Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3764E7EAD68B11F1BB839819CF1D38B0.roa
File:                     3764E7EAD68B11F1BB839819CF1D38B0.roa (raw, json)
Hash identifier:          ZRFyzkZ53JgAwSwy4CkCx5xWVvNaYkrEfxM4+R+H5A8=
Subject key identifier:   B1:6B:6D:40:3D:10:E0:AC:CE:9E:C8:08:0A:09:91:F5:8A:3D:CF:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F220
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3764E7EAD68B11F1BB839819CF1D38B0.roa
Signing time:             Mon 02 Nov 2026 07:01:25 +0000
ROA not before:           Mon 02 Nov 2026 07:01:20 +0000
ROA not after:            Thu 12 Nov 2026 07:01:20 +0000
asID:                     135377
IP address blocks:        154.82.22.0/24 maxlen: 24
                          154.82.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127520 (0x1f220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  2 07:01:20 2026 GMT
            Not After : Nov 12 07:01:20 2026 GMT
        Subject: CN=6ae83544-d210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:ad:86:dd:44:f8:bf:67:40:22:67:f4:15:
                    0f:d3:b7:44:13:d3:aa:34:5d:63:30:5c:67:1e:62:
                    da:90:f6:08:c4:76:c4:9f:b2:d0:f5:58:2e:7e:11:
                    7f:60:4a:78:fd:2e:67:ee:78:60:48:65:17:95:18:
                    8d:a4:1e:f8:a5:79:a3:be:46:7b:59:07:de:f9:c6:
                    c9:c6:71:d4:6a:d2:c8:4a:de:1e:81:50:b0:87:47:
                    27:2a:1d:4f:02:20:d3:59:23:d1:49:c0:ed:40:08:
                    9f:ba:6d:a2:28:d4:31:50:f7:20:08:f9:28:bd:8f:
                    6e:0a:b0:e2:f5:ac:68:97:f0:5c:17:1f:6a:4f:d1:
                    4d:f6:4c:3a:a2:07:cb:c2:65:49:8b:14:a8:36:8e:
                    04:70:83:af:88:4b:7d:cf:c5:59:93:a7:7a:ed:e7:
                    50:74:67:12:cb:b5:cb:41:12:bd:75:07:93:b8:9b:
                    f9:3b:92:13:c8:0a:f9:67:b2:ba:52:cc:ec:0a:46:
                    18:27:b9:35:07:d3:8e:78:d5:44:25:6f:17:d3:6e:
                    07:04:44:84:29:03:5a:a5:53:67:f6:e2:ee:d4:69:
                    a8:de:ef:f2:6c:19:1f:56:59:4d:e9:1b:a6:6f:55:
                    22:66:67:4a:7a:f7:6a:69:70:b7:b1:03:7d:cc:e9:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:6D:40:3D:10:E0:AC:CE:9E:C8:08:0A:09:91:F5:8A:3D:CF:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3764E7EAD68B11F1BB839819CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:dd:ec:b4:cb:2b:c9:98:9c:57:fa:af:80:1e:d9:7b:23:
         75:19:b9:a1:78:f3:68:06:35:c5:3a:9d:ae:29:68:a2:75:05:
         57:85:6d:bc:df:73:0c:6c:4d:5c:74:b6:bd:6d:8a:53:4d:10:
         1e:ed:b8:ef:34:b6:27:c7:14:2c:93:08:9d:45:e4:f0:42:94:
         19:17:c6:f0:48:25:7e:98:fb:5c:ac:94:7e:48:91:ac:34:f5:
         19:df:d1:cd:83:0c:0c:57:a4:29:58:52:1f:86:9e:66:6c:30:
         69:50:89:93:dd:f4:aa:06:84:e0:83:3e:88:ca:cf:11:18:6d:
         2c:cb:81:1f:95:e8:67:aa:70:27:3a:5f:ac:ce:c8:14:44:f3:
         28:db:54:b0:c8:ee:ab:4f:88:05:bb:54:44:47:1c:92:b8:ae:
         5c:25:30:9b:80:b4:72:fd:3b:30:30:c3:54:f5:6a:c1:2b:35:
         a7:bb:9c:69:23:79:d4:cd:e3:71:55:69:a6:5c:03:31:cf:77:
         5b:6b:a6:16:af:42:79:34:33:8f:62:e2:6b:d6:17:d7:18:f0:
         4a:da:5f:be:65:e0:ec:7d:60:35:03:22:19:37:73:9d:da:c0:
         ae:b9:95:ea:26:8b:08:ee:22:5e:af:1a:bb:48:a9:b0:c9:06:
         71:20:78:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAfIgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMTAyMDcwMTIwWhcNMjYxMTEyMDcwMTIwWjAYMRYw
FAYDVQQDEw02YWU4MzU0NC1kMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzStht1E+L9nQCJn9BUP07dEE9OqNF1jMFxnHmLakPYIxHbEn7LQ9Vgu
fhF/YEp4/S5n7nhgSGUXlRiNpB74pXmjvkZ7WQfe+cbJxnHUatLISt4egVCwh0cn
Kh1PAiDTWSPRScDtQAifum2iKNQxUPcgCPkovY9uCrDi9axol/BcFx9qT9FN9kw6
ogfLwmVJixSoNo4EcIOviEt9z8VZk6d67edQdGcSy7XLQRK9dQeTuJv5O5ITyAr5
Z7K6UszsCkYYJ7k1B9OOeNVEJW8X024HBESEKQNapVNn9uLu1Gmo3u/ybBkfVllN
6Rumb1UiZmdKevdqaXC3sQN9zOl6tQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLFr
bUA9EOCszp7ICAoJkfWKPc9zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNzY0RTdFQUQ2OEIxMUYxQkI4Mzk4MTlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlIWMA0GCSqGSIb3DQEB
CwUAA4IBAQAWD93stMsryZicV/qvgB7ZeyN1GbmhePNoBjXFOp2uKWiidQVXhW28
33MMbE1cdLa9bYpTTRAe7bjvNLYnxxQskwidReTwQpQZF8bwSCV+mPtcrJR+SJGs
NPUZ39HNgwwMV6QpWFIfhp5mbDBpUImT3fSqBoTggz6Iys8RGG0sy4EflehnqnAn
Ol+szsgURPMo21SwyO6rT4gFu1RERxySuK5cJTCbgLRy/TswMMNU9WrBKzWnu5xp
I3nUzeNxVWmmXAMxz3dba6YWr0J5NDOPYuJr1hfXGPBK2l++ZeDsfWA1AyIZN3Od
2sCuuZXqJosI7iJerxq7SKmwyQZxIHjU
-----END CERTIFICATE-----