Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16F60B0CB9111F1AC3ADDB7CE1D38B0.roa
File:                     B16F60B0CB9111F1AC3ADDB7CE1D38B0.roa (raw, json)
Hash identifier:          dpHa5h153HCJuHo9nJvqO3fAkJ5hdK+84KJhm6BBB1Q=
Subject key identifier:   3B:3B:11:27:F8:F6:B5:BA:8C:7A:E5:D0:8C:DD:0E:ED:8D:BA:D1:8F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EED5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16F60B0CB9111F1AC3ADDB7CE1D38B0.roa
Signing time:             Mon 19 Oct 2026 07:50:03 +0000
ROA not before:           Mon 19 Oct 2026 07:49:59 +0000
ROA not after:            Thu 26 Nov 2026 07:49:59 +0000
asID:                     136809
IP address blocks:        154.201.96.0/24 maxlen: 24
                          154.201.97.0/24 maxlen: 24
                          154.201.98.0/24 maxlen: 24
                          154.201.99.0/24 maxlen: 24
                          154.201.100.0/24 maxlen: 24
                          154.201.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126677 (0x1eed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 19 07:49:59 2026 GMT
            Not After : Nov 26 07:49:59 2026 GMT
        Subject: CN=6ad5cbab-d8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:9e:4d:64:6c:05:6d:e3:ef:c1:46:01:5d:
                    19:0b:b1:5e:d0:2f:f6:2c:e8:98:7c:84:f4:99:e6:
                    17:a1:d8:72:a7:d8:cf:4f:09:0b:b8:e7:8c:41:ee:
                    ce:6f:f1:31:83:d6:50:8d:39:5f:32:a9:cc:4f:4b:
                    05:be:13:bc:8c:72:f8:7c:17:08:a2:9c:ff:77:95:
                    97:ae:d4:a6:fb:a7:eb:3a:cc:16:9b:2b:e6:21:b0:
                    1f:22:12:b2:c0:7a:66:76:92:4c:55:21:18:63:f8:
                    2f:9b:77:b0:7c:3e:ef:4d:61:d1:62:95:8d:54:80:
                    5d:b1:47:24:e3:68:2c:36:98:90:40:3e:7e:1e:6f:
                    00:3b:76:e6:0a:e9:1b:82:dc:65:d4:0d:94:bd:c1:
                    3c:85:26:46:72:10:63:db:2c:67:2b:d3:04:01:52:
                    56:3e:b5:35:c1:53:df:29:a3:4c:e4:d3:ef:96:9d:
                    ee:63:38:f6:48:c9:af:d7:8f:8f:c3:8e:25:ce:3e:
                    c5:16:b3:18:ee:d4:36:1b:aa:98:9f:ef:11:48:c6:
                    5c:a2:84:b0:c2:08:70:d3:b9:57:fe:2b:ed:98:33:
                    4d:fd:75:48:4c:60:b9:d8:c5:59:aa:44:8f:75:cd:
                    35:62:e9:3d:cd:c4:ee:38:4c:6b:41:ba:93:1a:5e:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:11:27:F8:F6:B5:BA:8C:7A:E5:D0:8C:DD:0E:ED:8D:BA:D1:8F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16F60B0CB9111F1AC3ADDB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.96.0-154.201.101.255

    Signature Algorithm: sha256WithRSAEncryption
         c8:a4:4c:a3:e1:2f:08:f8:5c:d3:24:ae:28:8d:7b:70:fb:11:
         9e:98:a7:ae:d7:cd:8d:22:2e:41:59:16:8e:b5:84:47:d2:94:
         57:c7:88:7c:07:b6:77:86:ed:1c:81:eb:53:d0:ce:5f:eb:c8:
         89:dc:d1:8a:94:14:a2:65:1d:92:49:44:68:a5:48:8a:6d:e6:
         db:bf:a0:94:9c:7a:aa:6a:0e:31:5d:2c:48:8a:a2:ae:f8:8e:
         24:f8:01:8f:4b:b5:97:a2:d1:61:ce:aa:78:09:67:d9:a2:95:
         b0:61:49:d4:a3:5a:5b:d4:34:12:50:07:01:01:ee:df:df:62:
         ed:ce:e4:d5:fe:c0:65:53:20:9a:8a:90:11:62:8d:99:b0:29:
         84:a1:29:21:c9:2e:22:60:ee:1b:a9:96:ec:d0:5e:bd:4c:8a:
         e1:d3:ea:0b:c0:09:c5:d0:0f:af:25:5a:41:f0:de:f2:db:29:
         32:d6:5a:04:3a:f8:d4:58:22:88:59:43:f0:c6:3a:72:63:7d:
         f6:a8:1f:23:16:4b:78:d4:37:48:42:39:20:fc:86:1b:f1:c0:
         c1:fc:b9:f5:64:51:5a:74:d3:81:56:7a:aa:fd:54:79:a9:03:
         42:f2:8b:e3:15:8e:2d:5f:64:3e:a2:46:65:6b:d6:b5:8c:e2:
         f2:a2:cb:80
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAe7VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE5MDc0OTU5WhcNMjYxMTI2MDc0OTU5WjAYMRYw
FAYDVQQDEw02YWQ1Y2JhYi1kOGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxQaeTWRsBW3j78FGAV0ZC7Fe0C/2LOiYfIT0meYXodhyp9jPTwkLuOeM
Qe7Ob/Exg9ZQjTlfMqnMT0sFvhO8jHL4fBcIopz/d5WXrtSm+6frOswWmyvmIbAf
IhKywHpmdpJMVSEYY/gvm3ewfD7vTWHRYpWNVIBdsUck42gsNpiQQD5+Hm8AO3bm
Cukbgtxl1A2UvcE8hSZGchBj2yxnK9MEAVJWPrU1wVPfKaNM5NPvlp3uYzj2SMmv
14+Pw44lzj7FFrMY7tQ2G6qYn+8RSMZcooSwwghw07lX/ivtmDNN/XVITGC52MVZ
qkSPdc01Yuk9zcTuOExrQbqTGl6xawIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDs7
ESf49rW6jHrl0IzdDu2NutGPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMTZGNjBCMENCOTExMUYxQUMzQUREQjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWayWADBAGayWQwDQYJ
KoZIhvcNAQELBQADggEBAMikTKPhLwj4XNMkriiNe3D7EZ6Yp67XzY0iLkFZFo61
hEfSlFfHiHwHtneG7RyB61PQzl/ryInc0YqUFKJlHZJJRGilSIpt5tu/oJSceqpq
DjFdLEiKoq74jiT4AY9LtZei0WHOqngJZ9milbBhSdSjWlvUNBJQBwEB7t/fYu3O
5NX+wGVTIJqKkBFijZmwKYShKSHJLiJg7hupluzQXr1MiuHT6gvACcXQD68lWkHw
3vLbKTLWWgQ6+NRYIohZQ/DGOnJjffaoHyMWS3jUN0hCOSD8hhvxwMH8ufVkUVp0
04FWeqr9VHmpA0Lyi+MVji1fZD6iRmVr1rWM4vKiy4A=
-----END CERTIFICATE-----