Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D42A39CAB7E811F1ABB3A2DECE1D38B0.roa
File:                     D42A39CAB7E811F1ABB3A2DECE1D38B0.roa (raw, json)
Hash identifier:          Z6sR5B7tUirjSeq0Ing16aDcDSju3OIay1nXac2QL9w=
Subject key identifier:   8D:A4:13:FD:A8:95:13:F4:79:0D:9F:92:0D:47:15:94:C9:A5:25:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D42A39CAB7E811F1ABB3A2DECE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:23:25 +0000
ROA not before:           Thu 24 Sep 2026 07:23:21 +0000
ROA not after:            Mon 02 Nov 2026 07:23:21 +0000
asID:                     198969
IP address blocks:        154.83.177.0/24 maxlen: 24
                          154.83.178.0/24 maxlen: 24
                          154.83.179.0/24 maxlen: 24
                          154.83.180.0/24 maxlen: 24
                          154.83.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 15:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125575 (0x1ea87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:23:21 2026 GMT
            Not After : Nov  2 07:23:21 2026 GMT
        Subject: CN=6ab4cfed-9b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:82:52:a7:37:60:38:4b:d0:c0:c6:fa:f9:12:
                    af:9d:08:36:b3:5f:c2:7b:21:f5:4c:35:d9:f4:2a:
                    25:2a:a7:47:71:51:9a:34:4f:e3:91:5c:03:b2:e8:
                    93:fd:9f:de:2b:13:63:6e:90:24:f0:e1:07:6f:97:
                    e1:e9:c0:df:3a:db:41:78:19:11:ec:23:32:4d:59:
                    ad:55:f0:4a:f8:a0:95:24:e3:c1:a5:18:43:cc:e0:
                    e4:32:b4:d6:a7:14:86:de:bc:c6:f4:f6:6c:85:86:
                    ef:e0:09:93:d4:cd:90:af:33:03:4c:a8:eb:d8:14:
                    99:00:c0:e7:86:52:1e:f1:07:56:ea:55:e1:f6:f5:
                    47:7d:3b:fe:89:c9:0c:a2:72:c8:df:e6:36:10:51:
                    61:f8:44:3d:a2:c2:12:ee:73:17:c6:50:0c:c3:d5:
                    73:17:f3:c2:da:d3:61:5a:cf:29:ef:f0:0e:4f:f9:
                    56:b2:53:10:b7:c3:a8:cf:35:36:1b:22:e6:1d:81:
                    90:73:6e:e7:ba:c2:b2:ad:b3:c0:7b:de:f1:e1:1c:
                    cc:15:46:dc:31:e0:35:16:54:fa:09:05:fd:b8:ff:
                    2c:89:f5:d0:7c:c6:44:90:f3:d6:9b:a0:29:f5:c2:
                    56:d6:46:a1:ee:5b:80:70:00:27:e3:94:5f:82:6c:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A4:13:FD:A8:95:13:F4:79:0D:9F:92:0D:47:15:94:C9:A5:25:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D42A39CAB7E811F1ABB3A2DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.177.0-154.83.181.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:e5:af:4d:41:44:ed:d8:e9:f0:fb:f5:f2:66:0f:ca:6f:
         a2:b7:66:ea:87:59:65:0f:f7:b8:04:87:73:09:27:b3:23:29:
         3c:42:25:9f:04:26:63:08:d5:21:10:4c:c4:fe:47:e2:3b:fd:
         77:27:09:0e:d9:05:b0:75:47:2e:5f:74:57:79:9c:0b:44:3a:
         ef:d2:53:a4:25:ae:fc:88:47:80:78:4d:31:17:04:cd:e9:68:
         7c:ec:29:df:b2:3b:15:cb:81:cd:f9:63:31:3c:b5:09:52:ee:
         ef:19:7b:dc:5c:7a:43:d5:0b:a3:35:ac:59:f8:5e:9c:e8:5c:
         35:4f:d3:6e:0a:ae:c8:4e:52:35:f9:fa:a9:77:ad:55:18:2e:
         38:f0:44:7e:cb:ab:a9:c8:32:78:94:b8:4e:ef:29:5d:f8:ad:
         f2:09:81:da:c5:8e:3c:b1:0f:0e:24:b8:0a:c3:b3:0f:7f:1f:
         6e:b2:14:b3:68:57:18:c0:46:fc:91:40:3f:be:e9:ba:e6:01:
         9c:22:b6:2d:ce:7d:30:95:30:74:62:cd:a8:e1:44:2c:1b:96:
         f0:fe:50:63:16:c2:e5:a2:97:c4:15:27:bf:76:0c:7c:c7:38:
         3f:46:c0:4a:ed:75:69:65:23:89:ab:34:e7:71:b0:2c:2b:e4:
         d3:51:f9:0b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeqHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI0MDcyMzIxWhcNMjYxMTAyMDcyMzIxWjAYMRYw
FAYDVQQDEw02YWI0Y2ZlZC05YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/YJSpzdgOEvQwMb6+RKvnQg2s1/CeyH1TDXZ9ColKqdHcVGaNE/jkVwD
suiT/Z/eKxNjbpAk8OEHb5fh6cDfOttBeBkR7CMyTVmtVfBK+KCVJOPBpRhDzODk
MrTWpxSG3rzG9PZshYbv4AmT1M2QrzMDTKjr2BSZAMDnhlIe8QdW6lXh9vVHfTv+
ickMonLI3+Y2EFFh+EQ9osIS7nMXxlAMw9VzF/PC2tNhWs8p7/AOT/lWslMQt8Oo
zzU2GyLmHYGQc27nusKyrbPAe97x4RzMFUbcMeA1FlT6CQX9uP8sifXQfMZEkPPW
m6Ap9cJW1kah7luAcAAn45RfgmxJiQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFI2k
E/2olRP0eQ2fkg1HFZTJpSW2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDJBMzlDQUI3RTgxMUYxQUJCM0EyREVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaU7EDBAGaU7QwDQYJ
KoZIhvcNAQELBQADggEBAKRk5a9NQUTt2Onw+/XyZg/Kb6K3ZuqHWWUP97gEh3MJ
J7MjKTxCJZ8EJmMI1SEQTMT+R+I7/XcnCQ7ZBbB1Ry5fdFd5nAtEOu/SU6QlrvyI
R4B4TTEXBM3paHzsKd+yOxXLgc35YzE8tQlS7u8Ze9xcekPVC6M1rFn4XpzoXDVP
024KrshOUjX5+ql3rVUYLjjwRH7Lq6nIMniUuE7vKV34rfIJgdrFjjyxDw4kuArD
sw9/H26yFLNoVxjARvyRQD++6brmAZwiti3OfTCVMHRizajhRCwblvD+UGMWwuWi
l8QVJ792DHzHOD9GwErtdWllI4mrNOdxsCwr5NNR+Qs=
-----END CERTIFICATE-----