Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00768EAE9F9111F1A8671AA2CE1D38B0.roa
File:                     00768EAE9F9111F1A8671AA2CE1D38B0.roa (raw, json)
Hash identifier:          uOycHfKen7+7DsQbG5go0FcJhXM+Tu3xUAH9TdGNvfU=
Subject key identifier:   DB:74:3E:C8:92:29:A8:40:45:16:7C:EA:95:8E:4E:64:85:64:44:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E20C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00768EAE9F9111F1A8671AA2CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:54:15 +0000
ROA not before:           Mon 24 Aug 2026 07:54:11 +0000
ROA not after:            Thu 01 Oct 2026 07:54:11 +0000
asID:                     62240
IP address blocks:        154.194.72.0/24 maxlen: 24
                          154.194.73.0/24 maxlen: 24
                          154.194.74.0/24 maxlen: 24
                          154.194.78.0/24 maxlen: 24
                          154.194.94.0/24 maxlen: 24
                          154.194.95.0/24 maxlen: 24
                          154.194.96.0/24 maxlen: 24
                          154.194.97.0/24 maxlen: 24
                          154.196.84.0/24 maxlen: 24
                          154.196.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123404 (0x1e20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 07:54:11 2026 GMT
            Not After : Oct  1 07:54:11 2026 GMT
        Subject: CN=6a8bf8a7-d65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:54:36:12:06:5b:10:f7:fa:05:15:e7:9a:
                    9a:a9:b9:e0:7f:06:e8:12:10:42:c0:bc:a2:9d:66:
                    5d:25:2f:0a:e5:5b:d5:a6:65:0e:46:c1:c8:0e:30:
                    d8:ee:fd:68:c4:14:e9:b6:9c:5e:b6:a0:cc:32:ad:
                    10:77:2a:21:74:53:ab:42:09:2d:60:e1:b9:55:ae:
                    7b:ad:67:c3:08:03:82:b7:0a:0f:b7:57:b2:8d:2e:
                    6f:26:bc:d3:1c:ed:2a:4d:17:e7:5e:32:28:07:b3:
                    03:0e:65:f0:39:cd:99:80:15:62:f8:7c:96:63:94:
                    a6:7a:33:60:3c:cf:b8:92:8c:d0:a2:76:fb:0c:e4:
                    82:4f:cd:3c:5e:7c:7e:40:8f:70:07:71:ed:50:04:
                    d3:a1:20:cc:5d:78:55:7a:96:e7:07:3a:12:c2:73:
                    8a:53:2b:e0:76:61:69:7b:46:1a:a8:ab:66:34:9e:
                    16:28:ed:ee:06:10:be:00:e5:05:e1:84:a8:a7:e3:
                    86:c8:50:64:6e:80:46:86:25:0d:14:4a:7c:a3:2c:
                    db:d5:a2:8e:b9:ca:b5:82:36:4f:ff:bd:1e:77:c3:
                    2d:8a:56:0d:f7:80:a3:c8:74:5c:60:1c:38:b6:97:
                    dd:25:ce:2f:c1:62:bd:4b:ce:26:ec:a2:97:75:f8:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:3E:C8:92:29:A8:40:45:16:7C:EA:95:8E:4E:64:85:64:44:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00768EAE9F9111F1A8671AA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.72.0-154.194.74.255
                  154.194.78.0/24
                  154.194.94.0-154.194.97.255
                  154.196.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:e0:b6:73:eb:8f:c5:27:95:64:9a:9a:f3:62:ad:45:20:
         a3:ba:cd:25:98:15:ad:f6:0c:59:9d:c7:ec:b7:cb:8d:9d:5b:
         39:b4:a4:bf:df:ec:60:35:69:70:1e:73:ac:b2:2e:19:09:fb:
         7d:a6:25:0c:91:9b:36:f4:41:74:f3:21:b0:eb:04:66:3e:29:
         4b:1b:89:46:34:0e:38:8f:60:2d:25:60:1e:3c:8b:f0:3d:b0:
         9e:07:6b:14:c8:77:47:37:9c:4a:4d:e3:77:dd:55:5d:1a:dc:
         4c:99:95:ef:0e:e4:f4:6c:d1:65:ee:81:3c:fc:e4:9e:de:b0:
         78:08:ce:83:60:27:0f:6c:91:71:36:ef:82:b8:5b:bf:8c:01:
         c7:c3:70:a8:84:42:3e:cb:0d:0e:d0:08:06:d0:b6:ab:d1:93:
         b6:0d:be:2c:b2:73:d1:dc:ea:cd:f5:39:dc:6b:c3:7e:20:82:
         a7:ff:6b:60:a5:15:ec:24:8b:b7:e7:28:a0:6b:4c:55:99:2d:
         af:4c:40:91:7b:51:27:b9:de:4e:0d:83:f1:17:71:a4:dd:0c:
         3e:b8:95:42:d3:cc:22:e1:8c:67:16:32:d4:5e:1b:24:ba:53:
         35:2e:31:8a:c2:33:f7:51:03:21:2c:79:d7:24:72:d5:6f:5a:
         f2:77:e2:9b
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAeIMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MDc1NDExWhcNMjYxMDAxMDc1NDExWjAYMRYw
FAYDVQQDEw02YThiZjhhNy1kNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzcRUNhIGWxD3+gUV55qaqbngfwboEhBCwLyinWZdJS8K5VvVpmUORsHI
DjDY7v1oxBTptpxetqDMMq0QdyohdFOrQgktYOG5Va57rWfDCAOCtwoPt1eyjS5v
JrzTHO0qTRfnXjIoB7MDDmXwOc2ZgBVi+HyWY5SmejNgPM+4kozQonb7DOSCT808
Xnx+QI9wB3HtUATToSDMXXhVepbnBzoSwnOKUyvgdmFpe0YaqKtmNJ4WKO3uBhC+
AOUF4YSop+OGyFBkboBGhiUNFEp8oyzb1aKOucq1gjZP/70ed8MtilYN94CjyHRc
YBw4tpfdJc4vwWK9S84m7KKXdfjPHQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFNt0
PsiSKahARRZ86pWOTmSFZEQ9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDc2OEVBRTlGOTExMUYxQTg2NzFBQTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAOawkgDBACawkoDBACa
wk4wDAMEAZrCXgMEAZrCYAMEAZrEVDANBgkqhkiG9w0BAQsFAAOCAQEAb+HgtnPr
j8UnlWSamvNirUUgo7rNJZgVrfYMWZ3H7LfLjZ1bObSkv9/sYDVpcB5zrLIuGQn7
faYlDJGbNvRBdPMhsOsEZj4pSxuJRjQOOI9gLSVgHjyL8D2wngdrFMh3RzecSk3j
d91VXRrcTJmV7w7k9GzRZe6BPPzknt6weAjOg2AnD2yRcTbvgrhbv4wBx8NwqIRC
PssNDtAIBtC2q9GTtg2+LLJz0dzqzfU53GvDfiCCp/9rYKUV7CSLt+cooGtMVZkt
r0xAkXtRJ7neTg2D8RdxpN0MPriVQtPMIuGMZxYy1F4bJLpTNS4xisIz91EDISx5
1yRy1W9a8nfimw==
-----END CERTIFICATE-----