Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3286E46AE9111F1A09A02FFCE1D38B0.roa
File:                     B3286E46AE9111F1A09A02FFCE1D38B0.roa (raw, json)
Hash identifier:          kuv9ZYrAvfHuTY5DjmmYB36C+Ao9UfVqyp4Dm/NRL7k=
Subject key identifier:   77:99:D3:C3:44:DF:AD:79:3E:EE:F1:6C:0E:D1:1C:1C:3C:BD:7C:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3286E46AE9111F1A09A02FFCE1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:07:03 +0000
ROA not before:           Sat 12 Sep 2026 10:06:59 +0000
ROA not after:            Tue 22 Sep 2026 10:06:59 +0000
asID:                     55020
IP address blocks:        154.193.192.0/18 maxlen: 24
                          154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
                          154.204.8.0/21 maxlen: 24
                          154.204.128.0/18 maxlen: 24
                          154.204.183.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124872 (0x1e7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 10:06:59 2026 GMT
            Not After : Sep 22 10:06:59 2026 GMT
        Subject: CN=6aa52447-aeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:e2:63:c7:b6:ee:27:39:75:ab:68:a6:43:
                    ac:4d:a9:9f:2d:cd:e0:60:0f:3c:6a:c9:52:45:c5:
                    c4:d8:ec:9f:9d:89:98:3d:40:12:73:e7:4f:c2:f4:
                    81:80:64:06:7d:c5:4b:43:6e:fb:7d:b5:60:96:05:
                    e2:d6:bb:2e:55:ea:57:c5:20:e8:c4:35:f7:59:9e:
                    b7:64:57:c9:77:d6:dd:0a:08:1f:aa:33:3b:cc:b0:
                    64:45:9f:aa:f6:dc:04:d5:9c:90:68:a3:21:b4:c1:
                    7f:bb:dd:b7:6e:98:c6:15:04:81:cb:e8:3d:42:df:
                    f0:c2:ff:af:00:86:91:d2:27:59:62:2b:af:40:06:
                    11:55:80:c2:72:ca:20:02:d3:b3:6f:57:95:8a:e3:
                    53:8f:b8:59:9d:77:b3:62:6c:76:b7:d7:ed:85:77:
                    9f:d2:97:4d:8d:36:88:6d:d3:17:68:f4:9e:ec:8c:
                    d0:b8:0b:76:da:96:6b:e4:dd:af:a9:27:43:a4:ea:
                    7a:ce:3b:2b:32:25:af:e2:c7:db:e0:a9:37:cc:ee:
                    ff:fb:5f:74:56:44:a9:2b:d7:5d:df:31:4f:0a:f7:
                    91:d5:ec:26:2c:60:43:8c:71:ca:eb:56:a2:b2:4b:
                    ac:e4:af:6e:9e:81:6d:db:73:43:ee:ce:a3:e8:c4:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:99:D3:C3:44:DF:AD:79:3E:EE:F1:6C:0E:D1:1C:1C:3C:BD:7C:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3286E46AE9111F1A09A02FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18
                  154.204.8.0/21
                  154.204.128.0/18
                  154.210.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:e8:96:c5:5e:35:f4:51:96:7e:d9:40:c8:10:0e:6c:74:
         53:be:6b:3d:08:2e:d8:e3:4f:f6:ea:e9:fe:bc:d5:1b:8d:5f:
         af:08:6b:7e:4a:a7:9c:65:ee:3d:d7:d9:70:08:28:20:7d:78:
         6b:b4:86:90:b3:04:c7:1a:e1:f8:80:74:fb:14:c4:76:fb:ad:
         95:19:b3:a8:c1:c6:bc:f4:2f:6c:72:2b:2c:ee:2b:b7:20:73:
         30:9b:08:fd:00:56:e2:f6:a2:94:70:e4:61:1b:4a:9e:16:4e:
         60:8b:84:69:b8:e2:36:07:13:b3:9b:b4:3d:52:10:6b:c9:48:
         05:bd:1c:3a:52:e9:bc:47:2d:87:9f:5a:fd:4a:1f:88:59:2e:
         6a:60:ea:90:c0:3f:1b:b6:e8:cb:ab:28:a5:31:ba:83:2c:55:
         56:55:60:63:df:23:18:91:72:45:28:6d:f3:aa:87:ce:23:e6:
         13:50:48:c7:04:25:f5:a3:ba:bd:98:87:1c:c4:08:bd:5f:58:
         ba:67:6e:70:ef:91:1b:72:95:41:ca:24:aa:0c:07:a6:17:34:
         40:b2:d3:6b:4a:0d:2a:17:8c:c3:bc:d3:fd:b5:7a:00:ed:64:
         4c:ad:85:01:1f:95:d1:6d:a6:d7:87:e1:2b:e0:c0:d8:34:b7:
         69:8d:70:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAefIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEyMTAwNjU5WhcNMjYwOTIyMTAwNjU5WjAYMRYw
FAYDVQQDEw02YWE1MjQ0Ny1hZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvtTiY8e27ic5datopkOsTamfLc3gYA88aslSRcXE2OyfnYmYPUASc+dP
wvSBgGQGfcVLQ277fbVglgXi1rsuVepXxSDoxDX3WZ63ZFfJd9bdCggfqjM7zLBk
RZ+q9twE1ZyQaKMhtMF/u923bpjGFQSBy+g9Qt/wwv+vAIaR0idZYiuvQAYRVYDC
csogAtOzb1eViuNTj7hZnXezYmx2t9fthXef0pdNjTaIbdMXaPSe7IzQuAt22pZr
5N2vqSdDpOp6zjsrMiWv4sfb4Kk3zO7/+190VkSpK9dd3zFPCveR1ewmLGBDjHHK
61aiskus5K9unoFt23ND7s6j6MTjCQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFHeZ
08NE3615Pu7xbA7RHBw8vXxjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzI4NkU0NkFFOTExMUYxQTA5QTAyRkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGmsHAAwQDmswIAwQGmsyA
AwQAmtICMA0GCSqGSIb3DQEBCwUAA4IBAQAqCuiWxV419FGWftlAyBAObHRTvms9
CC7Y40/26un+vNUbjV+vCGt+SqecZe4919lwCCggfXhrtIaQswTHGuH4gHT7FMR2
+62VGbOowca89C9sciss7iu3IHMwmwj9AFbi9qKUcORhG0qeFk5gi4RpuOI2BxOz
m7Q9UhBryUgFvRw6Uum8Ry2Hn1r9Sh+IWS5qYOqQwD8btujLqyilMbqDLFVWVWBj
3yMYkXJFKG3zqofOI+YTUEjHBCX1o7q9mIccxAi9X1i6Z25w75EbcpVByiSqDAem
FzRAstNrSg0qF4zDvNP9tXoA7WRMrYUBH5XRbabXh+Er4MDYNLdpjXAP
-----END CERTIFICATE-----