Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF93450696F811F18BFBEECCCE1D38B0.roa
File:                     DF93450696F811F18BFBEECCCE1D38B0.roa (raw, json)
Hash identifier:          zMfwIb77MbW/xwaitxNdEQTdRB0BtEK+ZcseUzH6nu4=
Subject key identifier:   5F:51:09:65:78:E3:93:96:0C:F1:55:65:D2:96:B3:D9:8A:07:95:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF93450696F811F18BFBEECCCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:25:07 +0000
ROA not before:           Thu 13 Aug 2026 09:25:03 +0000
ROA not after:            Mon 21 Sep 2026 09:25:03 +0000
asID:                     401783
IP address blocks:        154.222.112.0/24 maxlen: 24
                          154.222.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122603 (0x1deeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 09:25:03 2026 GMT
            Not After : Sep 21 09:25:03 2026 GMT
        Subject: CN=6a7d8d73-e2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:60:34:3c:8b:0d:02:1d:2d:30:bd:bf:69:
                    59:22:e1:22:99:1b:a8:2a:f5:cb:a9:55:5f:f6:e2:
                    ff:cc:74:ac:92:b4:b3:17:69:e7:d8:e8:2c:06:66:
                    74:9e:e9:bc:ac:80:c5:bf:e6:5c:1b:38:aa:1d:c6:
                    4d:df:f2:6f:24:ad:b3:18:99:c4:9e:80:db:f7:45:
                    d0:b4:da:35:c2:02:47:3e:76:61:b0:73:e3:72:b8:
                    3c:6d:c6:8d:05:66:6d:ea:81:b8:89:60:a8:28:39:
                    f7:19:dc:d8:93:7f:5e:a2:a3:f2:a7:39:26:d6:ca:
                    8f:3c:ea:55:d8:33:36:05:f3:53:97:ed:5c:21:f8:
                    ea:a7:b8:6a:7f:cb:88:f0:74:d4:1a:af:aa:b9:8a:
                    5f:81:2f:f2:7c:34:2d:7b:7a:18:67:ce:2c:f5:49:
                    41:22:7a:f7:01:4c:ed:cf:17:7d:19:df:40:36:f9:
                    47:bb:3d:1d:fa:e3:4b:27:b6:ab:cf:23:71:a2:be:
                    f7:7f:2d:8a:29:2b:b6:27:40:18:e8:25:aa:84:01:
                    04:c3:70:af:38:d4:b4:44:08:a9:b9:0d:3c:39:0d:
                    33:45:62:a8:f5:71:dd:e7:f5:17:a4:c5:cb:0f:12:
                    58:db:e1:fc:6b:0d:5d:17:b0:2b:bd:52:d8:46:f0:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:51:09:65:78:E3:93:96:0C:F1:55:65:D2:96:B3:D9:8A:07:95:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF93450696F811F18BFBEECCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:35:76:b7:23:14:63:7e:03:25:af:ac:0d:ec:6b:41:e2:51:
         b3:36:d1:d3:4a:22:d5:52:94:c2:00:78:3d:46:4a:f0:97:f4:
         dd:c7:15:3b:09:34:b0:6d:ac:38:44:8c:e9:32:f8:5d:17:b2:
         9e:e5:52:2c:cf:f7:94:64:1a:bf:d7:50:86:fa:4b:cd:8e:15:
         29:ac:a3:01:20:26:1a:4c:b2:bc:79:f1:74:32:58:0b:1a:9f:
         76:2d:3d:6b:25:b0:70:af:9a:77:5a:29:68:69:35:08:fd:b8:
         5b:d5:82:9b:8c:73:cb:ad:02:36:69:6f:95:b1:ba:83:55:4c:
         ea:a4:54:99:78:56:cd:d7:02:39:dc:e1:87:1f:16:74:df:c5:
         c1:e7:0c:59:d0:24:4d:ce:67:b8:e3:cc:64:b3:b3:b3:31:13:
         d5:7f:19:4a:11:d9:e1:57:29:72:30:de:2b:a2:c5:fb:8b:05:
         8a:ba:c3:23:fe:db:88:1d:81:2d:8c:40:57:bd:a7:97:b0:1a:
         cb:18:99:59:35:69:a3:2b:76:1c:ba:ec:f6:21:17:c4:ef:c7:
         80:d8:3f:b7:06:f5:1a:5d:29:d3:fc:a6:db:09:83:28:72:e7:
         5e:d8:f4:41:97:3f:3d:fc:4a:94:4e:56:ae:5d:b3:07:b9:21:
         35:66:1b:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd7rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEzMDkyNTAzWhcNMjYwOTIxMDkyNTAzWjAYMRYw
FAYDVQQDEw02YTdkOGQ3My1lMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtZtgNDyLDQIdLTC9v2lZIuEimRuoKvXLqVVf9uL/zHSskrSzF2nn2Ogs
BmZ0num8rIDFv+ZcGziqHcZN3/JvJK2zGJnEnoDb90XQtNo1wgJHPnZhsHPjcrg8
bcaNBWZt6oG4iWCoKDn3GdzYk39eoqPypzkm1sqPPOpV2DM2BfNTl+1cIfjqp7hq
f8uI8HTUGq+quYpfgS/yfDQte3oYZ84s9UlBInr3AUztzxd9Gd9ANvlHuz0d+uNL
J7arzyNxor73fy2KKSu2J0AY6CWqhAEEw3CvONS0RAipuQ08OQ0zRWKo9XHd5/UX
pMXLDxJY2+H8aw1dF7ArvVLYRvAm4wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF9R
CWV445OWDPFVZdKWs9mKB5WmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERjkzNDUwNjk2RjgxMUYxOEJGQkVFQ0NDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5wMA0GCSqGSIb3DQEB
CwUAA4IBAQDCNXa3IxRjfgMlr6wN7GtB4lGzNtHTSiLVUpTCAHg9Rkrwl/TdxxU7
CTSwbaw4RIzpMvhdF7Ke5VIsz/eUZBq/11CG+kvNjhUprKMBICYaTLK8efF0MlgL
Gp92LT1rJbBwr5p3WiloaTUI/bhb1YKbjHPLrQI2aW+VsbqDVUzqpFSZeFbN1wI5
3OGHHxZ038XB5wxZ0CRNzme448xks7OzMRPVfxlKEdnhVylyMN4rosX7iwWKusMj
/tuIHYEtjEBXvaeXsBrLGJlZNWmjK3Ycuuz2IRfE78eA2D+3BvUaXSnT/KbbCYMo
cude2PRBlz89/EqUTlauXbMHuSE1Zht4
-----END CERTIFICATE-----