Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55D2EDAA38111F192F6200BCF1D38B0.roa
File:                     E55D2EDAA38111F192F6200BCF1D38B0.roa (raw, json)
Hash identifier:          i3dSTtEvfPsF1QgSwABPTQfaUH/adEjKGkQyxCTBRPM=
Subject key identifier:   E7:24:3D:D1:21:BE:87:09:50:B1:9B:44:C6:B3:4D:F2:70:1F:91:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55D2EDAA38111F192F6200BCF1D38B0.roa
Signing time:             Sat 29 Aug 2026 08:16:12 +0000
ROA not before:           Sat 29 Aug 2026 08:16:08 +0000
ROA not after:            Tue 08 Sep 2026 08:16:08 +0000
asID:                     64126
IP address blocks:        154.88.128.0/17 maxlen: 24
                          154.88.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123895 (0x1e3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 08:16:08 2026 GMT
            Not After : Sep  8 08:16:08 2026 GMT
        Subject: CN=6a92954c-eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:7c:4e:f3:ee:8e:36:f9:d3:dd:7c:48:12:
                    6b:81:86:66:27:2b:8f:78:4b:de:26:21:ed:ee:ad:
                    37:22:0a:bd:4f:88:16:be:da:59:7d:0d:e2:59:3f:
                    2d:80:cc:90:eb:51:97:be:4f:da:fb:3c:a8:a5:c7:
                    2a:7f:93:19:e5:e7:26:c8:43:76:50:41:67:9f:e0:
                    f9:ab:e3:b5:d5:75:f4:45:5e:ad:84:fc:b1:56:a8:
                    8d:97:0e:6e:f5:79:29:e7:90:59:81:2a:56:91:15:
                    0b:37:cb:77:c3:50:d0:45:55:61:78:4e:d5:2d:ad:
                    3c:6d:54:89:8f:d1:db:06:f3:d6:4f:5a:50:c9:79:
                    9a:38:11:da:52:dd:1b:31:5c:01:b3:18:06:5f:8a:
                    8a:1b:d3:52:49:4d:e8:87:2f:9a:ec:ae:fe:a2:1d:
                    46:6a:92:a7:eb:72:79:88:aa:06:9a:41:af:54:0e:
                    ea:e0:90:d0:9c:21:f2:0e:e5:63:51:e1:d1:04:da:
                    da:db:a0:85:16:01:00:40:27:4c:ec:67:87:95:5a:
                    d9:b1:15:49:00:79:17:39:84:84:a5:60:9d:72:0f:
                    e2:00:95:2e:7b:97:7d:bf:8a:e8:73:22:39:b7:b2:
                    ea:ac:92:ea:2b:d0:fd:ed:81:58:a7:23:77:55:44:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:3D:D1:21:BE:87:09:50:B1:9B:44:C6:B3:4D:F2:70:1F:91:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55D2EDAA38111F192F6200BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ca:4f:03:ac:12:9b:6e:e9:f5:e9:21:fe:71:d1:f8:e3:b5:75:
         7a:32:e6:d9:59:87:88:5b:12:f0:c5:fb:e1:d0:02:3e:d8:fe:
         9a:af:34:9a:d5:6c:3f:2b:1b:9e:c7:05:c7:21:88:a9:87:b2:
         ac:ce:3c:0f:6f:38:91:b2:e5:66:1b:05:54:89:61:a7:1e:a7:
         ca:5a:d2:a0:24:11:a7:ac:e5:e1:c9:c5:37:29:10:ae:42:69:
         e5:15:1a:2c:c5:d1:a9:cc:c9:6d:d3:31:57:f8:9f:d1:ef:dc:
         ab:6d:ba:66:14:eb:a5:29:05:09:ab:49:89:e3:cb:0e:8a:37:
         ec:11:ed:b7:b3:2e:67:b4:5c:f8:f3:54:cd:80:92:47:5f:a1:
         b0:11:11:ca:5a:d6:7f:03:39:16:97:6b:30:7c:1a:33:db:79:
         5a:ba:3a:07:6c:37:c3:db:4f:ca:14:59:15:18:0c:39:14:44:
         36:9e:b1:f9:95:7d:39:68:74:be:24:6e:ea:21:5b:3c:b5:f7:
         15:ae:16:50:cb:6c:d0:1b:35:12:5a:c1:41:98:d6:12:62:d6:
         40:e9:a9:6d:1b:21:ef:e4:ec:bb:22:6f:3f:4f:3d:c7:6d:59:
         61:6d:5c:8f:25:d9:77:e0:33:f4:bc:9c:9f:f3:a2:57:ce:97:
         c7:a4:cb:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeP3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI5MDgxNjA4WhcNMjYwOTA4MDgxNjA4WjAYMRYw
FAYDVQQDEw02YTkyOTU0Yy1lYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3Z8TvPujjb50918SBJrgYZmJyuPeEveJiHt7q03Igq9T4gWvtpZfQ3i
WT8tgMyQ61GXvk/a+zyopccqf5MZ5ecmyEN2UEFnn+D5q+O11XX0RV6thPyxVqiN
lw5u9Xkp55BZgSpWkRULN8t3w1DQRVVheE7VLa08bVSJj9HbBvPWT1pQyXmaOBHa
Ut0bMVwBsxgGX4qKG9NSSU3ohy+a7K7+oh1GapKn63J5iKoGmkGvVA7q4JDQnCHy
DuVjUeHRBNra26CFFgEAQCdM7GeHlVrZsRVJAHkXOYSEpWCdcg/iAJUue5d9v4ro
cyI5t7LqrJLqK9D97YFYpyN3VURtEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOck
PdEhvocJULGbRMazTfJwH5EsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTVEMkVEQUEzODExMUYxOTJGNjIwMEJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmliAMA0GCSqGSIb3DQEB
CwUAA4IBAQDKTwOsEptu6fXpIf5x0fjjtXV6MubZWYeIWxLwxfvh0AI+2P6arzSa
1Ww/KxuexwXHIYiph7KszjwPbziRsuVmGwVUiWGnHqfKWtKgJBGnrOXhycU3KRCu
QmnlFRosxdGpzMlt0zFX+J/R79yrbbpmFOulKQUJq0mJ48sOijfsEe23sy5ntFz4
81TNgJJHX6GwERHKWtZ/AzkWl2swfBoz23laujoHbDfD20/KFFkVGAw5FEQ2nrH5
lX05aHS+JG7qIVs8tfcVrhZQy2zQGzUSWsFBmNYSYtZA6altGyHv5Oy7Im8/Tz3H
bVlhbVyPJdl34DP0vJyf86JXzpfHpMtI
-----END CERTIFICATE-----