Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6DE34EBE2911F19B00F5ABCE1D38B0.roa
File:                     EE6DE34EBE2911F19B00F5ABCE1D38B0.roa (raw, json)
Hash identifier:          CXuK5w+mOQELxww7J0z6xod2Z8eG/Xu+g39cVeB/wFM=
Subject key identifier:   E7:6F:14:41:A5:EE:3B:51:F2:5B:06:FB:ED:2C:38:EA:BF:B8:C1:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6DE34EBE2911F19B00F5ABCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:24:33 +0000
ROA not before:           Fri 02 Oct 2026 06:24:29 +0000
ROA not after:            Mon 09 Nov 2026 06:24:29 +0000
asID:                     61112
IP address blocks:        154.82.136.0/23 maxlen: 24
                          154.82.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125889 (0x1ebc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 06:24:29 2026 GMT
            Not After : Nov  9 06:24:29 2026 GMT
        Subject: CN=6abf4e21-bd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:eb:cf:3e:17:85:0e:f6:df:ef:e3:a2:1f:
                    86:a7:81:ea:c4:da:65:fe:e8:21:24:74:9c:c7:36:
                    b6:ee:c8:df:bf:49:32:2d:d0:07:9f:22:07:60:fb:
                    63:c4:76:bd:d2:a5:94:fa:a9:1e:7c:b2:a6:ba:f6:
                    91:0e:be:60:16:93:0d:86:5c:b0:c8:de:18:b0:62:
                    cf:bd:08:41:18:97:26:a1:76:24:14:31:98:63:e4:
                    d4:2a:06:6b:0f:28:62:91:22:cd:83:e1:fe:de:8e:
                    30:2c:d2:a3:f3:d1:97:ff:e0:e5:ff:15:9c:70:42:
                    87:50:cb:7f:cc:e2:92:dc:78:69:51:41:03:b3:e8:
                    cc:a9:73:6a:19:67:cf:85:5e:96:75:b1:e0:ff:ef:
                    04:e0:dc:ac:cc:7d:7b:1b:14:6c:89:ae:fa:8d:fb:
                    b2:cb:46:d6:06:ba:5b:c0:8f:93:91:e2:df:b4:34:
                    cf:28:75:3c:ec:8c:7f:89:2c:08:e5:7c:87:7b:59:
                    b0:b2:ae:9c:2d:40:e5:fd:39:d0:00:a1:6b:1f:f5:
                    a5:6d:89:dd:5a:e3:d4:8f:25:02:ac:55:84:44:2e:
                    9f:cc:0d:40:84:63:50:72:f4:8b:2e:1d:ee:2e:ec:
                    b9:ef:96:b4:f4:c8:d7:59:d4:a3:0e:6d:53:96:a7:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:14:41:A5:EE:3B:51:F2:5B:06:FB:ED:2C:38:EA:BF:B8:C1:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6DE34EBE2911F19B00F5ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:9e:d0:ea:53:d6:a4:75:e3:18:49:3c:48:a5:f5:25:f8:
         a5:23:9b:45:b7:eb:64:05:70:5f:7c:e5:ef:de:f8:a5:e6:73:
         0a:e4:0c:9b:ca:7e:b6:1d:05:cb:d9:cf:17:cd:61:32:35:a4:
         85:e0:0e:dc:2f:32:b6:34:1c:12:f0:df:bd:06:4f:f5:dd:55:
         15:26:ae:a1:f5:a9:0e:de:ab:b3:57:83:77:c4:d0:8e:cb:1b:
         f6:a8:36:e3:1b:75:70:bf:4a:5c:a1:be:1d:8f:e7:b4:af:b4:
         43:6a:d8:d8:ac:8c:a6:5b:81:94:d2:51:b4:c7:fe:da:3b:fa:
         97:65:81:28:d3:e4:7f:84:45:4c:88:7a:5b:61:01:18:da:25:
         00:90:e1:22:9d:a4:08:d3:69:ae:69:a6:d6:69:ed:05:23:59:
         d2:b4:8e:ff:1f:d6:75:8f:ae:02:8d:d7:6a:fc:71:ff:fa:0a:
         e9:6d:f9:23:f6:be:9d:7f:47:da:67:c6:a4:d0:dc:57:0e:60:
         85:a8:ec:df:ab:fc:72:97:06:ae:8b:4e:11:a9:6c:fc:e0:c9:
         fa:b5:c9:1a:9f:9e:c0:42:5f:37:4f:5b:67:e8:be:0a:57:2a:
         22:ae:76:71:8e:30:6a:04:5d:f2:6e:62:78:b4:0b:48:d3:17:
         c8:90:5c:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAevBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDAyMDYyNDI5WhcNMjYxMTA5MDYyNDI5WjAYMRYw
FAYDVQQDEw02YWJmNGUyMS1iZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLLrzz4XhQ723+/joh+Gp4HqxNpl/ughJHScxza27sjfv0kyLdAHnyIH
YPtjxHa90qWU+qkefLKmuvaRDr5gFpMNhlywyN4YsGLPvQhBGJcmoXYkFDGYY+TU
KgZrDyhikSLNg+H+3o4wLNKj89GX/+Dl/xWccEKHUMt/zOKS3HhpUUEDs+jMqXNq
GWfPhV6WdbHg/+8E4NyszH17GxRsia76jfuyy0bWBrpbwI+TkeLftDTPKHU87Ix/
iSwI5XyHe1mwsq6cLUDl/TnQAKFrH/WlbYndWuPUjyUCrFWERC6fzA1AhGNQcvSL
Lh3uLuy575a09MjXWdSjDm1Tlqcg7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOdv
FEGl7jtR8lsG++0sOOq/uMG8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRTZERTM0RUJFMjkxMUYxOUIwMEY1QUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlKIMA0GCSqGSIb3DQEB
CwUAA4IBAQA8zJ7Q6lPWpHXjGEk8SKX1JfilI5tFt+tkBXBffOXv3vil5nMK5Ayb
yn62HQXL2c8XzWEyNaSF4A7cLzK2NBwS8N+9Bk/13VUVJq6h9akO3quzV4N3xNCO
yxv2qDbjG3Vwv0pcob4dj+e0r7RDatjYrIymW4GU0lG0x/7aO/qXZYEo0+R/hEVM
iHpbYQEY2iUAkOEinaQI02muaabWae0FI1nStI7/H9Z1j64Cjddq/HH/+grpbfkj
9r6df0faZ8ak0NxXDmCFqOzfq/xylwaui04RqWz84Mn6tckan57AQl83T1tn6L4K
VyoirnZxjjBqBF3ybmJ4tAtI0xfIkFw7
-----END CERTIFICATE-----