Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB377C78BF1E11F19DCA01E3CE1D38B0.roa
File:                     CB377C78BF1E11F19DCA01E3CE1D38B0.roa (raw, json)
Hash identifier:          PaF7PDtUhq9hcvjlm32Rv9Dm9PzaKUabAQWCQ3kVfoI=
Subject key identifier:   EA:E8:8F:39:15:8F:FE:C9:35:56:2E:38:3B:37:06:2B:46:53:76:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB377C78BF1E11F19DCA01E3CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:37:21 +0000
ROA not before:           Sat 03 Oct 2026 11:37:16 +0000
ROA not after:            Tue 10 Nov 2026 11:37:16 +0000
asID:                     54801
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125962 (0x1ec0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 11:37:16 2026 GMT
            Not After : Nov 10 11:37:16 2026 GMT
        Subject: CN=6ac0e8f1-1aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:ab:fd:b8:90:ea:0a:d4:62:33:38:86:28:
                    ca:87:8b:e1:64:02:c3:22:3f:55:86:5d:88:00:e2:
                    39:39:40:6a:31:15:ec:70:b1:c5:85:2f:05:00:02:
                    41:fa:01:3e:8a:24:ec:0b:5c:3a:c6:a7:14:c8:36:
                    ba:95:21:86:06:1b:5f:78:46:52:cb:13:f8:0c:c0:
                    09:cb:a4:3e:fb:e5:b8:b4:b8:d9:17:ba:38:33:17:
                    87:a0:5b:a9:cc:6e:eb:d6:01:14:cc:77:9f:05:a4:
                    36:61:c6:8a:18:52:bb:a5:18:d6:dd:c1:ea:c1:a4:
                    8b:61:2b:80:02:2c:37:d7:e9:27:ae:e9:8c:17:70:
                    f3:1f:30:5a:d0:f5:7a:68:99:4c:87:f8:f7:ba:56:
                    96:0f:ad:e9:82:80:f7:a5:4e:80:93:bb:60:56:9c:
                    5b:03:17:aa:d3:3c:b3:11:00:20:66:81:42:db:58:
                    40:b8:1e:7c:4e:0b:7b:7b:9c:9f:c7:b2:f9:ce:1e:
                    a9:b2:f2:74:19:a1:65:3f:c2:6c:6e:21:71:2f:a5:
                    9c:dc:07:dd:a2:13:2a:b0:b7:71:b3:dc:4d:6f:61:
                    9b:82:6b:60:58:85:4c:fa:d4:ce:9a:2e:d5:ce:72:
                    f9:ea:6f:b2:e2:2d:9f:59:a4:36:a9:66:03:fb:40:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:8F:39:15:8F:FE:C9:35:56:2E:38:3B:37:06:2B:46:53:76:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB377C78BF1E11F19DCA01E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:6f:d2:c2:99:65:90:e4:ae:3e:f2:e4:21:bb:60:9a:e5:
         9c:cf:5b:4d:74:9a:08:85:cd:88:1e:2a:58:c1:9d:0b:2b:03:
         ee:46:5c:cd:cf:d1:9b:27:ba:b0:7a:fa:35:5a:d4:cf:29:33:
         76:dd:61:c9:4e:9e:bb:ea:8d:25:24:86:0e:d5:0b:3d:d1:18:
         ec:96:44:1f:7c:9a:a2:3c:45:66:e9:d1:07:23:32:86:ae:85:
         b7:00:74:a3:55:a9:3c:b4:61:20:73:6b:f2:e4:3b:05:3e:32:
         a3:2d:21:27:5e:bf:53:8b:d1:1e:7e:6e:aa:92:9f:94:73:25:
         c2:29:8c:c1:61:ea:c7:14:0f:3c:80:78:fb:fe:ea:cc:c8:c0:
         42:ff:ae:56:23:fa:e8:30:14:71:5e:5e:ad:11:c5:b8:34:78:
         99:89:c6:be:ef:34:7c:0f:8d:b0:18:fb:97:f0:19:61:a5:ca:
         12:da:e2:49:96:9c:dc:02:89:95:9c:18:1d:25:5a:e6:2e:8c:
         80:ac:a6:37:84:4f:98:39:b2:56:01:81:38:e5:df:20:49:02:
         17:a2:1f:6e:17:79:29:d4:12:1a:ba:68:a5:13:fb:5c:db:9d:
         81:d0:66:ff:08:b4:e2:89:80:b8:ff:09:73:0c:b2:b4:21:7c:
         11:f4:8a:9f
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAewKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDAzMTEzNzE2WhcNMjYxMTEwMTEzNzE2WjAYMRYw
FAYDVQQDEw02YWMwZThmMS0xYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2K+r/biQ6grUYjM4hijKh4vhZALDIj9Vhl2IAOI5OUBqMRXscLHFhS8F
AAJB+gE+iiTsC1w6xqcUyDa6lSGGBhtfeEZSyxP4DMAJy6Q+++W4tLjZF7o4MxeH
oFupzG7r1gEUzHefBaQ2YcaKGFK7pRjW3cHqwaSLYSuAAiw31+knrumMF3DzHzBa
0PV6aJlMh/j3ulaWD63pgoD3pU6Ak7tgVpxbAxeq0zyzEQAgZoFC21hAuB58Tgt7
e5yfx7L5zh6psvJ0GaFlP8JsbiFxL6Wc3AfdohMqsLdxs9xNb2GbgmtgWIVM+tTO
mi7VznL56m+y4i2fWaQ2qWYD+0BtsQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFOro
jzkVj/7JNVYuODs3BitGU3YiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjM3N0M3OEJGMUUxMUYxOURDQTAxRTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBACa1wADBACa2gADBACa3QAwDQYJKoZIhvcNAQELBQADggEBAD93
b9LCmWWQ5K4+8uQhu2Ca5ZzPW010mgiFzYgeKljBnQsrA+5GXM3P0ZsnurB6+jVa
1M8pM3bdYclOnrvqjSUkhg7VCz3RGOyWRB98mqI8RWbp0QcjMoauhbcAdKNVqTy0
YSBza/LkOwU+MqMtISdev1OL0R5+bqqSn5RzJcIpjMFh6scUDzyAePv+6szIwEL/
rlYj+ugwFHFeXq0Rxbg0eJmJxr7vNHwPjbAY+5fwGWGlyhLa4kmWnNwCiZWcGB0l
WuYujICspjeET5g5slYBgTjl3yBJAheiH24XeSnUEhq6aKUT+1zbnYHQZv8ItOKJ
gLj/CXMMsrQhfBH0ip8=
-----END CERTIFICATE-----