Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D7BB70A2E511F1B07F9ECECE1D38B0.roa
File:                     17D7BB70A2E511F1B07F9ECECE1D38B0.roa (raw, json)
Hash identifier:          SeJXtau2TKE8z3h0pOhkICej9ipnNjc4/800mMydU+A=
Subject key identifier:   D8:B5:ED:7F:7B:85:38:92:37:3B:24:32:1A:44:B1:5E:41:F9:E9:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D7BB70A2E511F1B07F9ECECE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:33:46 +0000
ROA not before:           Fri 28 Aug 2026 13:33:42 +0000
ROA not after:            Sat 04 Sep 2027 13:33:42 +0000
asID:                     398704
IP address blocks:        154.92.128.0/22 maxlen: 24
                          154.92.128.0/24 maxlen: 24
                          154.92.129.0/24 maxlen: 24
                          154.92.130.0/24 maxlen: 24
                          154.92.131.0/24 maxlen: 24
                          154.92.132.0/22 maxlen: 24
                          154.92.132.0/23 maxlen: 24
                          154.92.132.0/24 maxlen: 24
                          154.92.133.0/24 maxlen: 24
                          154.92.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123852 (0x1e3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 28 13:33:42 2026 GMT
            Not After : Sep  4 13:33:42 2027 GMT
        Subject: CN=6a918e3a-7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:5f:31:67:21:78:03:d6:0a:60:b9:c6:6a:
                    74:99:6f:27:0d:e2:75:f2:a6:4a:69:7b:8a:2f:1b:
                    27:b3:57:cd:04:35:b6:c2:c3:6b:6e:dc:ba:dd:c7:
                    10:a8:36:11:38:62:92:ed:71:cb:c6:f4:ec:61:ba:
                    a3:2a:c3:b7:1d:35:4b:9d:c1:2a:7c:a4:b6:db:d6:
                    b7:a7:83:02:20:38:a7:a4:bf:c4:ea:3f:2b:4c:ba:
                    49:da:4d:b7:b9:84:44:3c:71:b1:92:74:ae:36:23:
                    86:6e:eb:67:5f:b9:28:01:aa:4f:a0:d1:22:e7:e5:
                    ba:02:43:91:5f:d6:bc:fc:40:c6:19:a0:16:b1:75:
                    e4:af:a2:ff:9e:67:fb:41:d7:76:5d:fb:bc:d8:89:
                    97:83:d1:6a:da:3f:97:2b:30:a7:93:bc:6a:cd:46:
                    a3:66:31:b1:76:79:b3:e0:bf:6e:6b:6e:df:23:70:
                    a0:43:87:31:c5:5e:28:9b:15:38:0b:27:07:8c:09:
                    f5:e3:8a:b6:75:8a:66:5b:b1:8e:48:c5:30:c8:e2:
                    6c:cb:c8:f6:d9:25:11:3d:f8:fe:8e:d9:74:d2:ee:
                    5e:1e:39:26:57:55:2c:de:1c:1f:f6:76:fb:d7:4e:
                    89:4f:64:1d:58:b5:e4:9e:c5:2d:fa:94:7f:b6:c5:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:ED:7F:7B:85:38:92:37:3B:24:32:1A:44:B1:5E:41:F9:E9:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D7BB70A2E511F1B07F9ECECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:2b:96:7b:ce:5d:7b:cb:52:0f:a5:b2:c2:82:eb:f9:65:
         46:e1:55:6c:50:e7:1e:67:59:8e:1e:8a:79:22:08:ae:c4:43:
         8c:54:bb:c7:a2:49:a2:7f:5d:d6:54:e1:80:e1:8d:84:41:98:
         97:43:11:7d:f2:8c:f9:87:2a:8d:8b:e4:06:e7:af:3d:23:10:
         0b:fe:59:2e:4f:00:54:f3:c0:bd:43:10:f1:71:b7:e7:2b:83:
         ef:de:12:57:de:2e:84:0b:ca:39:f6:ba:4e:6b:be:35:0b:56:
         8e:40:05:50:ed:cb:d8:fe:88:e6:fd:e0:58:b4:e3:cc:c6:d4:
         00:be:c7:61:94:82:f4:e2:43:26:b9:04:37:a9:1a:b0:8e:fb:
         18:53:70:10:92:87:d3:5f:10:3a:0b:c7:ce:1d:f1:44:46:8e:
         0c:28:6f:7d:c5:1c:13:be:ee:fd:da:f1:d5:12:5b:69:4d:2d:
         21:4d:87:8c:7d:b1:36:b1:55:dc:76:d8:e3:5e:9a:b5:d5:a1:
         c2:71:9d:74:90:f2:53:2d:a8:d7:4c:39:7c:5a:b5:9a:30:f1:
         0c:16:07:c5:02:1e:12:bf:13:0b:5a:36:62:7b:5c:ee:e5:49:
         4e:aa:02:36:c5:19:dc:45:a2:73:7b:64:ed:92:59:7d:d1:7f:
         ec:bb:51:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAePMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI4MTMzMzQyWhcNMjcwOTA0MTMzMzQyWjAYMRYw
FAYDVQQDEw02YTkxOGUzYS03NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr5FfMWcheAPWCmC5xmp0mW8nDeJ18qZKaXuKLxsns1fNBDW2wsNrbty6
3ccQqDYROGKS7XHLxvTsYbqjKsO3HTVLncEqfKS229a3p4MCIDinpL/E6j8rTLpJ
2k23uYREPHGxknSuNiOGbutnX7koAapPoNEi5+W6AkORX9a8/EDGGaAWsXXkr6L/
nmf7Qdd2Xfu82ImXg9Fq2j+XKzCnk7xqzUajZjGxdnmz4L9ua27fI3CgQ4cxxV4o
mxU4CycHjAn144q2dYpmW7GOSMUwyOJsy8j22SURPfj+jtl00u5eHjkmV1Us3hwf
9nb7106JT2QdWLXknsUt+pR/tsXAKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNi1
7X97hTiSNzskMhpEsV5B+elIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xN0Q3QkI3MEEyRTUxMUYxQjA3RjlFQ0VDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlyAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvwSuWe85de8tSD6WywoLr+WVG4VVsUOceZ1mOHop5IgiuxEOMVLvH
okmif13WVOGA4Y2EQZiXQxF98oz5hyqNi+QG5689IxAL/lkuTwBU88C9QxDxcbfn
K4Pv3hJX3i6EC8o59rpOa741C1aOQAVQ7cvY/ojm/eBYtOPMxtQAvsdhlIL04kMm
uQQ3qRqwjvsYU3AQkofTXxA6C8fOHfFERo4MKG99xRwTvu792vHVEltpTS0hTYeM
fbE2sVXcdtjjXpq11aHCcZ10kPJTLajXTDl8WrWaMPEMFgfFAh4SvxMLWjZie1zu
5UlOqgI2xRncRaJze2Ttkll90X/su1ES
-----END CERTIFICATE-----