9:23:5e:d5:61:aa:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8D:0A:EB:93:34:1E:AC:56:6E:1E:46:6F:EE:81:EF:01:F8:E8:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9C91358BFB911F1B1E15BDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:06:1b:df:e3:25:67:9a:04:3a:1a:24:88:c5:69:03:a1:
         6b:39:bb:0d:1f:c9:9f:26:8c:1e:45:83:f2:84:c6:8b:d4:7c:
         7d:be:27:16:d8:db:2a:03:5d:57:22:b8:85:a7:45:a5:df:76:
         a5:72:74:c5:ce:bf:20:c9:ec:df:3f:cc:31:32:88:62:3a:62:
         11:66:4f:96:b7:6d:27:12:6c:ae:0e:9d:9a:b8:45:f0:dc:9f:
         40:d2:d0:6c:cd:46:8a:d6:a6:cc:89:60:25:2d:63:25:48:f7:
         ec:4a:1d:f8:7d:36:51:5c:22:cf:19:67:96:19:c9:67:b3:72:
         6a:7e:66:8e:d9:b0:ec:74:91:22:1c:42:67:71:1b:4d:89:32:
         30:f5:e6:fa:e9:d8:3a:ba:aa:31:fe:ff:1f:5d:10:9b:42:61:
         34:5d:40:22:53:db:82:9f:9b:76:5f:55:5d:00:87:c2:95:36:
         0f:88:0d:18:58:24:1c:4f:a7:a3:64:55:fc:6e:02:97:39:fa:
         de:f3:bb:61:4d:03:c1:4c:ac:d3:bb:4f:11:e2:2c:cf:a2:d5:
         95:76:f6:3b:38:99:d6:11:9e:9a:01:63:ef:ba:a9:a8:16:42:
         d8:b3:d5:00:87:a7:43:a3:c1:38:ea:d4:37:6e:fc:fb:f5:81:
         4c:2f:11:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAewhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA0MDYwNTUzWhcNMjYxMTEyMDYwNTUzWjAYMRYw
FAYDVQQDEw02YWMxZWNjNS05YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzkj8394U86ElWh4PxNYmhSGMTKEByERKmfjRWjE6pFq0hlaQgMRgiuMQ
8bdhY+kSM4i/AqtIZFiJPFp4LTkbPRTAh1No7HC4WMj/NF4RpnXfB0xA1k+veULO
kL2aT308AvyT5Y15/uyc307g5idF6XzIUX+7SQ2TCP08s+cdYP4sdOMDypimmzaF
D9LGm8phkSHktmyZ62P1IPoAIPq53+2iWuuZ9OKiUNIPxMDH09UGyT0O/2mDnZbf
3i+cGBNuO9tFyGeo4Vhc46a8FUzxCifNiWIaPJoWvfMtx0Pf2Z0PK68In48u5Jqt
c+xCLNLXlFcftzYWy4PZI17VYaqYaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIiN
CuuTNB6sVm4eRm/uge8B+OjKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOUM5MTM1OEJGQjkxMUYxQjFFMTVCRENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOIMA0GCSqGSIb3DQEB
CwUAA4IBAQALEwYb3+MlZ5oEOhokiMVpA6FrObsNH8mfJoweRYPyhMaL1Hx9vicW
2NsqA11XIriFp0Wl33alcnTFzr8gyezfP8wxMohiOmIRZk+Wt20nEmyuDp2auEXw
3J9A0tBszUaK1qbMiWAlLWMlSPfsSh34fTZRXCLPGWeWGclns3JqfmaO2bDsdJEi
HEJncRtNiTIw9eb66dg6uqox/v8fXRCbQmE0XUAiU9uCn5t2X1VdAIfClTYPiA0Y
WCQcT6ejZFX8bgKXOfre87thTQPBTKzTu08R4izPotWVdvY7OJnWEZ6aAWPvuqmo
FkLYs9UAh6dDo8E46tQ3bvz79YFMLxFk
-----END CERTIFICATE-----