Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1BDDC869D3311F1886C9D13CF1D38B0.roa
File:                     B1BDDC869D3311F1886C9D13CF1D38B0.roa (raw, json)
Hash identifier:          0sdC/4E2eHJ24l2p6ZbEgxSF6vR+WCFM16Cqlu3VcQc=
Subject key identifier:   28:CE:BF:EC:F7:04:FF:F2:FF:93:65:9A:06:D9:D6:34:D6:EE:80:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E14F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1BDDC869D3311F1886C9D13CF1D38B0.roa
Signing time:             Fri 21 Aug 2026 07:41:18 +0000
ROA not before:           Fri 21 Aug 2026 07:41:14 +0000
ROA not after:            Wed 16 Sep 2026 07:41:14 +0000
asID:                     17497
IP address blocks:        154.196.135.0/24 maxlen: 24
                          154.196.140.0/23 maxlen: 24
                          154.196.140.0/24 maxlen: 24
                          154.196.141.0/24 maxlen: 24
                          154.196.166.0/24 maxlen: 24
                          154.196.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123215 (0x1e14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 07:41:14 2026 GMT
            Not After : Sep 16 07:41:14 2026 GMT
        Subject: CN=6a88011e-6191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:74:98:58:9d:17:aa:41:c9:35:b5:f7:20:
                    61:a2:0c:c4:94:bc:45:11:bf:c1:0a:e2:41:d2:18:
                    c7:9e:a5:0f:50:81:66:7a:12:70:5d:e0:2e:09:01:
                    db:7f:fe:78:8b:1a:d3:24:24:95:97:80:1c:c1:fb:
                    a6:de:e5:62:82:ea:38:46:75:be:0a:a6:42:df:46:
                    af:e4:d4:f6:5c:26:ba:6a:99:21:13:2d:0d:f2:6b:
                    de:93:e8:7c:58:4a:76:4c:0f:7d:78:2b:fa:a0:d9:
                    f9:1c:6a:37:1b:c4:1c:38:15:3f:68:93:13:49:29:
                    76:b9:c1:5c:2d:04:9f:73:fa:de:61:ca:b9:ba:b3:
                    88:73:48:80:e0:5c:d7:be:f1:04:15:4b:c4:52:3a:
                    41:c8:4e:be:d4:3b:d7:62:16:b1:7d:86:ff:eb:16:
                    34:ca:d5:a0:7f:d1:77:20:57:ec:5b:df:37:13:96:
                    9b:13:56:fa:31:d7:0b:e3:da:9b:c5:db:24:0d:a6:
                    d0:12:cd:01:70:2b:dd:95:33:9d:89:3b:20:d6:ce:
                    46:c8:6e:80:6f:0f:4f:5e:8c:7e:7c:4d:27:42:e6:
                    d1:64:0b:7c:9d:e5:69:8d:02:26:50:18:66:e0:97:
                    db:36:75:eb:9f:b3:e7:3e:55:c6:49:53:a0:fc:e8:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CE:BF:EC:F7:04:FF:F2:FF:93:65:9A:06:D9:D6:34:D6:EE:80:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1BDDC869D3311F1886C9D13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.135.0/24
                  154.196.140.0/23
                  154.196.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:92:5b:ac:07:85:2d:0b:c8:1d:08:9e:e8:ce:7c:58:6c:b6:
         bd:5d:81:c7:25:fd:18:00:8b:31:0c:7b:72:f4:f4:f4:6e:ad:
         46:8c:7a:e5:ca:3d:77:04:b9:bf:b2:bd:14:31:44:05:55:94:
         46:e2:0d:31:e0:9e:88:00:3c:a1:6e:6e:68:b3:6c:24:95:96:
         11:02:75:ef:61:e6:fd:39:3f:af:47:c1:38:64:46:4b:b1:48:
         0c:b7:ec:8a:ed:7a:ae:56:ac:5b:71:6e:0a:77:93:12:e6:9b:
         b1:c3:34:67:5c:1f:1c:a2:8d:21:80:ef:7e:50:5d:9d:45:30:
         4a:67:d4:66:8d:48:d8:8a:64:c0:95:ff:2b:fc:93:6b:cc:c8:
         d8:59:51:78:46:ad:89:01:8b:6f:eb:41:dc:73:7a:d6:33:68:
         c7:86:f3:21:a2:82:ec:ea:0d:f3:a2:a2:e4:68:6e:46:24:7d:
         29:e9:b9:72:6c:2a:2b:63:2a:47:8b:b6:e6:0d:7c:38:62:4b:
         7e:6c:8d:9e:d0:bc:ad:64:dd:79:81:52:61:aa:46:be:2a:98:
         a3:17:78:63:2b:2c:38:a7:6b:da:b2:8d:fd:dc:00:f2:c9:f2:
         78:69:c5:81:5f:e7:7e:b8:1c:6c:13:00:2b:d9:e9:87:af:32:
         07:44:9a:c5
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAeFPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMDc0MTE0WhcNMjYwOTE2MDc0MTE0WjAYMRYw
FAYDVQQDEw02YTg4MDExZS02MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr6x0mFidF6pByTW19yBhogzElLxFEb/BCuJB0hjHnqUPUIFmehJwXeAu
CQHbf/54ixrTJCSVl4Acwfum3uViguo4RnW+CqZC30av5NT2XCa6apkhEy0N8mve
k+h8WEp2TA99eCv6oNn5HGo3G8QcOBU/aJMTSSl2ucFcLQSfc/reYcq5urOIc0iA
4FzXvvEEFUvEUjpByE6+1DvXYhaxfYb/6xY0ytWgf9F3IFfsW983E5abE1b6MdcL
49qbxdskDabQEs0BcCvdlTOdiTsg1s5GyG6Abw9PXox+fE0nQubRZAt8neVpjQIm
UBhm4JfbNnXrn7PnPlXGSVOg/Oii+wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCjO
v+z3BP/y/5NlmgbZ1jTW7oD0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMUJEREM4NjlEMzMxMUYxODg2QzlEMTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmsSHAwQBmsSMAwQBmsSm
MA0GCSqGSIb3DQEBCwUAA4IBAQCJklusB4UtC8gdCJ7oznxYbLa9XYHHJf0YAIsx
DHty9PT0bq1GjHrlyj13BLm/sr0UMUQFVZRG4g0x4J6IADyhbm5os2wklZYRAnXv
Yeb9OT+vR8E4ZEZLsUgMt+yK7XquVqxbcW4Kd5MS5puxwzRnXB8coo0hgO9+UF2d
RTBKZ9RmjUjYimTAlf8r/JNrzMjYWVF4Rq2JAYtv60Hcc3rWM2jHhvMhooLs6g3z
oqLkaG5GJH0p6blybCorYypHi7bmDXw4Ykt+bI2e0LytZN15gVJhqka+KpijF3hj
Kyw4p2vaso393ADyyfJ4acWBX+d+uBxsEwAr2emHrzIHRJrF
-----END CERTIFICATE-----