Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDCD3904C6E311F19F1691B0CE1D38B0.roa
File:                     EDCD3904C6E311F19F1691B0CE1D38B0.roa (raw, json)
Hash identifier:          +8t8SehBiLST8nPdVRNxbRnK2BpDtZYl9uTvGhx/ZQc=
Subject key identifier:   5B:F5:50:45:A5:A6:B8:17:DE:11:01:C6:57:61:79:2F:76:3E:44:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDCD3904C6E311F19F1691B0CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:56:08 +0000
ROA not before:           Tue 13 Oct 2026 08:56:03 +0000
ROA not after:            Thu 12 Nov 2026 08:56:03 +0000
asID:                     147176
IP address blocks:        154.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126412 (0x1edcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 08:56:03 2026 GMT
            Not After : Nov 12 08:56:03 2026 GMT
        Subject: CN=6acdf228-b5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:4c:b6:a3:27:4e:72:04:6d:e5:6c:91:6f:
                    ff:dd:bd:ed:37:05:31:e1:6b:c8:d6:15:03:49:1a:
                    58:a7:bb:08:20:60:0e:86:cc:27:d3:5e:eb:20:91:
                    61:7a:81:35:d1:c4:e1:d0:63:33:66:03:60:c4:dc:
                    bd:7f:62:79:9f:e1:bc:70:1a:70:e8:06:1d:1c:51:
                    04:a9:1f:1a:ee:99:d6:05:9d:2a:3b:5b:14:71:f1:
                    bf:98:03:eb:5d:5d:cc:d7:d9:c4:2b:de:59:14:00:
                    fb:27:d3:14:8a:d7:96:c5:f0:1b:ed:14:85:ae:88:
                    04:fe:f5:de:65:ac:eb:17:03:8c:5b:0c:2f:3f:39:
                    c6:8f:8a:3a:61:1d:d8:90:d5:73:55:dc:7a:bf:4f:
                    ec:73:78:76:91:7f:d9:2b:cd:96:15:f7:f4:81:d4:
                    d8:db:11:89:ce:55:69:14:dc:12:61:74:e9:ca:86:
                    0e:62:3b:a5:00:98:2e:8e:18:38:21:02:35:0e:c1:
                    be:ba:1a:ad:41:37:fd:5f:2a:1f:7a:51:d6:3c:02:
                    74:85:39:0f:21:94:77:07:5e:bb:be:3d:38:aa:ea:
                    09:76:73:6a:cd:55:ac:ab:76:18:52:6e:a8:aa:d7:
                    2c:6f:80:10:04:39:8b:76:6e:b9:fe:19:cb:27:9f:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:50:45:A5:A6:B8:17:DE:11:01:C6:57:61:79:2F:76:3E:44:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDCD3904C6E311F19F1691B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:71:ac:34:0d:5b:c5:b7:70:e1:74:98:3a:e2:74:02:15:b3:
         40:00:c8:b8:a1:0a:8e:9f:24:24:77:c0:9a:19:5b:48:3d:25:
         d1:e1:c2:20:76:a5:28:fb:5e:19:be:a4:81:ba:8c:11:5c:e0:
         09:35:c7:3b:62:db:4e:28:ee:1d:eb:e9:10:29:8a:76:2e:27:
         7f:20:73:c1:85:ae:ef:42:6c:18:6b:7c:e3:1e:01:8e:5c:c7:
         18:58:4b:3a:3d:98:36:a0:90:ec:ba:4e:02:35:58:06:c0:4d:
         c9:a5:85:02:10:68:5e:de:28:1e:ad:ca:a3:29:04:4b:13:6d:
         aa:ce:01:41:43:3f:b2:f0:be:d7:29:80:25:76:3a:cc:f9:6e:
         22:a1:15:a8:be:50:fb:d8:34:f7:03:68:2b:b8:57:55:b0:21:
         37:58:47:78:ca:ce:92:c6:5b:27:29:aa:7d:df:35:81:fe:69:
         a3:2d:e3:79:6a:67:16:0d:cf:6f:cb:b0:71:b9:5a:3f:6f:cd:
         bd:82:39:7b:55:ac:b1:cf:3f:00:b7:69:55:44:b1:db:95:a4:
         c9:5c:92:17:12:3c:c5:1b:7c:9e:64:91:6d:fd:6b:c7:2d:0a:
         6f:1a:c7:a0:0e:e8:32:0c:0a:1d:ed:87:13:41:70:04:13:ae:
         5d:52:20:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe3MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDEzMDg1NjAzWhcNMjYxMTEyMDg1NjAzWjAYMRYw
FAYDVQQDEw02YWNkZjIyOC1iNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1D5MtqMnTnIEbeVskW//3b3tNwUx4WvI1hUDSRpYp7sIIGAOhswn017r
IJFheoE10cTh0GMzZgNgxNy9f2J5n+G8cBpw6AYdHFEEqR8a7pnWBZ0qO1sUcfG/
mAPrXV3M19nEK95ZFAD7J9MUiteWxfAb7RSFrogE/vXeZazrFwOMWwwvPznGj4o6
YR3YkNVzVdx6v0/sc3h2kX/ZK82WFff0gdTY2xGJzlVpFNwSYXTpyoYOYjulAJgu
jhg4IQI1DsG+uhqtQTf9XyofelHWPAJ0hTkPIZR3B167vj04quoJdnNqzVWsq3YY
Um6oqtcsb4AQBDmLdm65/hnLJ5+mKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFv1
UEWlprgX3hEBxldheS92PkRJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRENEMzkwNEM2RTMxMUYxOUYxNjkxQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSZMA0GCSqGSIb3DQEB
CwUAA4IBAQDKcaw0DVvFt3DhdJg64nQCFbNAAMi4oQqOnyQkd8CaGVtIPSXR4cIg
dqUo+14ZvqSBuowRXOAJNcc7YttOKO4d6+kQKYp2Lid/IHPBha7vQmwYa3zjHgGO
XMcYWEs6PZg2oJDsuk4CNVgGwE3JpYUCEGhe3igercqjKQRLE22qzgFBQz+y8L7X
KYAldjrM+W4ioRWovlD72DT3A2gruFdVsCE3WEd4ys6SxlsnKap93zWB/mmjLeN5
amcWDc9vy7BxuVo/b829gjl7Vayxzz8At2lVRLHblaTJXJIXEjzFG3yeZJFt/WvH
LQpvGsegDugyDAod7YcTQXAEE65dUiBn
-----END CERTIFICATE-----