Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BFCD9CA69811F1AFB2B9B6CE1D38B0.roa
File:                     12BFCD9CA69811F1AFB2B9B6CE1D38B0.roa (raw, json)
Hash identifier:          9V7I+hjWESiaAZTpf8nBJvHveJ8WNWGxZGrWJWYale4=
Subject key identifier:   C2:EF:CD:B4:38:60:39:6C:C5:80:2B:46:BA:07:BD:F9:82:42:A8:52
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E471
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BFCD9CA69811F1AFB2B9B6CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:32:31 +0000
ROA not before:           Wed 02 Sep 2026 06:32:27 +0000
ROA not after:            Sun 27 Sep 2026 06:32:27 +0000
asID:                     984
IP address blocks:        154.200.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124017 (0x1e471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 06:32:27 2026 GMT
            Not After : Sep 27 06:32:27 2026 GMT
        Subject: CN=6a97c2ff-3dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:5f:47:aa:29:aa:ca:2e:3a:99:a9:ed:bd:
                    8c:f8:03:9e:c4:91:ab:db:52:ab:f4:54:54:d5:79:
                    9e:68:a3:08:0f:f9:e9:c9:67:3a:20:72:09:68:f1:
                    46:1c:ac:46:36:32:f9:a8:ad:e6:fb:6a:3a:fb:6e:
                    c5:ca:64:8b:98:2a:67:3c:36:b4:e9:1a:2d:23:08:
                    24:5d:72:68:8b:f3:98:6f:e5:83:7d:d6:44:70:05:
                    67:c2:d6:5f:8c:61:da:85:00:74:bb:4f:5e:04:7d:
                    75:33:ef:0a:2d:f1:34:f5:7d:25:44:36:b7:21:39:
                    d7:4a:d6:b1:bc:6d:12:2f:10:cc:2c:fe:fc:3f:7a:
                    b3:c2:a8:a9:43:cd:23:36:19:6f:52:91:e9:c1:91:
                    48:8a:d7:f7:6e:c2:d9:c8:d7:b2:64:f7:d0:d4:75:
                    0f:36:d8:50:3d:bd:12:70:fa:6e:5f:55:dd:90:c2:
                    56:3c:69:c1:3c:17:78:17:59:12:2c:25:c0:f2:6b:
                    36:2c:df:b6:8a:95:d1:3f:52:27:e4:5d:22:71:57:
                    5f:1c:bd:b7:8d:f1:d1:a1:fb:4c:f5:98:64:de:9a:
                    4e:c3:77:2c:25:57:5c:4b:e2:98:80:1a:44:8d:2b:
                    ab:4c:55:e6:e1:4b:bf:f5:ff:d1:5b:ed:4a:8c:9b:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EF:CD:B4:38:60:39:6C:C5:80:2B:46:BA:07:BD:F9:82:42:A8:52
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BFCD9CA69811F1AFB2B9B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:31:b1:47:fa:d5:18:c1:f2:90:c7:e8:42:3c:a9:ad:49:78:
         b6:68:c8:a9:e3:38:06:40:0e:97:6e:aa:0b:9b:49:37:fd:55:
         a4:f5:51:f2:3d:2c:b5:57:01:e7:99:23:9e:f9:93:6c:35:87:
         3a:a9:00:88:43:52:a6:60:b6:72:cb:44:0e:6c:7a:bb:d4:bb:
         a0:6c:78:4d:67:4b:cb:fc:e0:d4:ed:44:db:b2:8e:59:9c:3d:
         ff:d3:86:42:19:22:c0:b5:cd:bc:bc:99:ba:dd:38:bf:ff:54:
         ab:06:33:3b:18:1a:c8:9e:4a:cf:0b:d3:d8:8a:87:a1:98:29:
         84:af:12:7d:fd:9d:5a:75:01:df:44:9c:e2:c8:e5:d9:90:64:
         69:a9:d5:a2:87:35:19:f2:fd:ff:ca:b3:61:24:e9:5b:f7:85:
         54:ed:ef:09:81:52:b6:2b:02:c1:4d:ff:01:0d:72:4e:7f:66:
         b4:09:4c:72:53:e1:0e:92:c1:df:2f:4c:54:77:b0:05:37:b2:
         ec:33:9e:8b:d6:b8:9a:f8:fd:30:7a:cf:b6:5d:31:d5:c2:65:
         19:4c:45:35:b1:d8:25:fd:14:85:f8:42:40:49:43:29:2f:f0:
         81:fa:4d:46:d1:f2:2b:79:30:92:ee:ee:71:d4:63:38:c8:d1:
         f3:16:ba:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeRxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTAyMDYzMjI3WhcNMjYwOTI3MDYzMjI3WjAYMRYw
FAYDVQQDEw02YTk3YzJmZi0zZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2opfR6opqsouOpmp7b2M+AOexJGr21Kr9FRU1XmeaKMID/npyWc6IHIJ
aPFGHKxGNjL5qK3m+2o6+27FymSLmCpnPDa06RotIwgkXXJoi/OYb+WDfdZEcAVn
wtZfjGHahQB0u09eBH11M+8KLfE09X0lRDa3ITnXStaxvG0SLxDMLP78P3qzwqip
Q80jNhlvUpHpwZFIitf3bsLZyNeyZPfQ1HUPNthQPb0ScPpuX1XdkMJWPGnBPBd4
F1kSLCXA8ms2LN+2ipXRP1In5F0icVdfHL23jfHRoftM9Zhk3ppOw3csJVdcS+KY
gBpEjSurTFXm4Uu/9f/RW+1KjJuY+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMLv
zbQ4YDlsxYArRroHvfmCQqhSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkJGQ0Q5Q0E2OTgxMUYxQUZCMkI5QjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsgyMA0GCSqGSIb3DQEB
CwUAA4IBAQB0MbFH+tUYwfKQx+hCPKmtSXi2aMip4zgGQA6XbqoLm0k3/VWk9VHy
PSy1VwHnmSOe+ZNsNYc6qQCIQ1KmYLZyy0QObHq71LugbHhNZ0vL/ODU7UTbso5Z
nD3/04ZCGSLAtc28vJm63Ti//1SrBjM7GBrInkrPC9PYioehmCmErxJ9/Z1adQHf
RJziyOXZkGRpqdWihzUZ8v3/yrNhJOlb94VU7e8JgVK2KwLBTf8BDXJOf2a0CUxy
U+EOksHfL0xUd7AFN7LsM56L1ria+P0wes+2XTHVwmUZTEU1sdgl/RSF+EJASUMp
L/CB+k1G0fIreTCS7u5x1GM4yNHzFroQ
-----END CERTIFICATE-----