Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F68AA26A9D211F1BC9B8FBDCE1D38B0.roa
File:                     2F68AA26A9D211F1BC9B8FBDCE1D38B0.roa (raw, json)
Hash identifier:          bHhiUVfec5TkstMrTavw93u5rrH/IHdkLKi5+SI5vMM=
Subject key identifier:   9D:E3:2C:64:28:B8:6C:12:23:2D:6D:8F:DF:41:86:84:B1:BC:54:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F68AA26A9D211F1BC9B8FBDCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 09:06:03 +0000
ROA not before:           Sun 06 Sep 2026 09:05:58 +0000
ROA not after:            Wed 14 Oct 2026 09:05:58 +0000
asID:                     21859
IP address blocks:        154.194.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124399 (0x1e5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 09:05:58 2026 GMT
            Not After : Oct 14 09:05:58 2026 GMT
        Subject: CN=6a9d2cfb-aafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:6f:ba:55:24:ca:1c:72:05:43:22:e6:39:
                    56:95:59:c2:0f:76:da:98:e3:e6:26:2e:c3:ab:4d:
                    18:64:9a:3b:cf:e6:ab:f1:a9:f1:32:1c:5d:1b:dd:
                    52:e7:b9:4d:bb:df:81:f3:30:3b:21:b6:f6:0e:d4:
                    eb:e6:25:1c:ef:e9:17:31:a7:c5:d8:a9:f3:5f:52:
                    51:d5:5c:70:76:00:77:2a:4b:f7:98:74:db:86:51:
                    ca:b2:58:b5:42:58:5b:4e:e9:a0:8c:f9:f3:dd:f1:
                    3d:66:6a:7f:2d:10:12:b4:37:d3:fc:47:04:22:28:
                    bb:a3:1c:fb:2a:95:b7:5c:03:c3:d4:6e:7f:9e:6d:
                    1f:bf:e7:71:57:ba:43:68:c9:64:3b:a3:6d:e3:9f:
                    1c:2f:36:7b:da:39:f6:1f:7a:5b:c8:73:8a:14:0b:
                    cc:9b:33:82:13:8f:ee:e8:5d:9f:64:74:d2:38:f1:
                    ef:b2:17:73:76:c2:a5:9d:20:d9:cd:18:5f:fd:31:
                    a7:bc:b8:f0:e6:af:04:d2:6d:d5:0e:33:ea:22:ba:
                    f2:59:51:81:b5:4c:a8:10:bd:3d:3c:0f:ea:76:25:
                    68:8b:f4:cc:73:2b:6f:1c:05:1f:46:a2:01:86:1f:
                    99:79:7d:ce:95:7f:a0:30:83:d4:d1:88:a0:32:81:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E3:2C:64:28:B8:6C:12:23:2D:6D:8F:DF:41:86:84:B1:BC:54:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F68AA26A9D211F1BC9B8FBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:6f:18:1b:60:75:10:78:c6:3f:19:9d:03:d6:e4:11:42:
         e2:18:8e:e4:a9:52:1c:43:df:8c:ca:cd:8f:28:f2:be:c0:2d:
         57:59:6c:4a:8e:45:3e:58:40:49:88:88:58:32:e4:00:df:9b:
         c0:c0:a9:46:b8:d8:b2:99:98:3c:dd:73:94:08:5d:e8:e9:eb:
         61:ef:1e:2a:54:c9:e1:f5:a3:70:0c:db:da:f7:e7:81:8d:8d:
         03:e8:e9:3d:72:f2:05:e7:80:6c:8c:59:44:56:64:15:28:3a:
         82:95:42:f6:f0:27:99:68:ca:70:ac:f8:84:7f:70:c0:70:a5:
         58:8e:43:5b:06:ee:4e:46:74:72:c9:fc:8c:27:37:69:b3:09:
         cb:05:4b:43:c6:6d:f4:8b:15:32:be:be:2f:bb:a6:9f:3f:58:
         56:64:84:a5:85:a9:50:fa:11:e4:d7:e8:da:21:25:1d:9a:b6:
         c5:48:ac:27:d9:a4:4d:d7:a0:a8:31:aa:58:87:5a:64:2e:1d:
         7d:ef:3f:70:97:06:a2:52:e0:bc:8d:f1:ed:d3:e0:77:0d:7a:
         a3:f2:69:6a:dd:8f:f6:bb:e0:f6:02:d3:cc:42:54:48:69:5b:
         2e:cb:df:bf:06:5b:6e:9b:20:a2:14:7e:bb:c4:33:fd:e9:a3:
         f2:0b:6b:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeXvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA2MDkwNTU4WhcNMjYxMDE0MDkwNTU4WjAYMRYw
FAYDVQQDEw02YTlkMmNmYi1hYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmWdvulUkyhxyBUMi5jlWlVnCD3bamOPmJi7Dq00YZJo7z+ar8anxMhxd
G91S57lNu9+B8zA7Ibb2DtTr5iUc7+kXMafF2KnzX1JR1VxwdgB3Kkv3mHTbhlHK
sli1QlhbTumgjPnz3fE9Zmp/LRAStDfT/EcEIii7oxz7KpW3XAPD1G5/nm0fv+dx
V7pDaMlkO6Nt458cLzZ72jn2H3pbyHOKFAvMmzOCE4/u6F2fZHTSOPHvshdzdsKl
nSDZzRhf/TGnvLjw5q8E0m3VDjPqIrryWVGBtUyoEL09PA/qdiVoi/TMcytvHAUf
RqIBhh+ZeX3OlX+gMIPU0YigMoEiuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ3j
LGQouGwSIy1tj99BhoSxvFSSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjY4QUEyNkE5RDIxMUYxQkM5QjhGQkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI4MA0GCSqGSIb3DQEB
CwUAA4IBAQAr7W8YG2B1EHjGPxmdA9bkEULiGI7kqVIcQ9+Mys2PKPK+wC1XWWxK
jkU+WEBJiIhYMuQA35vAwKlGuNiymZg83XOUCF3o6eth7x4qVMnh9aNwDNva9+eB
jY0D6Ok9cvIF54BsjFlEVmQVKDqClUL28CeZaMpwrPiEf3DAcKVYjkNbBu5ORnRy
yfyMJzdpswnLBUtDxm30ixUyvr4vu6afP1hWZISlhalQ+hHk1+jaISUdmrbFSKwn
2aRN16CoMapYh1pkLh197z9wlwaiUuC8jfHt0+B3DXqj8mlq3Y/2u+D2AtPMQlRI
aVsuy9+/BltumyCiFH67xDP96aPyC2uY
-----END CERTIFICATE-----