Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E491BE62CC4E11F1B1591208CF1D38B0.roa
File:                     E491BE62CC4E11F1B1591208CF1D38B0.roa (raw, json)
Hash identifier:          6wwGDiR/DBHFhjPl2OAsmE6wx0KI9WfVBeSjMiSB8fY=
Subject key identifier:   4F:DA:DD:88:A6:59:66:93:AC:DF:98:B0:D5:F8:C5:D6:F1:32:24:A1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E491BE62CC4E11F1B1591208CF1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:24:24 +0000
ROA not before:           Tue 20 Oct 2026 06:24:20 +0000
ROA not after:            Fri 06 Nov 2026 06:24:20 +0000
asID:                     8796
IP address blocks:        154.86.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126688 (0x1eee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:24:20 2026 GMT
            Not After : Nov  6 06:24:20 2026 GMT
        Subject: CN=6ad70918-2575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:dc:53:fc:70:26:11:68:7a:ed:df:b5:34:
                    87:80:42:dd:35:09:6c:4f:f1:51:01:06:94:4c:c8:
                    80:cd:ae:1c:99:d4:79:7e:c6:63:75:ab:7b:b8:68:
                    0d:69:ef:35:04:de:e1:d2:06:48:b3:75:9a:d7:84:
                    78:ab:14:28:31:0d:90:36:59:69:72:bf:de:ab:ef:
                    b9:7d:66:c2:ab:09:31:2b:ac:e0:2e:9c:56:26:23:
                    1b:53:97:0d:b1:11:46:c7:79:6c:a2:8a:c8:61:e8:
                    84:40:e4:bd:f1:2f:34:19:aa:5b:b8:39:ca:47:de:
                    1c:73:06:76:9f:4d:2c:fc:d0:d5:6f:6f:0a:4c:fc:
                    7e:a9:05:2b:52:2d:19:d6:f8:38:e9:30:db:6a:a2:
                    ee:b8:2f:c4:96:48:da:b4:99:25:8e:11:3b:b5:4f:
                    ac:26:5f:c1:38:c3:db:d3:d2:93:8f:73:93:dc:db:
                    e8:fe:64:b8:d8:0d:36:ed:d9:19:42:0b:32:4c:1d:
                    76:31:24:15:6d:3e:27:40:2d:7b:53:8e:00:54:03:
                    cb:e3:99:cd:10:32:e4:f0:ea:4c:81:2b:90:30:93:
                    50:a6:22:2d:bd:eb:30:51:12:3d:2a:1e:87:da:dc:
                    00:89:f3:14:5e:0f:08:05:d9:ce:7c:ab:9f:95:b1:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:DD:88:A6:59:66:93:AC:DF:98:B0:D5:F8:C5:D6:F1:32:24:A1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E491BE62CC4E11F1B1591208CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:b4:4d:b4:47:8d:8e:a8:43:33:b2:c2:b9:bb:8a:8a:7f:
         84:8a:27:33:c3:d3:0b:14:79:5d:e2:04:e3:be:c9:5c:60:5d:
         14:58:69:b2:05:26:20:a2:da:ce:fa:dd:59:4c:1d:00:e8:a2:
         14:fd:17:4f:88:af:04:93:8b:bc:e7:59:76:ce:fb:3b:11:83:
         c9:9d:b3:65:20:75:05:06:0f:3e:24:33:8d:a9:5c:7d:8d:f3:
         4e:d1:29:d0:5c:5d:f7:4a:c0:3e:80:af:87:bd:5f:e3:eb:59:
         ae:b6:6f:f5:78:ac:26:3a:90:12:4d:44:59:fd:e7:83:df:d5:
         7b:db:71:d1:53:39:73:d9:8b:79:96:e5:09:11:34:55:ca:2c:
         cc:d3:a8:23:82:92:ca:e5:18:74:02:03:d6:24:a2:90:6c:d6:
         20:6c:b5:d8:57:4b:f2:49:36:66:45:ee:ce:6e:da:08:d8:4f:
         59:b3:0e:bb:fd:5d:b6:ed:86:00:c0:5e:75:7d:23:75:00:2a:
         f9:08:5d:73:ba:23:cf:ea:e1:0a:99:bb:d7:9c:74:01:12:3d:
         8f:4d:57:30:b9:8d:3a:cc:55:3d:4b:cd:e8:7b:43:a9:d0:90:
         51:8d:23:39:4b:96:47:45:b0:9a:11:cb:22:d7:35:a6:8d:2d:
         d4:59:fd:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe7gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDIwMDYyNDIwWhcNMjYxMTA2MDYyNDIwWjAYMRYw
FAYDVQQDEw02YWQ3MDkxOC0yNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SncU/xwJhFoeu3ftTSHgELdNQlsT/FRAQaUTMiAza4cmdR5fsZjdat7
uGgNae81BN7h0gZIs3Wa14R4qxQoMQ2QNllpcr/eq++5fWbCqwkxK6zgLpxWJiMb
U5cNsRFGx3lsoorIYeiEQOS98S80GapbuDnKR94ccwZ2n00s/NDVb28KTPx+qQUr
Ui0Z1vg46TDbaqLuuC/ElkjatJkljhE7tU+sJl/BOMPb09KTj3OT3Nvo/mS42A02
7dkZQgsyTB12MSQVbT4nQC17U44AVAPL45nNEDLk8OpMgSuQMJNQpiItveswURI9
Kh6H2twAifMUXg8IBdnOfKuflbHd7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE/a
3YimWWaTrN+YsNX4xdbxMiShMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDkxQkU2MkNDNEUxMUYxQjE1OTEyMDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQCe57RNtEeNjqhDM7LCubuKin+Eiiczw9MLFHld4gTjvslcYF0UWGmy
BSYgotrO+t1ZTB0A6KIU/RdPiK8Ek4u851l2zvs7EYPJnbNlIHUFBg8+JDONqVx9
jfNO0SnQXF33SsA+gK+HvV/j61mutm/1eKwmOpASTURZ/eeD39V723HRUzlz2Yt5
luUJETRVyizM06gjgpLK5Rh0AgPWJKKQbNYgbLXYV0vySTZmRe7ObtoI2E9Zsw67
/V227YYAwF51fSN1ACr5CF1zuiPP6uEKmbvXnHQBEj2PTVcwuY06zFU9S83oe0Op
0JBRjSM5S5ZHRbCaEcsi1zWmjS3UWf39
-----END CERTIFICATE-----