Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D035FA9AA14311F1917926F0CE1D38B0.roa
File:                     D035FA9AA14311F1917926F0CE1D38B0.roa (raw, json)
Hash identifier:          V2FUgK4Hc+EGWwCVMSGMQE2zIBExLNVcXLRoJbY4GYI=
Subject key identifier:   03:E5:93:50:BC:68:75:20:C0:77:22:8D:DF:79:90:19:B5:C9:EB:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D035FA9AA14311F1917926F0CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 11:46:46 +0000
ROA not before:           Wed 26 Aug 2026 11:46:41 +0000
ROA not after:            Sat 25 Aug 2029 11:46:41 +0000
asID:                     17561
IP address blocks:        154.215.168.0/24 maxlen: 24
                          154.215.169.0/24 maxlen: 24
                          154.215.170.0/24 maxlen: 24
                          154.215.171.0/24 maxlen: 24
                          154.215.172.0/24 maxlen: 24
                          154.215.173.0/24 maxlen: 24
                          154.215.174.0/24 maxlen: 24
                          154.215.175.0/24 maxlen: 24
                          154.215.176.0/24 maxlen: 24
                          154.215.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123766 (0x1e376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 11:46:41 2026 GMT
            Not After : Aug 25 11:46:41 2029 GMT
        Subject: CN=6a8ed225-d73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a3:d6:cd:57:19:e6:4c:00:c2:9c:a4:09:6e:
                    1d:f4:f6:35:f2:28:47:4c:a4:82:0d:b9:7e:01:5d:
                    fe:c9:ad:7c:95:10:8a:72:a2:c2:fb:28:aa:cd:97:
                    72:76:df:7a:ad:ee:36:49:fc:30:6e:a1:0a:07:da:
                    dc:d1:1a:ba:0b:d1:7e:a1:2a:14:3b:8d:f0:96:1b:
                    d9:76:b7:c3:40:48:d1:e9:dc:3c:63:14:a4:e2:9b:
                    bc:bc:04:83:2d:fe:ad:f0:54:25:57:70:23:ef:9e:
                    60:71:91:64:1c:17:4c:62:68:a2:1f:f4:10:41:30:
                    24:3d:16:89:cc:ed:ea:ee:69:1d:ed:d3:f2:c7:ea:
                    ce:a4:81:9e:fb:64:fe:82:0d:ea:13:f6:85:3d:3d:
                    a1:b9:77:c6:dd:ed:72:f9:4c:70:ca:ec:04:5a:26:
                    1d:1e:dc:af:d6:e3:2e:57:b8:16:10:84:d1:03:9f:
                    d6:c6:1a:cf:f8:90:33:80:be:11:ea:42:e5:fe:fa:
                    01:ce:4c:18:4e:49:64:0b:c0:00:9c:dd:05:3e:77:
                    0b:64:ec:4d:03:d6:1e:31:77:f1:dd:a8:16:bc:99:
                    2d:ee:57:d8:e6:4c:6c:b8:96:70:fc:b0:28:ca:a0:
                    28:b7:49:25:fa:14:64:99:bd:de:73:48:b4:9e:4f:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:93:50:BC:68:75:20:C0:77:22:8D:DF:79:90:19:B5:C9:EB:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D035FA9AA14311F1917926F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.168.0-154.215.177.255

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:55:dc:a6:67:37:8c:cb:ca:09:e3:77:46:76:bb:9e:97:
         c7:b6:63:4d:89:30:08:b8:54:40:42:28:30:dc:93:59:78:8e:
         4e:71:17:76:39:58:9e:b5:4c:7d:85:a8:30:79:8b:f9:d2:d0:
         05:60:7e:91:9d:a5:c7:a8:26:3d:54:07:ff:81:d4:3e:f1:ca:
         ba:1e:a2:2c:e0:49:34:7c:98:a3:b2:cc:b5:6e:a5:3c:df:de:
         55:c6:a0:17:45:65:01:05:ad:22:73:61:e8:d8:23:55:60:27:
         26:4a:0c:50:4f:31:df:d2:56:d0:df:ad:7d:0e:0d:72:de:fc:
         b6:2a:1f:f1:8b:db:55:12:c8:d5:04:d0:d9:d3:5f:3f:cf:95:
         26:2d:f3:54:10:92:cb:20:a0:7f:6b:fd:bb:29:bb:85:b4:2b:
         5d:6c:a4:c5:71:80:39:d6:97:f3:cc:2d:5e:f4:0d:64:3b:42:
         65:94:c7:b2:b7:f4:20:26:8e:ea:b7:e5:33:ba:09:6d:a9:cc:
         31:bc:6d:1d:4c:2a:8c:91:f8:4c:e9:a0:1e:65:e4:ff:c4:cf:
         cb:cc:30:9e:24:63:cc:92:b6:a6:3d:f9:7d:77:fd:a9:fe:20:
         f5:0c:c0:ca:9e:07:44:98:37:18:08:4d:68:74:df:2a:17:d5:
         75:7e:f4:dd
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeN2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI2MTE0NjQxWhcNMjkwODI1MTE0NjQxWjAYMRYw
FAYDVQQDEw02YThlZDIyNS1kNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7qPWzVcZ5kwAwpykCW4d9PY18ihHTKSCDbl+AV3+ya18lRCKcqLC+yiq
zZdydt96re42SfwwbqEKB9rc0Rq6C9F+oSoUO43wlhvZdrfDQEjR6dw8YxSk4pu8
vASDLf6t8FQlV3Aj755gcZFkHBdMYmiiH/QQQTAkPRaJzO3q7mkd7dPyx+rOpIGe
+2T+gg3qE/aFPT2huXfG3e1y+UxwyuwEWiYdHtyv1uMuV7gWEITRA5/WxhrP+JAz
gL4R6kLl/voBzkwYTklkC8AAnN0FPncLZOxNA9YeMXfx3agWvJkt7lfY5kxsuJZw
/LAoyqAot0kl+hRkmb3ec0i0nk9d+wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAPl
k1C8aHUgwHcijd95kBm1yeuKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDM1RkE5QUExNDMxMUYxOTE3OTI2RjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOa16gDBAGa17AwDQYJ
KoZIhvcNAQELBQADggEBAJgqVdymZzeMy8oJ43dGdruel8e2Y02JMAi4VEBCKDDc
k1l4jk5xF3Y5WJ61TH2FqDB5i/nS0AVgfpGdpceoJj1UB/+B1D7xyroeoizgSTR8
mKOyzLVupTzf3lXGoBdFZQEFrSJzYejYI1VgJyZKDFBPMd/SVtDfrX0ODXLe/LYq
H/GL21USyNUE0NnTXz/PlSYt81QQkssgoH9r/bspu4W0K11spMVxgDnWl/PMLV70
DWQ7QmWUx7K39CAmjuq35TO6CW2pzDG8bR1MKoyR+EzpoB5l5P/Ez8vMMJ4kY8yS
tqY9+X13/an+IPUMwMqeB0SYNxgITWh03yoX1XV+9N0=
-----END CERTIFICATE-----