Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F538A7DE968511F19C5E7003CF1D38B0.roa
File:                     F538A7DE968511F19C5E7003CF1D38B0.roa (raw, json)
Hash identifier:          eZaRYAInh0xtnROvKjO7BGBkVfZr2INanvaQKt2r2HQ=
Subject key identifier:   66:3A:AA:33:57:96:3E:F3:47:F4:DF:38:2A:AD:4D:1C:90:21:2C:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F538A7DE968511F19C5E7003CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 19:42:32 +0000
ROA not before:           Wed 12 Aug 2026 19:42:26 +0000
ROA not after:            Sun 12 Aug 2029 19:42:26 +0000
asID:                     17561
IP address blocks:        154.86.253.0/24 maxlen: 24
                          154.86.254.0/24 maxlen: 24
                          154.86.255.0/24 maxlen: 24
                          154.93.4.0/24 maxlen: 24
                          154.93.5.0/24 maxlen: 24
                          154.93.6.0/24 maxlen: 24
                          154.93.7.0/24 maxlen: 24
                          154.93.8.0/24 maxlen: 24
                          154.93.9.0/24 maxlen: 24
                          154.93.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122564 (0x1dec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 19:42:26 2026 GMT
            Not After : Aug 12 19:42:26 2029 GMT
        Subject: CN=6a7ccca8-5545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:0e:2a:6a:c1:b3:07:b1:f1:84:97:2b:b1:
                    5a:78:f2:94:39:57:ae:52:de:ab:42:97:a7:3d:fb:
                    ba:e1:05:eb:39:64:40:f4:b8:8e:a0:6c:cb:b8:9a:
                    c1:56:6b:68:23:05:5f:21:bc:f9:99:b3:bd:9d:3b:
                    2f:08:c0:2f:25:18:aa:40:87:32:cd:a4:c9:b2:36:
                    16:6a:94:db:5e:e7:cc:2c:b0:29:33:ef:4a:a0:5a:
                    8d:f3:df:ec:95:84:f0:b7:2c:f2:d0:a9:c1:c5:76:
                    b9:d8:c2:13:69:e9:b6:36:51:a4:4c:60:1a:92:6d:
                    42:07:94:f4:37:67:c1:cd:66:2c:d0:f3:39:50:93:
                    46:e1:31:ac:c2:35:ca:bb:fc:9a:61:b3:bc:65:48:
                    cc:c5:34:31:36:1f:e0:9a:03:b5:61:10:c1:3f:25:
                    51:c5:63:f8:b4:87:20:1f:01:a8:8b:19:13:19:9c:
                    92:13:a4:00:60:19:5e:99:a6:e7:b4:e8:7d:ff:be:
                    84:35:4d:a0:27:b4:8a:da:0d:1d:13:df:e5:de:95:
                    0c:e1:3a:0d:b5:d0:eb:46:66:2a:de:e7:64:f9:4b:
                    55:86:68:4b:95:3b:25:b9:88:be:0b:1e:0c:c7:d4:
                    dd:88:f7:df:81:ff:15:1b:f8:f4:c6:9f:48:cf:6e:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:AA:33:57:96:3E:F3:47:F4:DF:38:2A:AD:4D:1C:90:21:2C:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F538A7DE968511F19C5E7003CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.253.0-154.86.255.255
                  154.93.4.0-154.93.10.255

    Signature Algorithm: sha256WithRSAEncryption
         95:34:94:b4:ee:59:88:27:a1:07:7b:d8:88:24:d5:6d:1d:5d:
         af:fb:97:46:7c:c5:e8:e9:2a:bd:a9:64:50:48:e3:89:14:81:
         a8:3d:d0:72:ce:74:1e:af:6e:ff:36:fa:3a:9b:6b:b5:bd:71:
         64:1e:fb:ad:a6:ce:df:10:99:7c:8f:1a:47:12:7d:1c:80:a7:
         a5:38:05:03:56:63:8d:6c:b0:7b:1c:6b:75:e6:22:02:8a:fe:
         7a:c2:a4:2c:e6:60:64:2b:59:e9:b0:f5:c6:99:9f:57:7b:a3:
         b9:90:19:a2:2b:3f:8e:8a:df:a4:f1:12:bb:b3:0e:bb:85:d9:
         9a:fa:69:b9:d5:74:b0:54:98:9c:49:8d:37:fa:6c:ae:05:21:
         2d:2b:c1:af:ba:24:de:a1:9e:e7:88:8e:5c:ef:41:ca:e7:17:
         b0:44:18:32:64:1f:1c:fd:aa:3a:da:11:cf:18:65:22:02:cb:
         bb:61:30:c1:2b:c7:1c:94:e5:4a:5f:66:2f:5f:20:3c:ce:81:
         3b:ca:c6:12:8c:e8:fa:9a:aa:21:5b:d4:ec:7d:e7:66:37:85:
         68:dd:5b:82:3e:ca:38:06:2d:5f:90:0c:d5:8d:3e:60:91:a5:
         13:02:78:8b:12:ef:ab:6f:53:7c:f8:73:c0:a7:9e:5b:a1:58:
         86:e2:7c:c6
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAd7EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEyMTk0MjI2WhcNMjkwODEyMTk0MjI2WjAYMRYw
FAYDVQQDEw02YTdjY2NhOC01NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArZkOKmrBswex8YSXK7FaePKUOVeuUt6rQpenPfu64QXrOWRA9LiOoGzL
uJrBVmtoIwVfIbz5mbO9nTsvCMAvJRiqQIcyzaTJsjYWapTbXufMLLApM+9KoFqN
89/slYTwtyzy0KnBxXa52MITaem2NlGkTGAakm1CB5T0N2fBzWYs0PM5UJNG4TGs
wjXKu/yaYbO8ZUjMxTQxNh/gmgO1YRDBPyVRxWP4tIcgHwGoixkTGZySE6QAYBle
mabntOh9/76ENU2gJ7SK2g0dE9/l3pUM4ToNtdDrRmYq3udk+UtVhmhLlTsluYi+
Cx4Mx9TdiPffgf8VG/j0xp9Iz258FwIDAQABo4ICujCCArYwHQYDVR0OBBYEFGY6
qjNXlj7zR/TfOCqtTRyQISxyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNTM4QTdERTk2ODUxMUYxOUM1RTcwMDNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDBACaVv0DAwCaVjAMAwQC
ml0EAwQAml0KMA0GCSqGSIb3DQEBCwUAA4IBAQCVNJS07lmIJ6EHe9iIJNVtHV2v
+5dGfMXo6Sq9qWRQSOOJFIGoPdByznQer27/Nvo6m2u1vXFkHvutps7fEJl8jxpH
En0cgKelOAUDVmONbLB7HGt15iICiv56wqQs5mBkK1npsPXGmZ9Xe6O5kBmiKz+O
it+k8RK7sw67hdma+mm51XSwVJicSY03+myuBSEtK8GvuiTeoZ7niI5c70HK5xew
RBgyZB8c/ao62hHPGGUiAsu7YTDBK8cclOVKX2YvXyA8zoE7ysYSjOj6mqohW9Ts
fedmN4Vo3VuCPso4Bi1fkAzVjT5gkaUTAniLEu+rb1N8+HPAp55boViG4nzG
-----END CERTIFICATE-----