Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D172012ADB811F1B3CB85DCCE1D38B0.roa
File:                     0D172012ADB811F1B3CB85DCCE1D38B0.roa (raw, json)
Hash identifier:          J4ip5EdDCw9+44dz1gAItih1X4ehfdH6pgdNa/CFpTw=
Subject key identifier:   E7:94:62:73:47:CF:59:B4:FC:93:7E:72:8A:48:C0:76:42:36:EC:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E76F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D172012ADB811F1B3CB85DCCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:09:03 +0000
ROA not before:           Fri 11 Sep 2026 08:08:59 +0000
ROA not after:            Fri 16 Oct 2026 08:08:59 +0000
asID:                     61112
IP address blocks:        154.85.18.0/23 maxlen: 24
                          154.85.18.0/24 maxlen: 24
                          154.85.19.0/24 maxlen: 24
                          154.88.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124783 (0x1e76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 08:08:59 2026 GMT
            Not After : Oct 16 08:08:59 2026 GMT
        Subject: CN=6aa3b71f-2a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:94:09:25:e0:90:e1:07:e8:ed:9f:2e:d9:
                    9e:16:6e:dd:54:aa:45:97:7b:93:bb:e2:6c:70:4d:
                    90:8e:16:32:aa:94:cf:74:d3:3c:4c:48:00:a0:29:
                    2d:b7:2a:8b:df:e4:0e:d6:19:cd:88:9d:62:0c:f4:
                    4b:ad:d3:8b:7b:5a:a0:1b:f4:83:2e:1c:22:be:3c:
                    ca:8d:12:f7:55:aa:74:e9:fd:5c:e8:17:29:76:f2:
                    17:8d:06:37:bb:56:9a:58:08:76:08:fc:28:ae:d2:
                    45:97:56:11:3e:2a:42:63:d5:fe:c4:d5:33:ae:68:
                    3d:ca:da:0d:36:dc:f6:59:e9:88:2c:f7:06:70:40:
                    64:4d:42:a0:d1:67:96:2a:62:60:32:04:c3:63:da:
                    ac:c0:17:e1:ca:3a:dd:20:86:85:b7:7f:01:a4:e3:
                    24:65:c6:16:26:20:84:1b:db:66:b2:cf:24:db:8f:
                    70:33:de:a1:11:a7:10:bc:21:58:03:a6:b5:5f:f3:
                    18:73:39:07:cb:c3:02:d1:85:3f:b8:c8:44:b4:f5:
                    86:56:42:8d:94:0e:e8:c5:87:38:86:b5:ff:0b:31:
                    af:e4:31:48:fc:f8:ed:bc:63:0b:9f:51:b7:3b:e8:
                    ce:4b:f4:58:cc:35:01:f5:7e:4a:e5:df:8e:a5:7f:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:62:73:47:CF:59:B4:FC:93:7E:72:8A:48:C0:76:42:36:EC:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D172012ADB811F1B3CB85DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.18.0/23
                  154.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:ee:3f:5f:27:30:d9:e7:ca:21:16:44:96:cb:34:b0:c6:
         96:3e:70:1c:ba:06:6a:36:a6:fd:e8:bc:1f:f5:65:1c:43:f2:
         c5:d6:4c:4f:bc:41:de:c0:c7:92:fb:29:cc:59:7d:f3:c0:9a:
         55:08:bd:17:62:53:5e:a1:08:43:5c:6a:61:2b:69:13:96:4e:
         8c:a6:b8:52:c0:55:c7:e5:b2:ec:5b:52:15:8e:6f:68:90:03:
         b5:e4:29:6c:0e:a0:96:5e:2a:fe:a2:6b:cd:1b:78:2c:0d:05:
         ec:1b:f9:63:74:3d:81:5c:90:a2:bb:a6:47:11:0d:ac:f9:45:
         9a:d3:69:69:3b:39:1f:48:0e:ea:92:f3:f2:d7:06:15:c3:46:
         07:8a:2b:3d:4a:98:3e:70:12:08:73:ab:97:ca:ef:85:fd:83:
         7c:82:c6:bf:cf:9c:fc:29:9d:17:ee:42:9d:f5:40:e6:a6:cf:
         e5:13:55:9a:86:c0:c7:ab:4d:4c:7d:13:04:b7:c4:d3:4a:fc:
         f9:65:cf:0c:04:98:e6:15:1e:70:89:03:b3:8d:4d:4b:15:be:
         9d:d2:f3:8d:71:c0:09:4d:87:20:a9:88:f4:95:48:5a:e6:23:
         e8:61:49:d7:9b:95:34:91:02:b6:44:5c:2d:eb:c2:6f:9a:a1:
         a0:f4:45:33
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAedvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTExMDgwODU5WhcNMjYxMDE2MDgwODU5WjAYMRYw
FAYDVQQDEw02YWEzYjcxZi0yYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzImUCSXgkOEH6O2fLtmeFm7dVKpFl3uTu+JscE2QjhYyqpTPdNM8TEgA
oCkttyqL3+QO1hnNiJ1iDPRLrdOLe1qgG/SDLhwivjzKjRL3Vap06f1c6BcpdvIX
jQY3u1aaWAh2CPwortJFl1YRPipCY9X+xNUzrmg9ytoNNtz2WemILPcGcEBkTUKg
0WeWKmJgMgTDY9qswBfhyjrdIIaFt38BpOMkZcYWJiCEG9tmss8k249wM96hEacQ
vCFYA6a1X/MYczkHy8MC0YU/uMhEtPWGVkKNlA7oxYc4hrX/CzGv5DFI/PjtvGML
n1G3O+jOS/RYzDUB9X5K5d+OpX8MrQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOeU
YnNHz1m0/JN+copIwHZCNuyTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRDE3MjAxMkFEQjgxMUYxQjNDQjg1RENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmlUSAwQBmlhCMA0GCSqG
SIb3DQEBCwUAA4IBAQBDx+4/Xycw2efKIRZElss0sMaWPnAcugZqNqb96Lwf9WUc
Q/LF1kxPvEHewMeS+ynMWX3zwJpVCL0XYlNeoQhDXGphK2kTlk6MprhSwFXH5bLs
W1IVjm9okAO15ClsDqCWXir+omvNG3gsDQXsG/ljdD2BXJCiu6ZHEQ2s+UWa02lp
OzkfSA7qkvPy1wYVw0YHiis9Spg+cBIIc6uXyu+F/YN8gsa/z5z8KZ0X7kKd9UDm
ps/lE1WahsDHq01MfRMEt8TTSvz5Zc8MBJjmFR5wiQOzjU1LFb6d0vONccAJTYcg
qYj0lUha5iPoYUnXm5U0kQK2RFwt68JvmqGg9EUz
-----END CERTIFICATE-----