Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5E7560C5A711F1AF94ED12CF1D38B0.roa
File:                     FC5E7560C5A711F1AF94ED12CF1D38B0.roa (raw, json)
Hash identifier:          pnaCM29fX3r7AKb71DWWDBC6vkYZLEeugmbZRFnAu+I=
Subject key identifier:   C1:46:AE:F7:6A:38:50:C8:25:B4:CB:73:DF:D2:F7:31:D1:A3:9C:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5E7560C5A711F1AF94ED12CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 19:14:31 +0000
ROA not before:           Sun 11 Oct 2026 19:14:25 +0000
ROA not after:            Tue 17 Nov 2026 19:14:25 +0000
asID:                     151196
IP address blocks:        154.90.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126362 (0x1ed9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 19:14:25 2026 GMT
            Not After : Nov 17 19:14:25 2026 GMT
        Subject: CN=6acbe017-1441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:e6:4b:42:bc:d3:7b:67:e6:f7:a6:81:fc:
                    a3:ec:d6:da:54:97:1f:94:a4:5e:cb:3e:8a:3e:bb:
                    7d:a6:d5:f8:75:37:0d:99:57:4a:2c:3f:0e:fc:19:
                    9c:ec:02:13:66:b0:d2:b4:aa:bc:d3:c4:e9:a6:c6:
                    3a:2b:e3:78:5c:4e:2b:ee:d2:77:1f:29:53:75:18:
                    03:c5:b9:c0:a6:99:a9:d9:d9:c7:bb:0c:89:70:e7:
                    d8:ab:02:a5:36:3c:32:25:f7:79:20:47:4b:31:37:
                    e9:42:13:5a:0c:52:42:bb:6c:60:3a:71:83:71:22:
                    98:b6:5d:57:83:04:2b:5a:5a:36:17:98:32:e7:71:
                    33:36:0b:b8:e7:8a:bb:73:3d:b8:a5:4b:3c:ff:d2:
                    b6:1c:03:c3:a1:90:41:1d:f9:2e:30:a7:0c:8e:ff:
                    4c:e7:4e:58:f6:37:8d:c0:9d:24:b2:d5:3f:43:d0:
                    24:c2:a3:dd:7f:18:b6:6c:36:a6:64:14:89:2b:ab:
                    3a:fd:32:be:6f:99:60:67:93:cc:fe:8b:f9:0f:db:
                    57:61:30:8d:bc:e7:db:2d:75:cb:01:06:87:13:d7:
                    49:63:c2:95:fc:41:bc:50:69:af:41:4d:ab:0d:f2:
                    d7:70:67:3c:4c:eb:e1:b5:58:21:e4:42:80:d9:f6:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:AE:F7:6A:38:50:C8:25:B4:CB:73:DF:D2:F7:31:D1:A3:9C:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5E7560C5A711F1AF94ED12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:23:92:13:63:1b:fb:bb:9d:70:df:ff:ad:02:2f:0c:82:
         b1:9a:fd:e4:e4:a7:89:f7:71:5e:07:f9:7f:9f:62:64:11:94:
         4c:3b:25:38:a3:40:90:cd:51:fd:83:de:79:f2:75:51:68:bd:
         5b:30:21:76:46:ae:db:63:28:e9:e4:7a:3e:b0:2d:52:c8:c5:
         84:68:78:22:eb:b4:b7:5e:32:f2:16:79:27:f7:6f:bd:7f:15:
         a2:df:ef:2d:9f:e3:ea:a0:98:c9:00:35:6a:de:64:25:49:9f:
         e3:a0:66:34:9a:8b:5e:8f:98:30:b9:27:a6:d2:78:78:1e:7a:
         fe:25:ee:17:ef:33:30:6f:18:3a:0a:4c:bc:31:1a:d7:c2:89:
         41:88:1a:df:8a:50:1b:7d:1b:bd:e2:69:8b:1d:00:15:ad:7c:
         a7:77:ac:bf:4b:60:a1:2e:fc:e4:9a:29:25:af:bf:f3:ab:87:
         09:63:80:ec:4a:6c:b0:98:1b:ed:0a:cc:c2:cd:57:5e:11:99:
         a0:bd:3e:40:be:50:43:d9:8b:5d:ca:5e:85:c4:e3:bb:94:15:
         d0:4c:dc:cd:ec:95:bf:2e:91:48:60:c5:f9:6c:bf:0b:b2:1d:
         bd:4f:47:eb:08:3d:e9:55:e7:78:f2:0e:d2:37:d8:ee:48:85:
         0b:ba:e9:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe2aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDExMTkxNDI1WhcNMjYxMTE3MTkxNDI1WjAYMRYw
FAYDVQQDEw02YWNiZTAxNy0xNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs93mS0K803tn5vemgfyj7NbaVJcflKReyz6KPrt9ptX4dTcNmVdKLD8O
/Bmc7AITZrDStKq808TppsY6K+N4XE4r7tJ3HylTdRgDxbnAppmp2dnHuwyJcOfY
qwKlNjwyJfd5IEdLMTfpQhNaDFJCu2xgOnGDcSKYtl1XgwQrWlo2F5gy53EzNgu4
54q7cz24pUs8/9K2HAPDoZBBHfkuMKcMjv9M505Y9jeNwJ0kstU/Q9AkwqPdfxi2
bDamZBSJK6s6/TK+b5lgZ5PM/ov5D9tXYTCNvOfbLXXLAQaHE9dJY8KV/EG8UGmv
QU2rDfLXcGc8TOvhtVgh5EKA2faO1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMFG
rvdqOFDIJbTLc9/S9zHRo5yJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQzVFNzU2MEM1QTcxMUYxQUY5NEVEMTJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpFMA0GCSqGSIb3DQEB
CwUAA4IBAQCOUyOSE2Mb+7udcN//rQIvDIKxmv3k5KeJ93FeB/l/n2JkEZRMOyU4
o0CQzVH9g9558nVRaL1bMCF2Rq7bYyjp5Ho+sC1SyMWEaHgi67S3XjLyFnkn92+9
fxWi3+8tn+PqoJjJADVq3mQlSZ/joGY0motej5gwuSem0nh4Hnr+Je4X7zMwbxg6
Cky8MRrXwolBiBrfilAbfRu94mmLHQAVrXynd6y/S2ChLvzkmiklr7/zq4cJY4Ds
SmywmBvtCszCzVdeEZmgvT5AvlBD2Ytdyl6FxOO7lBXQTNzN7JW/LpFIYMX5bL8L
sh29T0frCD3pVed48g7SN9juSIULuumI
-----END CERTIFICATE-----