Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0F77E0CD05811F19872D11DCF1D38B0.roa
File:                     C0F77E0CD05811F19872D11DCF1D38B0.roa (raw, json)
Hash identifier:          YNch1Eyg2anneUxamQ0tqzdIDJD4HJIm/kP4WfUuLvs=
Subject key identifier:   DF:2F:C1:AB:80:81:C6:EA:51:4F:A4:76:14:36:9A:3F:6F:C2:EE:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F027
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0F77E0CD05811F19872D11DCF1D38B0.roa
Signing time:             Sun 25 Oct 2026 09:45:04 +0000
ROA not before:           Sun 25 Oct 2026 09:44:59 +0000
ROA not after:            Wed 04 Nov 2026 09:44:59 +0000
asID:                     49505
IP address blocks:        154.223.204.0/24 maxlen: 24
                          154.223.205.0/24 maxlen: 24
                          154.223.206.0/24 maxlen: 24
                          154.223.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127015 (0x1f027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 25 09:44:59 2026 GMT
            Not After : Nov  4 09:44:59 2026 GMT
        Subject: CN=6addcfa0-b681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:db:5d:58:68:16:86:6b:c2:27:f7:94:03:
                    bd:ce:35:15:06:70:32:fd:5d:75:e0:74:65:f3:6a:
                    e8:41:92:fe:bf:a0:ee:33:12:f0:11:d9:d5:7f:1b:
                    33:07:6a:bc:c6:8d:b8:02:9f:5d:ad:54:41:cb:ae:
                    c4:b1:77:a5:36:7a:e4:2f:6e:b0:39:a6:14:24:fb:
                    44:83:91:15:01:b6:3b:3a:20:8e:71:fa:fe:f4:20:
                    4c:8c:8f:f4:4a:28:9c:91:c0:fe:d6:b4:32:64:3e:
                    ea:bc:07:e1:f4:5d:e1:08:03:b3:1c:6b:d5:a6:01:
                    ed:6e:f9:80:4d:d7:f1:71:fe:eb:f7:c2:64:f4:9a:
                    74:ea:3f:c4:32:b5:70:52:43:42:03:20:0a:b8:4e:
                    3f:a0:e8:41:9b:d3:8c:01:fd:34:20:3f:9c:01:66:
                    ed:e2:d5:d3:39:ea:33:48:4b:24:45:65:4e:35:aa:
                    d1:75:d6:b6:fd:4c:f7:3f:f8:93:3b:11:e4:37:7e:
                    07:90:46:98:c8:5b:1c:e7:c6:92:e9:9d:37:95:af:
                    20:90:d5:eb:5d:6a:89:a6:23:21:40:0a:85:2f:58:
                    96:68:e4:a7:20:23:3c:b0:7d:f8:4a:de:f4:39:df:
                    e6:ee:a5:aa:98:8d:f7:b8:fb:82:58:60:0e:58:24:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2F:C1:AB:80:81:C6:EA:51:4F:A4:76:14:36:9A:3F:6F:C2:EE:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0F77E0CD05811F19872D11DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:37:d4:ae:95:76:6f:b5:60:b8:1b:25:4c:ae:82:df:fc:
         97:d4:2d:b4:5d:bb:24:ec:fb:c8:81:7b:f2:8b:f6:e6:25:a3:
         12:60:9d:ee:8d:eb:0f:3f:d6:b2:5d:0f:82:cf:3a:8f:86:d1:
         fd:18:5f:8d:d6:ba:a7:cc:3d:7e:fd:77:e0:05:25:ef:b0:63:
         43:9e:fc:c9:11:e7:2b:a5:e6:24:c7:62:c7:e0:e1:3d:51:2e:
         64:36:51:07:c3:a1:fe:cf:ab:7a:7e:b9:73:6a:91:d3:f5:44:
         dd:14:57:aa:ac:66:4a:22:d0:15:82:fc:b6:0a:ac:4f:03:bf:
         1d:9a:9e:0b:c6:6d:56:66:b1:a8:13:c2:e6:46:21:67:cd:4d:
         ee:f0:1f:50:27:75:89:ad:66:ae:df:7a:fc:22:6d:67:da:7c:
         8a:36:5a:79:bc:30:b8:61:ef:ef:0e:f7:2a:bb:9a:3a:b8:31:
         0d:ed:1d:2c:80:e8:fd:0e:0d:02:f5:45:8d:b0:c3:e3:8c:65:
         c9:d1:98:f5:aa:e3:c6:d0:1a:14:5d:f3:ca:7d:a0:bd:4f:28:
         17:e8:0c:88:6d:09:1b:e2:55:9a:25:f2:a9:ed:6e:cc:94:3d:
         bb:51:18:dd:99:24:94:bc:b4:a2:33:f9:67:93:27:d4:0f:a2:
         53:4e:ac:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAfAnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDI1MDk0NDU5WhcNMjYxMTA0MDk0NDU5WjAYMRYw
FAYDVQQDEw02YWRkY2ZhMC1iNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAumLbXVhoFoZrwif3lAO9zjUVBnAy/V114HRl82roQZL+v6DuMxLwEdnV
fxszB2q8xo24Ap9drVRBy67EsXelNnrkL26wOaYUJPtEg5EVAbY7OiCOcfr+9CBM
jI/0SiickcD+1rQyZD7qvAfh9F3hCAOzHGvVpgHtbvmATdfxcf7r98Jk9Jp06j/E
MrVwUkNCAyAKuE4/oOhBm9OMAf00ID+cAWbt4tXTOeozSEskRWVONarRdda2/Uz3
P/iTOxHkN34HkEaYyFsc58aS6Z03la8gkNXrXWqJpiMhQAqFL1iWaOSnICM8sH34
St70Od/m7qWqmI33uPuCWGAOWCSCYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN8v
wauAgcbqUU+kdhQ2mj9vwu7oMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMEY3N0UwQ0QwNTgxMUYxOTg3MkQxMURDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt/MMA0GCSqGSIb3DQEB
CwUAA4IBAQBnPDfUrpV2b7VguBslTK6C3/yX1C20Xbsk7PvIgXvyi/bmJaMSYJ3u
jesPP9ayXQ+CzzqPhtH9GF+N1rqnzD1+/XfgBSXvsGNDnvzJEecrpeYkx2LH4OE9
US5kNlEHw6H+z6t6frlzapHT9UTdFFeqrGZKItAVgvy2CqxPA78dmp4Lxm1WZrGo
E8LmRiFnzU3u8B9QJ3WJrWau33r8Im1n2nyKNlp5vDC4Ye/vDvcqu5o6uDEN7R0s
gOj9Dg0C9UWNsMPjjGXJ0Zj1quPG0BoUXfPKfaC9TygX6AyIbQkb4lWaJfKp7W7M
lD27URjdmSSUvLSiM/lnkyfUD6JTTqxp
-----END CERTIFICATE-----