Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47CFF50C2F811F1931A051ECF1D38B0.roa
File:                     D47CFF50C2F811F1931A051ECF1D38B0.roa (raw, json)
Hash identifier:          29aSQ9HhNVr0DmuDXxgN3FUzagP++1ongGTP2Ful6SM=
Subject key identifier:   38:F5:3D:59:05:79:B9:CB:F4:A4:D4:90:B3:B1:1B:B5:DB:82:3A:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47CFF50C2F811F1931A051ECF1D38B0.roa
Signing time:             Thu 08 Oct 2026 09:15:40 +0000
ROA not before:           Thu 08 Oct 2026 09:15:35 +0000
ROA not after:            Sat 07 Nov 2026 09:15:35 +0000
asID:                     131274
IP address blocks:        154.203.32.0/19 maxlen: 24
                          154.206.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126165 (0x1ecd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 09:15:35 2026 GMT
            Not After : Nov  7 09:15:35 2026 GMT
        Subject: CN=6ac75f3c-d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:22:56:a0:a0:8f:18:ff:df:54:f0:82:7a:
                    13:a2:ea:a8:08:15:2c:f6:3b:f8:3c:32:9f:42:48:
                    10:7b:b2:42:8c:74:c4:52:4a:7b:66:20:25:a6:9c:
                    9e:c5:75:d9:48:e0:a7:e6:16:32:54:3a:11:64:3b:
                    5c:71:36:48:2b:3a:3c:f8:ec:f6:ab:4d:e4:de:56:
                    11:78:e2:dc:d2:e5:79:c6:f2:9c:4c:4a:7c:af:7c:
                    f0:67:65:15:46:7d:0f:e3:c6:ac:98:72:4b:3e:52:
                    a2:4e:73:7b:40:e0:a8:57:e7:8b:15:eb:03:ad:cb:
                    b8:d5:20:bb:ec:6f:6c:28:f3:d6:ff:4a:5d:1b:bc:
                    05:75:33:c2:8e:70:8e:d0:65:82:24:9b:0b:9b:1c:
                    5f:c6:09:09:68:e0:b1:c1:d2:26:3f:be:54:95:db:
                    7e:b2:b6:b2:91:d9:7d:04:88:09:2c:f7:2f:c9:14:
                    66:36:4b:ac:d6:ef:de:b5:0a:d4:01:d7:eb:9d:6a:
                    6b:ec:56:62:fd:9c:7b:86:0c:8c:48:3d:8c:4c:3a:
                    b7:1a:f2:3c:fe:a9:32:90:f5:73:00:ad:30:ee:f9:
                    a1:42:6e:81:2a:9d:0c:ac:7b:78:78:83:90:0f:32:
                    7e:28:68:0e:f5:39:a9:7c:87:22:00:01:15:2d:36:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F5:3D:59:05:79:B9:CB:F4:A4:D4:90:B3:B1:1B:B5:DB:82:3A:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47CFF50C2F811F1931A051ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.32.0/19
                  154.206.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d4:fc:e1:bc:9c:bf:b2:a8:fc:03:65:ab:f8:f5:4e:50:f1:48:
         d8:99:60:83:83:eb:d7:b3:89:37:02:5c:93:6d:cd:63:d7:ba:
         c2:f0:46:03:0b:c5:41:de:27:1c:e6:24:28:2d:00:18:d9:16:
         8b:54:27:65:45:00:d1:4d:ad:6e:1e:39:ee:c5:7a:7e:42:ee:
         42:44:ce:fd:fb:ea:1c:69:18:10:15:b6:a6:63:48:19:99:ff:
         a3:4d:f9:8b:d3:e4:19:52:61:ec:f1:f8:2d:08:c1:07:fb:e4:
         3a:2c:1e:33:75:43:20:77:b9:37:d9:3e:71:8c:69:af:85:7a:
         05:34:39:a2:c8:ec:aa:4e:5c:4d:00:5a:79:6b:f5:59:03:33:
         95:e1:f4:cb:e0:c2:a6:00:68:76:6b:39:6b:e1:78:3e:ca:62:
         3a:63:46:5a:43:2f:d5:4b:28:d1:b1:d5:13:c2:17:25:96:b8:
         0d:10:a6:89:5c:10:91:34:03:e1:ed:70:74:1d:4b:73:d7:ec:
         c1:fe:e5:82:e4:fb:47:f6:23:2c:84:66:62:08:de:ec:04:8b:
         e3:ef:9c:b1:ae:77:b2:ef:6c:41:09:33:c9:c2:57:67:d4:5d:
         c3:92:4b:17:cf:cc:19:e1:60:fc:d6:7b:a8:b2:3a:86:48:7a:
         c9:c6:60:9e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAezVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA4MDkxNTM1WhcNMjYxMTA3MDkxNTM1WjAYMRYw
FAYDVQQDEw02YWM3NWYzYy1kOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsVwiVqCgjxj/31TwgnoTouqoCBUs9jv4PDKfQkgQe7JCjHTEUkp7ZiAl
ppyexXXZSOCn5hYyVDoRZDtccTZIKzo8+Oz2q03k3lYReOLc0uV5xvKcTEp8r3zw
Z2UVRn0P48asmHJLPlKiTnN7QOCoV+eLFesDrcu41SC77G9sKPPW/0pdG7wFdTPC
jnCO0GWCJJsLmxxfxgkJaOCxwdImP75Uldt+sraykdl9BIgJLPcvyRRmNkus1u/e
tQrUAdfrnWpr7FZi/Zx7hgyMSD2MTDq3GvI8/qkykPVzAK0w7vmhQm6BKp0MrHt4
eIOQDzJ+KGgO9TmpfIciAAEVLTaDWQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDj1
PVkFebnL9KTUkLOxG7Xbgjo+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDdDRkY1MEMyRjgxMUYxOTMxQTA1MUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmssgAwQDms4wMA0GCSqG
SIb3DQEBCwUAA4IBAQDU/OG8nL+yqPwDZav49U5Q8UjYmWCDg+vXs4k3AlyTbc1j
17rC8EYDC8VB3icc5iQoLQAY2RaLVCdlRQDRTa1uHjnuxXp+Qu5CRM79++ocaRgQ
FbamY0gZmf+jTfmL0+QZUmHs8fgtCMEH++Q6LB4zdUMgd7k32T5xjGmvhXoFNDmi
yOyqTlxNAFp5a/VZAzOV4fTL4MKmAGh2azlr4Xg+ymI6Y0ZaQy/VSyjRsdUTwhcl
lrgNEKaJXBCRNAPh7XB0HUtz1+zB/uWC5PtH9iMshGZiCN7sBIvj75yxrney72xB
CTPJwldn1F3DkksXz8wZ4WD81nuosjqGSHrJxmCe
-----END CERTIFICATE-----