Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/433A5F2CACFC11F19B0B7AE5CE1D38B0.roa
File:                     433A5F2CACFC11F19B0B7AE5CE1D38B0.roa (raw, json)
Hash identifier:          M2bJ7qw5JaH6Kz70XO9ZyUKjc9M+KSncNiSQBnorVuU=
Subject key identifier:   9B:82:F7:8D:21:52:3C:43:B4:CE:51:D4:0C:17:64:DF:F5:94:0D:16
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E71E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/433A5F2CACFC11F19B0B7AE5CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:44:49 +0000
ROA not before:           Thu 10 Sep 2026 09:44:45 +0000
ROA not after:            Thu 09 Sep 2027 09:44:45 +0000
asID:                     9304
IP address blocks:        154.81.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124702 (0x1e71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 09:44:45 2026 GMT
            Not After : Sep  9 09:44:45 2027 GMT
        Subject: CN=6aa27c11-082f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:f8:5c:dc:74:d1:21:45:ac:f2:2a:c1:56:
                    98:69:e2:a9:d8:b3:1d:0b:6d:9e:90:bd:05:21:dc:
                    55:5c:0e:9f:95:9b:1d:ef:55:86:09:6d:00:fa:83:
                    79:ce:9a:a2:d2:60:a3:78:2f:48:06:4e:aa:52:6c:
                    d3:12:53:07:bd:ed:ab:c0:51:cc:05:81:81:bb:aa:
                    f1:da:74:86:ac:3c:42:d1:11:d3:21:5c:26:18:82:
                    a8:06:fb:39:e6:44:8d:4e:59:40:ae:6e:ce:14:bc:
                    c3:56:58:fb:9d:8a:93:b3:f4:31:dc:62:9f:6a:76:
                    c4:c3:36:4c:c1:b0:96:6b:ed:cd:77:b0:fb:a4:3a:
                    5b:83:ef:bd:f9:18:4a:fb:ce:b1:62:b8:7b:1e:62:
                    0a:a6:54:92:9f:e7:a2:a2:de:00:a0:2d:1c:2a:27:
                    6c:9c:bb:32:c9:39:df:6e:39:13:44:75:84:a9:f8:
                    2b:2c:68:be:ad:0c:1d:e6:1b:5c:fd:3c:e4:a1:a4:
                    cd:0d:4b:79:29:ed:46:89:78:a3:67:d1:02:52:ab:
                    e6:1a:7a:36:14:3d:a5:59:9d:dd:49:80:5e:d2:3a:
                    b8:34:bd:e9:a3:a6:bc:c7:f1:ed:03:dc:54:e8:2c:
                    52:7e:06:97:74:ff:e6:7d:02:86:c8:f7:88:c8:f2:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:82:F7:8D:21:52:3C:43:B4:CE:51:D4:0C:17:64:DF:F5:94:0D:16
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/433A5F2CACFC11F19B0B7AE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:eb:7f:fa:be:6a:78:e6:ed:8b:8a:d9:f9:0a:75:fd:b9:00:
         10:38:e0:65:30:4f:b2:e8:5c:df:91:f2:28:f4:10:00:0a:21:
         9f:b8:da:97:b8:5a:19:04:c9:c4:f2:8f:14:e3:be:a4:9e:58:
         4c:7b:5a:24:e6:64:fd:cf:dc:10:fb:d4:da:9c:af:35:d0:7d:
         17:61:ad:3c:04:5b:3f:e5:13:e6:62:e1:00:9b:ff:11:64:3b:
         5b:10:39:78:c9:60:98:87:ef:f1:34:cf:92:3a:fd:81:11:a7:
         ac:96:8b:db:d0:e2:65:41:8d:56:2a:94:23:b5:f3:53:69:d9:
         25:ca:00:bc:35:3f:c1:72:29:17:e1:6f:52:01:2a:39:e1:1b:
         85:e9:b6:51:f3:1f:bf:13:da:8b:66:75:1e:3c:b4:00:88:99:
         29:a0:d2:2e:aa:fe:56:97:8a:20:03:8a:06:31:b9:29:9d:29:
         b9:3a:bd:e8:44:e6:4f:81:55:53:f2:97:c7:40:76:9a:be:34:
         b3:78:1b:37:38:42:4d:0e:63:3c:e2:5b:ed:8a:61:b9:bd:f8:
         00:93:37:93:31:3f:87:56:ba:0b:3a:24:90:09:3c:13:1b:74:
         48:6c:78:93:f8:cd:77:93:53:2d:1a:e9:39:d0:58:92:56:c3:
         33:9d:a5:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeceMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEwMDk0NDQ1WhcNMjcwOTA5MDk0NDQ1WjAYMRYw
FAYDVQQDEw02YWEyN2MxMS0wODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsof4XNx00SFFrPIqwVaYaeKp2LMdC22ekL0FIdxVXA6flZsd71WGCW0A
+oN5zpqi0mCjeC9IBk6qUmzTElMHve2rwFHMBYGBu6rx2nSGrDxC0RHTIVwmGIKo
Bvs55kSNTllArm7OFLzDVlj7nYqTs/Qx3GKfanbEwzZMwbCWa+3Nd7D7pDpbg++9
+RhK+86xYrh7HmIKplSSn+eiot4AoC0cKidsnLsyyTnfbjkTRHWEqfgrLGi+rQwd
5htc/TzkoaTNDUt5Ke1GiXijZ9ECUqvmGno2FD2lWZ3dSYBe0jq4NL3po6a8x/Ht
A9xU6CxSfgaXdP/mfQKGyPeIyPKXCwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJuC
940hUjxDtM5R1AwXZN/1lA0WMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MzNBNUYyQ0FDRkMxMUYxOUIwQjdBRTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGJMA0GCSqGSIb3DQEB
CwUAA4IBAQDB63/6vmp45u2Litn5CnX9uQAQOOBlME+y6FzfkfIo9BAACiGfuNqX
uFoZBMnE8o8U476knlhMe1ok5mT9z9wQ+9TanK810H0XYa08BFs/5RPmYuEAm/8R
ZDtbEDl4yWCYh+/xNM+SOv2BEaeslovb0OJlQY1WKpQjtfNTadklygC8NT/BcikX
4W9SASo54RuF6bZR8x+/E9qLZnUePLQAiJkpoNIuqv5Wl4ogA4oGMbkpnSm5Or3o
ROZPgVVT8pfHQHaavjSzeBs3OEJNDmM84lvtimG5vfgAkzeTMT+HVroLOiSQCTwT
G3RIbHiT+M13k1MtGuk50FiSVsMznaUm
-----END CERTIFICATE-----