Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74BD0449D2B11F188DDA1E6CE1D38B0.roa
File:                     F74BD0449D2B11F188DDA1E6CE1D38B0.roa (raw, json)
Hash identifier:          P7KOtDmmTLQWKbcvYSSmtUAt6TJDBr4DS8+aogvmQaE=
Subject key identifier:   8C:15:76:92:9B:9C:1D:F0:80:6D:3A:92:C5:3A:27:84:C1:33:EE:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E13A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74BD0449D2B11F188DDA1E6CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:45:59 +0000
ROA not before:           Fri 21 Aug 2026 06:45:55 +0000
ROA not after:            Sat 19 Sep 2026 06:45:55 +0000
asID:                     400619
IP address blocks:        154.193.192.0/18 maxlen: 24
                          154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 14:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123194 (0x1e13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 06:45:55 2026 GMT
            Not After : Sep 19 06:45:55 2026 GMT
        Subject: CN=6a87f426-48c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:3b:ab:f5:5d:11:7f:e2:60:95:e5:44:0e:
                    1f:b3:12:f2:4b:33:ef:bd:1a:d9:54:c7:f0:24:31:
                    b4:8f:c6:44:e8:98:1c:67:10:f2:54:c0:ee:63:d4:
                    f6:6a:a1:10:b9:7b:03:a8:f6:11:d6:fe:2f:1b:cc:
                    91:a5:6e:fe:37:6f:d8:0b:46:fc:2c:10:f4:bd:ef:
                    2c:e6:ec:e0:6b:f2:d2:47:b8:1d:0c:c1:3b:72:af:
                    42:b9:a3:7a:77:d5:8e:94:ce:e2:5b:6a:46:44:34:
                    39:0a:67:5d:c7:7e:c4:75:8f:fc:d2:34:9d:05:9c:
                    7b:bc:41:9e:64:26:eb:4c:e4:2a:93:d1:f1:85:cf:
                    1a:12:2e:de:a1:98:ca:48:55:60:34:52:90:8f:65:
                    b9:f0:9c:70:73:30:78:98:6c:cb:90:b3:a6:40:4c:
                    69:eb:c3:40:95:ca:fd:11:76:13:88:d4:02:91:ae:
                    77:bd:63:d4:2b:74:55:10:f7:05:a9:07:cb:7c:c5:
                    46:23:e6:36:02:07:d0:58:e1:d7:37:87:3c:a4:2c:
                    a7:e9:29:9d:d8:e7:a4:7d:e4:78:e8:ea:fb:91:23:
                    4f:f6:2c:95:30:a0:43:81:cb:43:fc:84:e9:f7:b3:
                    78:1c:1b:de:32:09:3d:0a:8b:b3:87:f0:81:87:5f:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:76:92:9B:9C:1D:F0:80:6D:3A:92:C5:3A:27:84:C1:33:EE:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74BD0449D2B11F188DDA1E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:c0:27:80:ee:3c:ba:2b:38:f9:63:b8:ee:79:a9:dd:4a:
         1e:d0:ce:3f:67:a9:73:16:9e:ec:f8:9a:23:de:59:06:9d:db:
         c5:2e:9d:de:d7:a5:5d:fd:6c:f6:f9:64:f3:53:b5:5b:b4:35:
         fa:e3:1b:82:ea:43:b4:1a:2f:e3:1f:6c:0a:cb:b6:39:20:a7:
         12:37:df:4f:2b:e6:93:54:f7:a3:3c:64:05:11:bd:24:97:a0:
         3c:4f:e7:17:57:55:78:7e:fd:4d:8e:96:fa:ec:4a:9f:33:a4:
         b2:18:7c:2f:d5:ec:19:e5:83:0c:da:9b:56:cf:5d:23:9f:0b:
         41:98:5c:8c:7a:76:71:34:6b:7a:16:ea:7c:39:1a:7f:7f:28:
         e6:87:67:43:eb:6b:d4:5d:86:f2:05:76:7f:61:96:b0:da:2a:
         ae:b5:a7:91:f1:0f:6a:de:4d:28:af:5b:f3:b7:6b:04:fd:ec:
         22:60:42:5e:49:7a:a7:2a:ca:e2:6e:ef:0f:0f:78:42:e9:3d:
         c2:d2:b2:25:3c:32:15:75:52:c7:c9:cc:fc:c6:ad:6d:58:bc:
         db:25:ac:d9:18:80:d7:a7:a4:17:0c:ba:80:6c:88:88:6d:c9:
         fa:25:c8:4f:9e:53:67:b9:b6:65:64:6c:60:80:0a:dd:c0:72:
         06:63:4d:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeE6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMDY0NTU1WhcNMjYwOTE5MDY0NTU1WjAYMRYw
FAYDVQQDEw02YTg3ZjQyNi00OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyQE7q/VdEX/iYJXlRA4fsxLySzPvvRrZVMfwJDG0j8ZE6JgcZxDyVMDu
Y9T2aqEQuXsDqPYR1v4vG8yRpW7+N2/YC0b8LBD0ve8s5uzga/LSR7gdDME7cq9C
uaN6d9WOlM7iW2pGRDQ5Cmddx37EdY/80jSdBZx7vEGeZCbrTOQqk9Hxhc8aEi7e
oZjKSFVgNFKQj2W58JxwczB4mGzLkLOmQExp68NAlcr9EXYTiNQCka53vWPUK3RV
EPcFqQfLfMVGI+Y2AgfQWOHXN4c8pCyn6Smd2OekfeR46Or7kSNP9iyVMKBDgctD
/ITp97N4HBveMgk9Couzh/CBh1925QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIwV
dpKbnB3wgG06ksU6J4TBM+4+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNzRCRDA0NDlEMkIxMUYxODhEREExRTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsHAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXOsAngO48uis4+WO47nmp3Uoe0M4/Z6lzFp7s+Joj3lkGndvFLp3e
16Vd/Wz2+WTzU7VbtDX64xuC6kO0Gi/jH2wKy7Y5IKcSN99PK+aTVPejPGQFEb0k
l6A8T+cXV1V4fv1Njpb67EqfM6SyGHwv1ewZ5YMM2ptWz10jnwtBmFyMenZxNGt6
Fup8ORp/fyjmh2dD62vUXYbyBXZ/YZaw2iqutaeR8Q9q3k0or1vzt2sE/ewiYEJe
SXqnKsribu8PD3hC6T3C0rIlPDIVdVLHycz8xq1tWLzbJazZGIDXp6QXDLqAbIiI
bcn6JchPnlNnubZlZGxggArdwHIGY02B
-----END CERTIFICATE-----