Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B5A8CB29B9C11F1A366A8ECCE1D38B0.roa
File:                     3B5A8CB29B9C11F1A366A8ECCE1D38B0.roa (raw, json)
Hash identifier:          K0wxbfMKA5fqbBbLr6nxnyg1PFkLlTAJCwLbJg6yzoI=
Subject key identifier:   DF:89:6B:6B:D3:6A:D1:A3:4E:C4:F3:0A:E9:60:E0:1E:2E:44:9C:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B5A8CB29B9C11F1A366A8ECCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:04:34 +0000
ROA not before:           Wed 19 Aug 2026 07:04:30 +0000
ROA not after:            Mon 21 Sep 2026 07:04:30 +0000
asID:                     274973
IP address blocks:        154.95.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 07:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122844 (0x1dfdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 07:04:30 2026 GMT
            Not After : Sep 21 07:04:30 2026 GMT
        Subject: CN=6a855582-5cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:19:c9:a4:45:ed:3d:29:b7:4a:20:b3:34:
                    5f:b2:43:10:9e:68:c0:f0:c4:b4:61:3b:fe:ac:2d:
                    c7:12:95:58:f2:82:6c:41:04:d0:b2:6d:58:f5:35:
                    aa:0d:9c:21:7f:9d:5d:27:fa:d2:bc:bb:7a:66:8b:
                    f1:24:b9:04:46:6b:e9:86:9c:ca:9f:d7:6b:64:1c:
                    78:5e:b9:5c:6b:4f:ad:ab:a3:e5:43:b4:12:65:10:
                    5d:3a:7b:8a:0b:f7:94:df:da:3f:bb:78:30:d6:0d:
                    5f:be:a1:66:62:03:fa:01:a3:bd:ab:73:28:d3:72:
                    84:c6:4d:4a:4f:0a:a7:ac:a7:70:6b:48:ac:f2:52:
                    6d:95:b3:07:22:72:c7:97:e9:cd:1f:b4:be:97:76:
                    ee:dc:f1:53:aa:3b:ad:70:55:97:d3:a4:75:c1:3d:
                    95:e4:d6:d0:d3:af:56:3b:bb:e9:f8:ac:00:5d:52:
                    99:7e:8f:c7:39:e2:3b:4b:61:b9:63:08:6a:60:9f:
                    19:6a:df:db:40:7c:8e:bf:f8:d8:70:72:eb:a7:48:
                    46:a2:25:a4:a3:7a:31:cf:ed:7b:b5:c6:05:8e:bb:
                    43:e4:bc:c2:84:38:d8:88:c4:54:56:c1:00:0d:49:
                    14:f4:ce:cf:8c:ed:d9:51:2d:c3:04:3f:76:04:a1:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:6B:6B:D3:6A:D1:A3:4E:C4:F3:0A:E9:60:E0:1E:2E:44:9C:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B5A8CB29B9C11F1A366A8ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:73:96:ca:0d:ac:47:fd:c4:47:70:c4:a1:e0:44:d8:d0:68:
         f9:46:76:22:49:f5:ab:b8:3a:dc:c4:f0:9a:d5:4d:40:db:d2:
         2c:80:2f:9c:be:18:a1:8e:97:f5:e5:7f:f3:58:50:98:8b:17:
         7d:6b:0b:c1:a1:51:56:16:e3:70:3d:02:94:80:b3:32:4a:0a:
         91:5b:80:1d:1b:80:e9:a3:b7:bd:cf:f0:d2:6f:2d:fd:e4:e6:
         be:18:0b:95:08:99:dc:29:2e:dd:d7:94:6a:83:a4:d5:1b:12:
         55:37:1a:e5:c4:44:a8:c0:64:55:de:3d:a9:98:57:4a:c9:60:
         c2:ee:62:d9:36:77:eb:0f:84:b3:fb:b1:04:d8:47:3b:81:f5:
         07:f0:96:8f:30:6d:16:a1:97:67:0e:08:84:8f:51:ca:69:70:
         d9:9d:ca:8a:b8:6f:25:e0:6f:a3:92:52:f8:4d:a9:40:c2:18:
         39:04:3a:8f:df:87:d2:29:b0:3e:a7:3b:9a:84:96:e0:0f:4b:
         b4:6f:6a:2d:dc:09:68:c0:52:59:c9:28:33:07:8c:bc:34:15:
         bb:04:9b:50:1f:34:ed:98:ed:2d:5f:44:cf:0c:5d:60:22:4a:
         bc:d6:1e:e2:c1:08:76:3b:e9:f4:e4:26:00:a5:05:5b:e5:e1:
         cc:2c:72:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd/cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE5MDcwNDMwWhcNMjYwOTIxMDcwNDMwWjAYMRYw
FAYDVQQDEw02YTg1NTU4Mi01Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyo8ZyaRF7T0pt0ogszRfskMQnmjA8MS0YTv+rC3HEpVY8oJsQQTQsm1Y
9TWqDZwhf51dJ/rSvLt6ZovxJLkERmvphpzKn9drZBx4Xrlca0+tq6PlQ7QSZRBd
OnuKC/eU39o/u3gw1g1fvqFmYgP6AaO9q3Mo03KExk1KTwqnrKdwa0is8lJtlbMH
InLHl+nNH7S+l3bu3PFTqjutcFWX06R1wT2V5NbQ069WO7vp+KwAXVKZfo/HOeI7
S2G5YwhqYJ8Zat/bQHyOv/jYcHLrp0hGoiWko3oxz+17tcYFjrtD5LzChDjYiMRU
VsEADUkU9M7PjO3ZUS3DBD92BKFDjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN+J
a2vTatGjTsTzCulg4B4uRJw8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjVBOENCMjlCOUMxMUYxQTM2NkE4RUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml80MA0GCSqGSIb3DQEB
CwUAA4IBAQBhc5bKDaxH/cRHcMSh4ETY0Gj5RnYiSfWruDrcxPCa1U1A29IsgC+c
vhihjpf15X/zWFCYixd9awvBoVFWFuNwPQKUgLMySgqRW4AdG4Dpo7e9z/DSby39
5Oa+GAuVCJncKS7d15Rqg6TVGxJVNxrlxESowGRV3j2pmFdKyWDC7mLZNnfrD4Sz
+7EE2Ec7gfUH8JaPMG0WoZdnDgiEj1HKaXDZncqKuG8l4G+jklL4TalAwhg5BDqP
34fSKbA+pzuahJbgD0u0b2ot3AlowFJZySgzB4y8NBW7BJtQHzTtmO0tX0TPDF1g
Ikq81h7iwQh2O+n05CYApQVb5eHMLHJl
-----END CERTIFICATE-----