Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379570F69FD411F18DB13DB1CE1D38B0.roa
File:                     379570F69FD411F18DB13DB1CE1D38B0.roa (raw, json)
Hash identifier:          s6XBDloP7bM8HIwdmnRUHjNNRTZKkASOWYm7usaGAeI=
Subject key identifier:   63:24:35:6A:99:DE:E9:AA:6C:84:BD:E2:18:69:75:FD:47:2C:9A:7F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E262
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379570F69FD411F18DB13DB1CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 15:55:24 +0000
ROA not before:           Mon 24 Aug 2026 15:55:20 +0000
ROA not after:            Thu 01 Oct 2026 15:55:20 +0000
asID:                     62240
IP address blocks:        154.194.70.0/24 maxlen: 24
                          154.194.71.0/24 maxlen: 24
                          154.194.75.0/24 maxlen: 24
                          154.194.76.0/24 maxlen: 24
                          154.194.77.0/24 maxlen: 24
                          154.194.86.0/24 maxlen: 24
                          154.194.87.0/24 maxlen: 24
                          154.194.88.0/24 maxlen: 24
                          154.195.172.0/24 maxlen: 24
                          154.196.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123490 (0x1e262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 15:55:20 2026 GMT
            Not After : Oct  1 15:55:20 2026 GMT
        Subject: CN=6a8c696c-a008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:f7:f6:17:c1:6f:11:0b:c0:51:2d:23:48:
                    0c:69:66:9b:a1:0b:98:cb:a6:5a:2d:8e:16:c5:dc:
                    78:30:20:42:88:fd:d3:b3:82:88:20:b7:a1:be:3e:
                    48:80:d8:c0:e8:c8:70:4b:6f:6a:4b:32:db:a1:2e:
                    9e:74:29:e9:64:11:a5:3d:bb:06:7a:5f:e5:7b:8b:
                    ee:58:f4:b8:61:90:ee:24:57:d5:97:7e:ef:1b:bb:
                    b9:b5:7a:3a:c0:2b:17:6b:ee:1e:44:c7:90:1f:4d:
                    3d:6d:d7:99:82:9c:b6:98:88:e1:3a:34:53:c5:25:
                    f8:e3:25:84:89:1f:6b:97:0f:f4:a8:a4:2e:67:00:
                    1f:c4:c2:26:15:71:00:bd:5b:61:33:5f:8f:56:bc:
                    ba:52:6e:6a:3b:a3:3e:e2:e6:9d:9c:5b:ac:70:a8:
                    48:23:eb:9f:e2:fa:62:7f:e1:56:2a:35:da:07:9d:
                    dd:d5:b4:02:f1:c9:ef:7b:51:a7:48:e1:f5:c6:99:
                    28:66:ce:d3:58:25:38:23:10:f8:e4:de:ee:4e:e1:
                    e3:26:bd:7c:db:71:8a:11:8e:5d:70:74:82:40:32:
                    4a:82:53:99:5a:19:68:c3:aa:dd:ee:84:60:98:5a:
                    d8:a6:aa:48:b2:24:7b:0d:97:00:bf:08:80:49:ea:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:24:35:6A:99:DE:E9:AA:6C:84:BD:E2:18:69:75:FD:47:2C:9A:7F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379570F69FD411F18DB13DB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.70.0/23
                  154.194.75.0-154.194.77.255
                  154.194.86.0-154.194.88.255
                  154.195.172.0/24
                  154.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:59:0e:6c:0b:c1:0c:ae:24:36:1a:d8:53:21:30:f5:db:74:
         c4:90:f6:26:59:b3:a6:39:fd:64:39:e4:8b:b9:6a:a5:63:72:
         96:46:18:d7:bb:b0:0b:3d:a2:1f:a0:78:f2:f5:32:4e:1d:b5:
         d0:f3:d4:dd:a4:39:f3:12:6c:9a:c6:7a:e3:18:a8:89:1f:8e:
         e4:19:8f:a8:14:6d:ff:9e:17:50:c1:16:be:75:59:64:07:99:
         37:49:74:81:94:38:6c:f9:43:1e:1e:31:71:05:1f:62:6a:6b:
         ca:44:37:45:41:ff:80:8c:c8:32:17:83:c6:9d:5b:9d:4c:79:
         57:ac:fc:92:5f:71:5c:2f:ef:2e:30:05:b6:0b:94:d3:e7:7d:
         ec:ac:9f:44:1e:95:0d:cb:36:70:e5:5c:34:1b:6e:1f:7e:04:
         85:69:d1:4a:24:61:08:66:05:4c:e2:b6:0a:3c:61:c7:26:11:
         78:32:5c:0d:8a:a6:8a:1a:80:80:c8:e6:e9:11:ca:5b:97:3b:
         f5:a5:fb:31:79:38:1d:e6:bd:a0:75:45:6d:ae:bb:3f:f5:0d:
         b6:e5:11:b7:ed:2a:0f:2a:28:17:69:e6:9f:de:2d:71:8f:c5:
         6f:50:ff:43:16:b8:f1:4c:9f:87:f2:df:18:34:6d:4e:42:30:
         b7:d7:3d:3d
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAeJiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MTU1NTIwWhcNMjYxMDAxMTU1NTIwWjAYMRYw
FAYDVQQDEw02YThjNjk2Yy1hMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2br39hfBbxELwFEtI0gMaWaboQuYy6ZaLY4Wxdx4MCBCiP3Ts4KIILeh
vj5IgNjA6MhwS29qSzLboS6edCnpZBGlPbsGel/le4vuWPS4YZDuJFfVl37vG7u5
tXo6wCsXa+4eRMeQH009bdeZgpy2mIjhOjRTxSX44yWEiR9rlw/0qKQuZwAfxMIm
FXEAvVthM1+PVry6Um5qO6M+4uadnFuscKhII+uf4vpif+FWKjXaB53d1bQC8cnv
e1GnSOH1xpkoZs7TWCU4IxD45N7uTuHjJr1823GKEY5dcHSCQDJKglOZWhlow6rd
7oRgmFrYpqpIsiR7DZcAvwiASepF0wIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGMk
NWqZ3umqbIS94hhpdf1HLJp/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNzk1NzBGNjlGRDQxMUYxOERCMTNEQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmsJGMAwDBACawksDBAGa
wkwwDAMEAZrCVgMEAJrCWAMEAJrDrAMEAJrEHjANBgkqhkiG9w0BAQsFAAOCAQEA
AlkObAvBDK4kNhrYUyEw9dt0xJD2Jlmzpjn9ZDnki7lqpWNylkYY17uwCz2iH6B4
8vUyTh210PPU3aQ58xJsmsZ64xioiR+O5BmPqBRt/54XUMEWvnVZZAeZN0l0gZQ4
bPlDHh4xcQUfYmprykQ3RUH/gIzIMheDxp1bnUx5V6z8kl9xXC/vLjAFtguU0+d9
7KyfRB6VDcs2cOVcNBtuH34EhWnRSiRhCGYFTOK2CjxhxyYReDJcDYqmihqAgMjm
6RHKW5c79aX7MXk4Hea9oHVFba67P/UNtuURt+0qDyooF2nmn94tcY/Fb1D/Qxa4
8Uyfh/LfGDRtTkIwt9c9PQ==
-----END CERTIFICATE-----