Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197F770AB4D411F1900AC5C0CE1D38B0.roa
File:                     197F770AB4D411F1900AC5C0CE1D38B0.roa (raw, json)
Hash identifier:          jItr5i5Bz16sacX4/JCa9E+TkstuhHpaqGJ8N8LpPKo=
Subject key identifier:   6E:B5:20:F8:27:2F:E3:43:9F:1A:77:BD:36:AC:A9:58:3B:D2:F2:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197F770AB4D411F1900AC5C0CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:17:28 +0000
ROA not before:           Sun 20 Sep 2026 09:17:24 +0000
ROA not after:            Sat 24 Oct 2026 09:17:24 +0000
asID:                     400619
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125183 (0x1e8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:17:24 2026 GMT
            Not After : Oct 24 09:17:24 2026 GMT
        Subject: CN=6aafa4a8-0fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:ae:50:0f:bd:6a:38:a5:24:ce:dc:94:9a:
                    ea:8c:39:3e:88:05:ad:35:85:ea:8a:e4:87:a8:d1:
                    55:01:90:8f:9f:e6:4a:10:50:69:78:f3:2d:4e:49:
                    85:14:21:48:ee:b7:50:c3:50:56:78:27:8a:ac:58:
                    f9:3c:a4:63:48:0b:ae:74:de:44:e4:02:23:60:b4:
                    ad:58:23:0a:89:bc:8d:a4:dc:df:72:12:25:94:8e:
                    7c:f0:a6:84:6a:f5:62:4a:d1:85:e0:98:df:4d:48:
                    af:58:f1:d8:67:e5:8b:12:04:a3:cc:c6:d3:10:ba:
                    e7:c4:ae:a8:e8:88:54:2b:51:f4:b7:8a:56:4f:55:
                    1a:e6:87:df:55:b9:5b:3c:7e:9b:b4:84:92:17:99:
                    0d:6b:22:9f:e5:1e:10:4e:61:11:f0:48:21:09:f9:
                    9a:31:82:e7:90:38:4c:5c:fa:b4:36:f3:ad:cf:bb:
                    f9:8a:b2:9b:ff:eb:d8:f9:2b:b7:2b:d8:c5:f5:dd:
                    fc:75:61:be:90:52:f2:ad:19:9a:69:c4:6c:05:c7:
                    c6:21:e2:37:57:f0:8c:35:6a:59:fb:fc:c3:3c:db:
                    e4:10:38:72:01:4e:d8:38:7c:fe:58:0a:e1:94:62:
                    ae:56:d7:46:fd:f9:de:54:e8:05:d8:ed:55:4a:09:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:20:F8:27:2F:E3:43:9F:1A:77:BD:36:AC:A9:58:3B:D2:F2:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197F770AB4D411F1900AC5C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ba:f3:18:f2:45:50:b3:90:d6:08:11:b9:b0:f8:4f:42:9e:
         01:a1:4c:6b:e2:69:11:ae:c0:09:e2:66:75:b4:3d:f7:e6:60:
         03:9f:d7:b7:59:c5:3d:2f:17:82:2d:89:76:59:ed:50:0f:a7:
         b9:3f:bc:56:e2:fc:0e:7a:17:2c:a5:ff:bc:1f:26:47:62:76:
         61:1d:d3:ee:60:57:8d:db:a8:e0:5d:0a:be:65:d2:59:99:e6:
         db:91:bf:91:11:4c:9d:54:65:8c:c0:46:f6:70:09:5c:0b:bb:
         be:c1:03:1c:37:78:22:b9:c2:65:7c:53:97:ac:22:9f:8d:9c:
         e5:2d:0c:43:1b:ee:b6:74:31:3e:e1:c3:58:85:69:6d:96:f4:
         f0:bc:cb:63:29:cc:2b:23:c2:d8:31:77:80:2b:ae:7b:4f:dc:
         83:eb:15:4b:81:69:cb:9d:55:3d:0b:39:ed:a5:dc:3f:57:fa:
         2d:87:f7:6d:99:84:9d:b6:87:a3:b6:82:d4:b7:ec:10:6c:57:
         0d:3d:c5:d1:a4:5f:2e:e6:f1:66:35:c8:92:be:0e:8c:f6:6a:
         a6:de:80:c9:b9:6c:a6:c5:47:a0:67:82:2d:ad:77:85:d0:65:
         6c:d0:9c:9a:34:56:4d:0a:a5:47:5a:46:d7:7b:32:92:a3:6d:
         e6:fd:69:2a
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAej/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIwMDkxNzI0WhcNMjYxMDI0MDkxNzI0WjAYMRYw
FAYDVQQDEw02YWFmYTRhOC0wZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqcyuUA+9ajilJM7clJrqjDk+iAWtNYXqiuSHqNFVAZCPn+ZKEFBpePMt
TkmFFCFI7rdQw1BWeCeKrFj5PKRjSAuudN5E5AIjYLStWCMKibyNpNzfchIllI58
8KaEavViStGF4JjfTUivWPHYZ+WLEgSjzMbTELrnxK6o6IhUK1H0t4pWT1Ua5off
VblbPH6btISSF5kNayKf5R4QTmER8EghCfmaMYLnkDhMXPq0NvOtz7v5irKb/+vY
+Su3K9jF9d38dWG+kFLyrRmaacRsBcfGIeI3V/CMNWpZ+/zDPNvkEDhyAU7YOHz+
WArhlGKuVtdG/fneVOgF2O1VSgmpdwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFG61
IPgnL+NDnxp3vTasqVg70vJjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOTdGNzcwQUI0RDQxMUYxOTAwQUM1QzBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBADu68xjyRVCzkNYIEbmw+E9CngGhTGviaRGu
wAniZnW0PffmYAOf17dZxT0vF4ItiXZZ7VAPp7k/vFbi/A56Fyyl/7wfJkdidmEd
0+5gV43bqOBdCr5l0lmZ5tuRv5ERTJ1UZYzARvZwCVwLu77BAxw3eCK5wmV8U5es
Ip+NnOUtDEMb7rZ0MT7hw1iFaW2W9PC8y2MpzCsjwtgxd4ArrntP3IPrFUuBacud
VT0LOe2l3D9X+i2H922ZhJ22h6O2gtS37BBsVw09xdGkXy7m8WY1yJK+Doz2aqbe
gMm5bKbFR6Bngi2td4XQZWzQnJo0Vk0KpUdaRtd7MpKjbeb9aSo=
-----END CERTIFICATE-----