Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9D0658BCA411F19046A1BECE1D38B0.roa
File:                     FA9D0658BCA411F19046A1BECE1D38B0.roa (raw, json)
Hash identifier:          NyigWztmP12TCasawhi14Jcv0RHbwC4dvbRsNg3zlvY=
Subject key identifier:   F2:85:FD:C7:6C:29:C8:B8:95:C6:45:23:7A:56:C9:68:BF:A0:34:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9D0658BCA411F19046A1BECE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:00:19 +0000
ROA not before:           Wed 30 Sep 2026 08:00:15 +0000
ROA not after:            Fri 06 Nov 2026 08:00:15 +0000
asID:                     202656
IP address blocks:        154.219.237.0/24 maxlen: 24
                          154.219.238.0/24 maxlen: 24
                          154.219.239.0/24 maxlen: 24
                          154.219.240.0/24 maxlen: 24
                          154.219.241.0/24 maxlen: 24
                          154.219.242.0/24 maxlen: 24
                          154.219.243.0/24 maxlen: 24
                          154.219.244.0/24 maxlen: 24
                          154.219.248.0/24 maxlen: 24
                          154.219.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125857 (0x1eba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:00:15 2026 GMT
            Not After : Nov  6 08:00:15 2026 GMT
        Subject: CN=6abcc193-9d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:b5:a4:26:8d:3d:34:26:da:93:2b:e0:a3:
                    85:a2:34:7e:98:a7:e1:93:62:ea:1b:5e:2b:c1:24:
                    a3:c6:62:dd:48:76:09:90:b2:01:07:6d:1c:58:d9:
                    58:15:52:2e:3d:09:67:c6:b2:3f:01:09:d4:b5:6b:
                    ef:86:9e:64:6b:ec:72:8e:45:f0:da:08:b9:c2:06:
                    5e:ac:49:07:1f:df:a4:b5:91:f7:1f:e1:c6:0f:c2:
                    5f:f6:29:43:ca:3c:d7:3a:8c:c5:8f:6c:65:05:66:
                    be:aa:2e:1c:a4:82:ec:c9:c1:47:e4:81:5e:d3:55:
                    a8:46:fe:1d:8a:c2:4d:40:a4:6c:25:a3:bd:d3:a8:
                    d8:43:76:c2:ed:91:a1:d3:c3:30:db:ae:c7:d8:17:
                    dd:82:d7:80:1d:41:48:a8:e8:c9:27:c0:63:a1:26:
                    5f:11:f0:63:d0:22:87:34:a3:a8:e9:4e:d6:8f:83:
                    fc:84:56:24:3b:a9:12:ab:4e:c5:d1:6c:32:14:9a:
                    14:46:52:2d:eb:4c:68:f4:47:7e:83:02:1b:86:6a:
                    87:50:17:6a:93:e2:6d:80:30:6b:f6:29:1a:4a:47:
                    f0:94:c5:53:e8:1e:95:f3:4c:7a:a3:75:69:1c:ef:
                    cd:dc:26:96:99:20:f9:57:8a:3e:3e:89:19:14:9a:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:FD:C7:6C:29:C8:B8:95:C6:45:23:7A:56:C9:68:BF:A0:34:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9D0658BCA411F19046A1BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.237.0-154.219.244.255
                  154.219.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:42:24:c8:02:5a:fd:3b:80:7d:3d:53:95:82:a4:c0:88:
         77:5d:8b:d9:32:15:d9:e5:01:38:a1:ef:45:f7:da:5e:ea:af:
         b0:95:d8:d8:8b:4d:8a:dc:37:10:41:9a:ea:20:04:5a:a1:f1:
         12:d1:fe:25:0a:0c:ab:fa:3d:29:71:93:9e:f9:1d:d8:0b:79:
         ff:9d:66:69:75:26:a6:50:b8:d7:8b:96:94:6e:d5:8c:59:38:
         2f:3a:7d:ab:32:d1:71:0d:59:10:f8:01:63:2f:1e:48:5c:aa:
         fe:74:7c:9b:56:7e:ab:53:a2:05:37:10:53:bf:f5:db:3a:b2:
         fd:2f:3f:d4:82:77:12:57:a6:52:5d:03:2a:1e:f3:f0:db:8e:
         d3:be:6e:ed:71:55:a0:94:0c:d2:bd:98:09:71:66:0b:7a:77:
         ba:e7:76:88:21:9f:2f:b0:5c:9f:4d:7b:6d:4e:ae:37:08:29:
         67:da:a1:6b:5f:e9:a4:76:48:65:4f:f5:50:57:da:07:f4:95:
         09:b2:b1:fa:f7:80:26:2d:54:f2:89:6a:90:cc:f2:3f:b0:8e:
         d9:83:8c:4a:a8:58:d7:d5:7b:b1:e6:ad:de:24:4d:5d:6f:30:
         2d:f7:55:f0:cf:ce:27:c0:cc:b9:c8:7f:d1:4b:19:08:80:df:
         1e:2c:a8:af
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAeuhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTMwMDgwMDE1WhcNMjYxMTA2MDgwMDE1WjAYMRYw
FAYDVQQDEw02YWJjYzE5My05ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy1K1pCaNPTQm2pMr4KOFojR+mKfhk2LqG14rwSSjxmLdSHYJkLIBB20c
WNlYFVIuPQlnxrI/AQnUtWvvhp5ka+xyjkXw2gi5wgZerEkHH9+ktZH3H+HGD8Jf
9ilDyjzXOozFj2xlBWa+qi4cpILsycFH5IFe01WoRv4disJNQKRsJaO906jYQ3bC
7ZGh08Mw267H2BfdgteAHUFIqOjJJ8BjoSZfEfBj0CKHNKOo6U7Wj4P8hFYkO6kS
q07F0WwyFJoURlIt60xo9Ed+gwIbhmqHUBdqk+JtgDBr9ikaSkfwlMVT6B6V80x6
o3VpHO/N3CaWmSD5V4o+PokZFJqEDwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPKF
/cdsKci4lcZFI3pWyWi/oDRVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQTlEMDY1OEJDQTQxMUYxOTA0NkExQkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACa2+0DBACa2/QDBAGa
2/gwDQYJKoZIhvcNAQELBQADggEBAKg5QiTIAlr9O4B9PVOVgqTAiHddi9kyFdnl
ATih70X32l7qr7CV2NiLTYrcNxBBmuogBFqh8RLR/iUKDKv6PSlxk575HdgLef+d
Zml1JqZQuNeLlpRu1YxZOC86fasy0XENWRD4AWMvHkhcqv50fJtWfqtTogU3EFO/
9ds6sv0vP9SCdxJXplJdAyoe8/DbjtO+bu1xVaCUDNK9mAlxZgt6d7rndoghny+w
XJ9Ne21OrjcIKWfaoWtf6aR2SGVP9VBX2gf0lQmysfr3gCYtVPKJapDM8j+wjtmD
jEqoWNfVe7Hmrd4kTV1vMC33VfDPzifAzLnIf9FLGQiA3x4sqK8=
-----END CERTIFICATE-----