Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F42CB6B0FD11F1A07253A2CE1D38B0.roa
File:                     09F42CB6B0FD11F1A07253A2CE1D38B0.roa (raw, json)
Hash identifier:          683SX+bOKJhwRL44zjVGfD67IMdAXVG39zMZaH1jhCE=
Subject key identifier:   A6:12:46:8C:93:6A:17:43:F2:9E:FC:EC:F3:2F:A8:8C:AE:DD:2A:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E871
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F42CB6B0FD11F1A07253A2CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 12:00:27 +0000
ROA not before:           Tue 15 Sep 2026 12:00:23 +0000
ROA not after:            Thu 22 Oct 2026 12:00:23 +0000
asID:                     11404
IP address blocks:        154.193.36.0/22 maxlen: 24
                          154.193.40.0/21 maxlen: 24
                          154.193.56.0/22 maxlen: 24
                          154.193.64.0/20 maxlen: 24
                          154.193.80.0/22 maxlen: 24
                          154.193.88.0/21 maxlen: 24
                          154.194.200.0/22 maxlen: 24
                          154.194.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125041 (0x1e871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 12:00:23 2026 GMT
            Not After : Oct 22 12:00:23 2026 GMT
        Subject: CN=6aa9335b-1c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:06:8b:a6:df:d2:8e:93:8d:0c:5c:c4:fd:
                    d0:83:57:0f:08:d2:d1:25:16:ea:39:73:13:36:ee:
                    aa:6b:c9:b8:f0:b5:f5:5f:f1:a3:b1:f2:77:0a:45:
                    ec:87:a2:b4:ac:a6:b3:35:53:1a:14:ce:dc:16:82:
                    32:2a:f3:bf:07:05:ac:2f:a2:b3:a2:8e:58:d1:a5:
                    fc:6b:bc:59:f1:7b:bc:8b:48:29:d6:dc:92:0b:15:
                    26:a5:20:9a:40:14:6f:be:fc:d3:9c:74:b6:4b:da:
                    e7:92:8c:b7:be:13:23:02:8d:23:31:53:0a:c7:37:
                    68:95:d4:17:b4:fd:8d:30:4e:a6:68:1b:a4:b3:64:
                    df:32:5c:8c:26:e4:be:ab:eb:66:ca:6c:0f:83:28:
                    14:3a:6d:58:10:79:98:8a:67:3a:9e:15:0d:e2:77:
                    a4:e6:fa:1a:52:09:13:50:ec:6d:b6:f7:01:54:9c:
                    0a:10:b4:8b:0f:2f:af:9a:59:26:d5:9b:3a:1a:fb:
                    2e:c3:a3:37:6f:ec:f6:62:d3:c2:33:21:db:ba:29:
                    ca:21:1c:4d:fd:46:7c:a5:f3:5b:53:a2:01:05:78:
                    7e:2f:61:eb:0d:3c:8a:f6:ba:a2:2c:48:d7:55:8c:
                    9e:ef:b0:de:2d:fc:95:c4:99:b2:9d:8a:b6:5a:ce:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:46:8C:93:6A:17:43:F2:9E:FC:EC:F3:2F:A8:8C:AE:DD:2A:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F42CB6B0FD11F1A07253A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.36.0-154.193.47.255
                  154.193.56.0/22
                  154.193.64.0-154.193.83.255
                  154.193.88.0/21
                  154.194.200.0/22
                  154.194.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:50:fd:ba:76:c2:c8:20:8d:04:a2:ee:e8:d3:45:a0:25:e2:
         87:76:7c:1e:bc:5b:21:29:89:6b:90:55:7d:c7:3a:9f:40:7b:
         bc:fe:fe:49:cd:0f:48:f8:6c:3d:f6:06:02:93:dd:3e:6e:ba:
         b3:0a:d4:f9:44:96:15:e6:71:bd:03:d0:a6:2b:99:61:3b:00:
         78:7e:01:83:2b:93:59:ae:33:06:f5:3d:1c:0a:df:f2:88:55:
         42:96:5e:aa:b1:7c:16:b0:73:77:9c:b5:2f:36:c5:0b:7b:38:
         4c:79:fa:51:85:2f:6b:c4:ed:e8:17:7c:72:bd:65:21:cc:36:
         eb:19:96:36:dc:bd:7c:b0:7f:c4:13:f6:72:14:b4:43:93:b8:
         01:a9:50:23:aa:2f:a3:0b:39:20:ac:4e:06:26:56:cb:42:4f:
         ce:9c:03:2a:74:b7:b5:3a:84:47:29:20:55:ae:c2:c2:d0:34:
         60:5d:94:6a:1f:a8:ed:b1:a5:6a:1e:5d:eb:91:f7:17:33:f5:
         4d:cd:df:05:30:45:4e:e7:42:11:70:fe:fd:69:5b:af:49:83:
         43:fe:1f:51:95:dd:2b:54:9b:bb:bd:80:18:2a:fb:ae:9f:1b:
         d2:7f:4f:91:46:9b:2b:50:db:7b:a3:24:91:c6:a4:92:67:bb:
         a3:5c:5c:d7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAehxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE1MTIwMDIzWhcNMjYxMDIyMTIwMDIzWjAYMRYw
FAYDVQQDEw02YWE5MzM1Yi0xYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqp4Gi6bf0o6TjQxcxP3Qg1cPCNLRJRbqOXMTNu6qa8m48LX1X/GjsfJ3
CkXsh6K0rKazNVMaFM7cFoIyKvO/BwWsL6Kzoo5Y0aX8a7xZ8Xu8i0gp1tySCxUm
pSCaQBRvvvzTnHS2S9rnkoy3vhMjAo0jMVMKxzdoldQXtP2NME6maBuks2TfMlyM
JuS+q+tmymwPgygUOm1YEHmYimc6nhUN4nek5voaUgkTUOxttvcBVJwKELSLDy+v
mlkm1Zs6Gvsuw6M3b+z2YtPCMyHbuinKIRxN/UZ8pfNbU6IBBXh+L2HrDTyK9rqi
LEjXVYye77DeLfyVxJmynYq2Ws5B5QIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFKYS
RoyTahdD8p787PMvqIyu3SpQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOUY0MkNCNkIwRkQxMUYxQTA3MjUzQTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAKawSQDBASawSADBAKa
wTgwDAMEBprBQAMEAprBUAMEA5rBWAMEAprCyAMEAprC5DANBgkqhkiG9w0BAQsF
AAOCAQEAoVD9unbCyCCNBKLu6NNFoCXih3Z8HrxbISmJa5BVfcc6n0B7vP7+Sc0P
SPhsPfYGApPdPm66swrU+USWFeZxvQPQpiuZYTsAeH4BgyuTWa4zBvU9HArf8ohV
QpZeqrF8FrBzd5y1LzbFC3s4THn6UYUva8Tt6Bd8cr1lIcw26xmWNty9fLB/xBP2
chS0Q5O4AalQI6ovows5IKxOBiZWy0JPzpwDKnS3tTqERykgVa7CwtA0YF2Uah+o
7bGlah5d65H3FzP1Tc3fBTBFTudCEXD+/Wlbr0mDQ/4fUZXdK1Sbu72AGCr7rp8b
0n9PkUabK1Dbe6Mkkcakkme7o1xc1w==
-----END CERTIFICATE-----