Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA0B79AC9F711F1A25223C9CE1D38B0.roa
File:                     EEA0B79AC9F711F1A25223C9CE1D38B0.roa (raw, json)
Hash identifier:          4UEhZ/Zy4l2fz/U8hIjKmCgS2jAjkp+YcPtHLRh/l3g=
Subject key identifier:   89:B0:CF:00:B5:C4:68:7B:42:4C:85:6B:9C:38:E8:6C:C4:80:3A:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA0B79AC9F711F1A25223C9CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:56:53 +0000
ROA not before:           Sat 17 Oct 2026 06:56:48 +0000
ROA not after:            Tue 24 Nov 2026 06:56:48 +0000
asID:                     139923
IP address blocks:        154.217.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126599 (0x1ee87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 06:56:48 2026 GMT
            Not After : Nov 24 06:56:48 2026 GMT
        Subject: CN=6ad31c34-c4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:0b:85:dc:76:c1:e0:0c:2d:44:16:23:bc:
                    df:45:63:87:1d:52:83:79:85:f2:ec:a0:ae:65:60:
                    58:dc:f3:88:1e:4a:32:41:4f:ef:ce:66:e3:fb:28:
                    31:de:43:d1:e6:33:33:44:af:90:69:25:61:84:61:
                    93:81:d7:f0:2d:6a:fb:35:d3:58:c7:a8:93:6d:c1:
                    ec:b2:e5:37:2c:1b:06:c1:62:db:4b:6e:ca:f4:c4:
                    e1:0e:c9:03:f3:24:58:90:00:1a:88:dd:a7:e5:f8:
                    a4:10:5e:ef:fc:9b:f3:2e:ba:9e:49:1d:d7:68:e9:
                    fc:6a:46:6d:0c:b0:9b:4c:ec:ab:ac:25:db:80:74:
                    5e:4f:68:a7:be:72:c5:f4:04:e4:7c:e0:5b:af:f7:
                    68:c7:63:dd:93:5e:ad:e6:28:35:21:21:54:7b:f4:
                    2b:d4:3d:bb:b2:5b:88:9c:03:00:c3:1e:01:b6:fa:
                    58:af:29:43:f8:c9:ff:6d:4e:3c:63:b0:a2:dd:c2:
                    10:3b:27:31:de:cb:e3:ae:e4:b4:27:8e:3f:fb:b7:
                    ee:49:fd:87:1d:77:94:5b:3d:ba:06:77:b8:23:44:
                    0c:52:b5:41:3c:ab:6a:de:8a:8d:6d:de:80:1a:30:
                    71:cb:b3:7d:f0:9d:21:f4:ff:3f:85:05:60:5c:84:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B0:CF:00:B5:C4:68:7B:42:4C:85:6B:9C:38:E8:6C:C4:80:3A:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA0B79AC9F711F1A25223C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.217.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:22:32:82:81:45:cc:3d:ac:e6:c0:24:34:f8:9c:8d:0c:
         c8:bc:26:2b:e1:eb:35:c7:ad:6f:32:9f:e4:16:a3:52:34:de:
         4c:b7:34:45:1a:e1:67:52:d0:91:5b:b1:11:d6:b3:5b:81:af:
         8d:bb:fc:38:d8:5a:f2:18:4f:f5:69:cb:c4:a2:a7:f6:fa:e5:
         13:ed:52:d0:a8:a7:1a:c3:c9:58:49:06:77:ff:f0:de:33:84:
         1a:24:fd:89:dc:cf:e3:1d:3e:cb:05:63:02:42:4e:fb:8b:87:
         cf:dc:66:f5:80:f5:e1:6f:f0:3f:e1:ee:cd:7f:99:a3:ba:44:
         ec:25:5e:70:85:1a:80:d9:dd:86:b8:86:aa:f3:dd:81:ee:e0:
         a7:e4:e4:62:de:12:3b:b2:69:2d:72:bb:a1:43:8f:0a:68:1a:
         07:19:d3:81:fc:50:1d:9f:3e:7a:9e:c9:55:94:32:53:e7:89:
         fd:e6:42:bd:e4:49:36:08:92:61:f6:9a:1a:10:b4:a6:1f:b5:
         a6:60:72:32:69:a8:16:26:04:27:6b:de:a4:1a:fe:6c:5c:47:
         2f:b7:fa:20:52:ee:43:a5:fe:92:be:0b:ed:d4:57:93:a7:ea:
         19:f4:ae:ae:02:3f:07:8b:8a:15:96:68:a2:d1:c9:57:0e:e9:
         9a:99:35:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe6HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE3MDY1NjQ4WhcNMjYxMTI0MDY1NjQ4WjAYMRYw
FAYDVQQDEw02YWQzMWMzNC1jNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvFULhdx2weAMLUQWI7zfRWOHHVKDeYXy7KCuZWBY3POIHkoyQU/vzmbj
+ygx3kPR5jMzRK+QaSVhhGGTgdfwLWr7NdNYx6iTbcHssuU3LBsGwWLbS27K9MTh
DskD8yRYkAAaiN2n5fikEF7v/JvzLrqeSR3XaOn8akZtDLCbTOyrrCXbgHReT2in
vnLF9ATkfOBbr/dox2Pdk16t5ig1ISFUe/Qr1D27sluInAMAwx4BtvpYrylD+Mn/
bU48Y7Ci3cIQOycx3svjruS0J44/+7fuSf2HHXeUWz26Bne4I0QMUrVBPKtq3oqN
bd6AGjBxy7N98J0h9P8/hQVgXIRbcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFImw
zwC1xGh7QkyFa5w46GzEgDoXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRUEwQjc5QUM5RjcxMUYxQTI1MjIzQzlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtnwMA0GCSqGSIb3DQEB
CwUAA4IBAQA2/SIygoFFzD2s5sAkNPicjQzIvCYr4es1x61vMp/kFqNSNN5MtzRF
GuFnUtCRW7ER1rNbga+Nu/w42FryGE/1acvEoqf2+uUT7VLQqKcaw8lYSQZ3//De
M4QaJP2J3M/jHT7LBWMCQk77i4fP3Gb1gPXhb/A/4e7Nf5mjukTsJV5whRqA2d2G
uIaq892B7uCn5ORi3hI7smktcruhQ48KaBoHGdOB/FAdnz56nslVlDJT54n95kK9
5Ek2CJJh9poaELSmH7WmYHIyaagWJgQna96kGv5sXEcvt/ogUu5Dpf6Svgvt1FeT
p+oZ9K6uAj8Hi4oVlmii0clXDumamTV6
-----END CERTIFICATE-----