Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC716ACA44411F1959827A5CE1D38B0.roa
File:                     BCC716ACA44411F1959827A5CE1D38B0.roa (raw, json)
Hash identifier:          uQSyXLUf0+45JfpFQgJV9IO+DrEB+R6NZslgUlvoKz4=
Subject key identifier:   67:D8:40:84:B5:14:B1:40:D6:23:69:2F:8F:2B:14:41:81:DF:7C:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC716ACA44411F1959827A5CE1D38B0.roa
Signing time:             Sun 30 Aug 2026 07:30:56 +0000
ROA not before:           Sun 30 Aug 2026 07:30:52 +0000
ROA not after:            Wed 07 Oct 2026 07:30:52 +0000
asID:                     202656
IP address blocks:        154.219.237.0/24 maxlen: 24
                          154.219.238.0/24 maxlen: 24
                          154.219.239.0/24 maxlen: 24
                          154.219.240.0/24 maxlen: 24
                          154.219.241.0/24 maxlen: 24
                          154.219.242.0/24 maxlen: 24
                          154.219.243.0/24 maxlen: 24
                          154.219.244.0/24 maxlen: 24
                          154.219.248.0/24 maxlen: 24
                          154.219.249.0/24 maxlen: 24
                          154.221.50.0/24 maxlen: 24
                          154.221.51.0/24 maxlen: 24
                          154.221.52.0/24 maxlen: 24
                          154.222.197.0/24 maxlen: 24
                          154.222.200.0/24 maxlen: 24
                          154.222.201.0/24 maxlen: 24
                          154.222.202.0/24 maxlen: 24
                          154.222.203.0/24 maxlen: 24
                          154.222.204.0/24 maxlen: 24
                          154.222.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123926 (0x1e416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 07:30:52 2026 GMT
            Not After : Oct  7 07:30:52 2026 GMT
        Subject: CN=6a93dc30-f8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:31:93:c1:fe:b2:74:90:c7:61:fc:dc:ec:
                    81:f6:c3:93:ce:bc:fd:c4:70:dd:4b:b1:95:b3:33:
                    2f:e2:5d:72:fa:78:03:eb:28:e2:7e:41:84:27:4d:
                    e6:f4:dd:b6:ce:75:7d:86:b8:18:f5:57:2d:49:f7:
                    62:1c:75:0a:ba:19:a9:14:97:13:d5:44:cf:36:96:
                    bb:e2:db:8b:8e:72:96:77:a6:5d:96:3e:1a:e2:3e:
                    89:07:98:c9:6a:e8:8a:b8:bb:10:7d:d3:56:42:11:
                    b7:84:3a:37:01:01:c5:98:b4:58:d2:d1:bc:e3:f2:
                    26:d0:b8:d1:8f:49:b6:97:ce:6d:fd:69:f5:77:89:
                    bb:ce:4b:1f:eb:8e:96:54:7a:d2:59:33:46:ff:04:
                    25:37:a5:fc:ff:66:9f:67:1e:4f:e5:39:e6:a5:31:
                    62:a2:4b:7b:04:1f:ac:e4:3c:ac:5a:1b:2c:fd:02:
                    70:23:e2:69:88:80:c0:a9:e4:3e:5f:5f:5f:c1:d4:
                    aa:83:73:53:52:d6:5a:c9:fc:84:85:25:01:06:4a:
                    ed:0a:93:86:13:9c:dc:2d:d3:cf:af:9d:6f:2f:57:
                    65:2d:db:6c:e0:f8:f0:9d:59:25:5a:b1:e7:21:b8:
                    71:9c:29:e6:88:25:b9:b6:76:c2:ac:98:af:81:57:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D8:40:84:B5:14:B1:40:D6:23:69:2F:8F:2B:14:41:81:DF:7C:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC716ACA44411F1959827A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.237.0-154.219.244.255
                  154.219.248.0/23
                  154.221.50.0-154.221.52.255
                  154.222.197.0/24
                  154.222.200.0-154.222.205.255

    Signature Algorithm: sha256WithRSAEncryption
         d2:5c:24:bc:32:7d:dc:20:97:be:3c:ef:50:52:0d:fe:58:0c:
         c2:f2:2c:9e:2c:15:11:c5:32:3b:0d:a1:14:02:2b:40:f6:65:
         4b:ef:1d:dd:5a:5e:e5:16:5b:1a:4c:ec:99:18:8e:24:dc:3d:
         8d:95:df:9a:0b:bb:cb:02:e2:ec:23:a1:68:ff:55:b1:4f:f5:
         05:27:fa:66:d5:fa:61:1a:9a:7a:b5:d1:81:ae:e1:c7:03:05:
         48:bf:23:be:eb:de:54:50:6f:89:6e:69:28:11:02:2b:40:14:
         c4:2c:e3:51:20:6e:73:0a:78:ed:ba:4c:47:71:00:48:f8:24:
         3e:f1:75:de:8d:71:ea:55:8e:b6:d7:d2:0a:6b:5b:40:1c:7d:
         e1:5f:38:8e:d7:ca:e6:f6:e3:f0:fe:bc:e0:8f:5b:b0:b7:fb:
         b0:45:4a:bc:6a:33:0c:0b:ba:ae:e9:26:36:7f:02:33:ba:90:
         db:4c:bf:9a:d9:f5:20:7e:67:da:ac:12:d9:a5:c4:5b:61:5d:
         50:a1:b7:30:c3:f1:d6:32:d9:ae:f8:60:36:0b:58:f1:64:df:
         c5:91:e8:95:45:8c:25:ef:43:e0:37:cd:91:c2:9e:9c:83:a6:
         70:27:a8:d2:b8:41:92:19:d6:28:62:4b:ba:19:89:ba:b1:34:
         9a:9e:c5:d5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAeQWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMwMDczMDUyWhcNMjYxMDA3MDczMDUyWjAYMRYw
FAYDVQQDEw02YTkzZGMzMC1mOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvzMxk8H+snSQx2H83OyB9sOTzrz9xHDdS7GVszMv4l1y+ngD6yjifkGE
J03m9N22znV9hrgY9VctSfdiHHUKuhmpFJcT1UTPNpa74tuLjnKWd6Zdlj4a4j6J
B5jJauiKuLsQfdNWQhG3hDo3AQHFmLRY0tG84/Im0LjRj0m2l85t/Wn1d4m7zksf
646WVHrSWTNG/wQlN6X8/2afZx5P5TnmpTFiokt7BB+s5DysWhss/QJwI+JpiIDA
qeQ+X19fwdSqg3NTUtZayfyEhSUBBkrtCpOGE5zcLdPPr51vL1dlLdts4PjwnVkl
WrHnIbhxnCnmiCW5tnbCrJivgVe5mQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFGfY
QIS1FLFA1iNpL48rFEGB33y7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0M3MTZBQ0E0NDQxMUYxOTU5ODI3QTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBACa2+0DBACa2/QDBAGa
2/gwDAMEAZrdMgMEAJrdNAMEAJrexTAMAwQDmt7IAwQBmt7MMA0GCSqGSIb3DQEB
CwUAA4IBAQDSXCS8Mn3cIJe+PO9QUg3+WAzC8iyeLBURxTI7DaEUAitA9mVL7x3d
Wl7lFlsaTOyZGI4k3D2Nld+aC7vLAuLsI6Fo/1WxT/UFJ/pm1fphGpp6tdGBruHH
AwVIvyO+695UUG+JbmkoEQIrQBTELONRIG5zCnjtukxHcQBI+CQ+8XXejXHqVY62
19IKa1tAHH3hXziO18rm9uPw/rzgj1uwt/uwRUq8ajMMC7qu6SY2fwIzupDbTL+a
2fUgfmfarBLZpcRbYV1Qobcww/HWMtmu+GA2C1jxZN/FkeiVRYwl70PgN82Rwp6c
g6ZwJ6jSuEGSGdYoYku6GYm6sTSansXV
-----END CERTIFICATE-----