Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22E0F00CC4F11F18248800ECF1D38B0.roa
File:                     C22E0F00CC4F11F18248800ECF1D38B0.roa (raw, json)
Hash identifier:          yR/eTv4t5Ns7/BHNBjjgjHoQjShaweW9PcM+R7M5jA4=
Subject key identifier:   B1:E9:F5:B7:DC:44:40:71:CA:64:3D:84:D2:8C:A6:AA:33:DB:00:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22E0F00CC4F11F18248800ECF1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:30:36 +0000
ROA not before:           Tue 20 Oct 2026 06:30:31 +0000
ROA not after:            Fri 06 Nov 2026 06:30:31 +0000
asID:                     40115
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126690 (0x1eee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:30:31 2026 GMT
            Not After : Nov  6 06:30:31 2026 GMT
        Subject: CN=6ad70a8c-afb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:84:9f:96:72:86:cb:3e:98:cb:53:b5:1d:
                    df:14:bb:64:4d:90:e0:93:a5:db:fa:ea:fa:19:68:
                    b3:4f:ce:1d:c8:5b:3b:78:7e:f8:6f:0b:89:a5:54:
                    d4:69:73:60:f1:0b:33:f5:7c:2a:5e:7c:2e:a4:ce:
                    33:3b:4b:cb:c6:74:3b:e8:64:b8:eb:2a:ba:bd:2a:
                    15:73:87:61:6f:c6:0a:4b:b8:d1:26:10:28:f8:bc:
                    67:7c:86:d2:54:24:76:c6:69:db:b0:c3:e2:5f:2a:
                    53:eb:a3:9b:27:cd:ec:4b:27:ed:22:85:b4:22:fc:
                    99:c8:b4:00:7c:c1:76:d4:b7:4f:cc:72:c3:13:e3:
                    84:83:23:63:1e:ac:ec:d5:16:ff:7b:e4:ce:6b:9e:
                    52:ef:c1:35:66:04:7e:05:f8:ed:cb:98:3a:9f:0e:
                    12:96:ee:be:e1:94:65:d8:3c:96:b1:ff:17:c0:80:
                    35:ba:c4:0c:67:e8:0c:cf:7b:e2:a8:ed:e1:04:d4:
                    62:4a:f9:0c:44:ab:4f:43:5b:81:1d:65:93:2e:a1:
                    4b:c4:41:bc:9c:4c:20:e6:bd:fb:31:12:4e:42:0c:
                    2a:a7:64:eb:30:f6:e5:7c:9a:7c:05:c4:9c:23:19:
                    29:1b:4b:2a:70:e9:84:75:19:8d:b0:9f:7a:7c:04:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E9:F5:B7:DC:44:40:71:CA:64:3D:84:D2:8C:A6:AA:33:DB:00:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22E0F00CC4F11F18248800ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:cb:bf:c0:c2:b3:8b:34:2d:35:fa:c7:bf:e3:9a:eb:f2:
         d2:4c:64:fc:5c:6d:80:69:c6:70:e1:2b:a1:35:08:53:a6:95:
         4f:0a:d4:f4:80:74:8f:e2:65:e7:93:14:8d:7e:52:e6:3b:7e:
         12:8c:71:1e:24:0f:75:90:78:ae:97:86:9d:8d:bf:b1:8f:9f:
         0f:35:12:0a:bc:47:a3:ee:d7:93:90:03:47:9f:b6:6a:be:1b:
         29:90:64:e3:ea:11:73:d8:d9:12:51:4e:e8:49:fc:db:62:4a:
         e6:19:f3:ea:bc:5d:91:ce:dc:c2:16:94:8b:b9:84:52:fb:b8:
         53:02:37:a2:25:86:d0:bf:57:a0:b5:63:55:ef:11:a0:25:5e:
         67:79:c4:aa:30:4d:77:13:d0:35:ea:aa:36:ff:4c:3c:5c:f8:
         85:2e:81:dc:97:77:47:5b:20:a8:91:49:fd:c0:8e:97:b3:26:
         30:da:f9:75:41:bc:9a:cf:b5:ff:f6:e7:53:a9:4b:9f:08:ce:
         5d:27:b1:f1:46:c4:1c:c6:6c:ef:05:b9:c8:86:f7:90:db:84:
         3c:50:ee:cf:ab:08:78:6e:29:fc:79:b5:51:eb:54:ee:5b:bb:
         86:bf:54:e3:f7:45:28:2e:fe:75:ea:30:3f:0b:b6:aa:1d:e4:
         0a:9a:78:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe7iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDIwMDYzMDMxWhcNMjYxMTA2MDYzMDMxWjAYMRYw
FAYDVQQDEw02YWQ3MGE4Yy1hZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5GeEn5Zyhss+mMtTtR3fFLtkTZDgk6Xb+ur6GWizT84dyFs7eH74bwuJ
pVTUaXNg8Qsz9XwqXnwupM4zO0vLxnQ76GS46yq6vSoVc4dhb8YKS7jRJhAo+Lxn
fIbSVCR2xmnbsMPiXypT66ObJ83sSyftIoW0IvyZyLQAfMF21LdPzHLDE+OEgyNj
Hqzs1Rb/e+TOa55S78E1ZgR+Bfjty5g6nw4Slu6+4ZRl2DyWsf8XwIA1usQMZ+gM
z3viqO3hBNRiSvkMRKtPQ1uBHWWTLqFLxEG8nEwg5r37MRJOQgwqp2TrMPblfJp8
BcScIxkpG0sqcOmEdRmNsJ96fASDswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLHp
9bfcREBxymQ9hNKMpqoz2wDbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjJFMEYwMENDNEYxMUYxODI0ODgwMEVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQBEssu/wMKzizQtNfrHv+Oa6/LSTGT8XG2AacZw4SuhNQhTppVPCtT0
gHSP4mXnkxSNflLmO34SjHEeJA91kHiul4adjb+xj58PNRIKvEej7teTkANHn7Zq
vhspkGTj6hFz2NkSUU7oSfzbYkrmGfPqvF2RztzCFpSLuYRS+7hTAjeiJYbQv1eg
tWNV7xGgJV5necSqME13E9A16qo2/0w8XPiFLoHcl3dHWyCokUn9wI6XsyYw2vl1
Qbyaz7X/9udTqUufCM5dJ7HxRsQcxmzvBbnIhveQ24Q8UO7Pqwh4bin8ebVR61Tu
W7uGv1Tj90UoLv516jA/C7aqHeQKmnh0
-----END CERTIFICATE-----