Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D2393EC57111F1A365A5BDCE1D38B0.roa
File:                     F4D2393EC57111F1A365A5BDCE1D38B0.roa (raw, json)
Hash identifier:          vZUp5URgAZC1LiAcKxstxetR9i+11Yr+A2gxUWRJENQ=
Subject key identifier:   B8:0F:48:8F:8A:45:2C:C3:22:92:E0:8D:FA:DC:6A:BC:78:B0:91:C6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D2393EC57111F1A365A5BDCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:47:46 +0000
ROA not before:           Sun 11 Oct 2026 12:47:41 +0000
ROA not after:            Wed 18 Nov 2026 12:47:41 +0000
asID:                     22773
IP address blocks:        154.202.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126350 (0x1ed8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 12:47:41 2026 GMT
            Not After : Nov 18 12:47:41 2026 GMT
        Subject: CN=6acb8572-1080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:8c:bd:23:3c:98:b5:27:09:f8:3c:3e:09:
                    67:49:ac:7d:72:2d:aa:88:3f:8f:6d:31:17:6b:6d:
                    67:51:34:39:f5:82:db:79:69:64:43:64:1a:6f:6e:
                    56:72:bf:59:85:ea:67:20:69:f0:c9:4b:04:59:ae:
                    81:bb:ee:d9:e9:30:2e:f6:b4:a2:2d:a8:79:f2:36:
                    a7:e9:e4:e2:1e:b7:96:ca:74:dc:22:a3:81:94:76:
                    2d:a6:13:86:75:cd:f6:38:2a:26:9c:cf:c6:0c:26:
                    db:27:1b:10:8f:56:cc:c4:8f:8e:07:ca:cf:b3:86:
                    1b:a9:97:e0:6d:8e:39:ce:7f:27:d3:47:81:31:22:
                    5a:16:76:20:f8:f4:16:f0:c1:ea:68:b5:a0:6f:59:
                    bc:89:66:f5:d9:7e:c4:9d:e4:11:69:49:69:ef:06:
                    dc:35:d4:fa:c4:3b:44:9f:7a:a0:ec:4a:59:4d:56:
                    f6:40:7f:5f:6d:06:6f:64:89:cc:23:9d:92:7e:36:
                    7d:43:c4:21:24:51:d3:c9:9f:29:f8:3f:a4:e2:b4:
                    82:7c:1b:56:a5:b1:9e:ce:e1:2c:cc:ff:b5:16:b8:
                    05:39:e5:ee:24:f7:7b:08:0a:e6:f9:44:3b:ab:c4:
                    0c:14:e3:4c:d8:e8:88:d5:de:f4:f4:80:30:75:fa:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:48:8F:8A:45:2C:C3:22:92:E0:8D:FA:DC:6A:BC:78:B0:91:C6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D2393EC57111F1A365A5BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:76:2b:4b:c0:b2:26:47:08:83:d5:e2:ea:8d:93:60:e4:c5:
         3f:08:7f:da:86:ad:20:1e:ba:18:f9:bb:e8:36:ad:b9:e9:27:
         dc:6b:58:0b:a0:1e:fc:ae:45:88:f6:60:21:28:c9:09:80:32:
         f0:a3:67:29:c3:ec:b2:19:40:09:4c:2d:a9:56:ee:20:a0:48:
         3b:b1:5f:5e:60:3e:eb:3f:56:7a:08:96:ae:eb:24:04:ee:a7:
         19:a1:f5:9a:e2:41:1c:18:31:3c:d0:1a:86:e7:b7:3a:19:4a:
         35:dd:32:82:c3:1d:42:b2:67:a4:7f:1c:e2:af:91:13:0a:9e:
         be:28:aa:c6:13:db:c4:41:d5:88:e4:8d:a5:8c:0b:35:b8:4e:
         4a:ec:a7:a4:1a:a6:0b:f6:1d:21:78:b6:6c:b9:8b:4e:58:a1:
         9d:97:8a:f3:f2:29:1e:d9:13:d1:21:9d:57:95:2a:ba:28:60:
         d7:5a:a6:4f:86:63:66:80:58:f6:37:e8:ae:be:07:47:65:03:
         10:5f:97:e5:d2:33:a3:39:62:e3:db:98:1e:e8:78:a1:c7:66:
         31:7f:ce:ca:db:f3:c0:77:d3:9e:cf:84:bd:6f:57:b7:f9:45:
         4d:d3:81:10:9b:d3:65:61:0a:e4:b1:e6:93:27:a4:79:63:45:
         66:cf:16:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe2OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDExMTI0NzQxWhcNMjYxMTE4MTI0NzQxWjAYMRYw
FAYDVQQDEw02YWNiODU3Mi0xMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3VWMvSM8mLUnCfg8PglnSax9ci2qiD+PbTEXa21nUTQ59YLbeWlkQ2Qa
b25Wcr9ZhepnIGnwyUsEWa6Bu+7Z6TAu9rSiLah58jan6eTiHreWynTcIqOBlHYt
phOGdc32OComnM/GDCbbJxsQj1bMxI+OB8rPs4YbqZfgbY45zn8n00eBMSJaFnYg
+PQW8MHqaLWgb1m8iWb12X7EneQRaUlp7wbcNdT6xDtEn3qg7EpZTVb2QH9fbQZv
ZInMI52SfjZ9Q8QhJFHTyZ8p+D+k4rSCfBtWpbGezuEszP+1FrgFOeXuJPd7CArm
+UQ7q8QMFONM2OiI1d709IAwdfqNnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLgP
SI+KRSzDIpLgjfrcarx4sJHGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNEQyMzkzRUM1NzExMUYxQTM2NUE1QkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmspjMA0GCSqGSIb3DQEB
CwUAA4IBAQByditLwLImRwiD1eLqjZNg5MU/CH/ahq0gHroY+bvoNq256Sfca1gL
oB78rkWI9mAhKMkJgDLwo2cpw+yyGUAJTC2pVu4goEg7sV9eYD7rP1Z6CJau6yQE
7qcZofWa4kEcGDE80BqG57c6GUo13TKCwx1Csmekfxzir5ETCp6+KKrGE9vEQdWI
5I2ljAs1uE5K7KekGqYL9h0heLZsuYtOWKGdl4rz8ike2RPRIZ1XlSq6KGDXWqZP
hmNmgFj2N+iuvgdHZQMQX5fl0jOjOWLj25ge6Hihx2Yxf87K2/PAd9Oez4S9b1e3
+UVN04EQm9NlYQrkseaTJ6R5Y0VmzxaD
-----END CERTIFICATE-----