Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58A31F949B9E11F19C7ECDF8CE1D38B0.roa
File:                     58A31F949B9E11F19C7ECDF8CE1D38B0.roa (raw, json)
Hash identifier:          Lr2FCKkgUYqAJn2Z65mnBjdE44zFaIc0EOdhePPWYF0=
Subject key identifier:   80:79:F5:C0:81:7D:A8:C9:F3:AA:C4:52:1C:7F:55:54:DC:61:AE:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58A31F949B9E11F19C7ECDF8CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:19:42 +0000
ROA not before:           Wed 19 Aug 2026 07:19:38 +0000
ROA not after:            Thu 24 Sep 2026 07:19:38 +0000
asID:                     200758
IP address blocks:        154.83.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122848 (0x1dfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 07:19:38 2026 GMT
            Not After : Sep 24 07:19:38 2026 GMT
        Subject: CN=6a85590e-8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:fe:c9:bb:a2:69:d3:b7:38:a5:83:08:b9:
                    c4:65:29:b9:8c:a1:ef:cc:5c:4f:4e:8a:ee:f5:81:
                    da:d6:7b:8c:71:04:75:92:86:67:40:54:6d:16:57:
                    60:32:09:f0:d6:e8:a3:76:52:7c:03:1a:2f:af:76:
                    a2:30:46:c3:25:4e:1a:31:91:37:ee:50:5e:44:83:
                    33:01:a4:f4:79:2f:7c:51:31:48:cd:0d:c7:97:75:
                    aa:f1:a7:a9:b4:87:3d:6e:9a:02:a4:18:91:89:4f:
                    0a:6f:b3:d3:96:98:f3:4b:5f:47:33:27:49:48:de:
                    d2:47:1e:62:49:6c:22:17:52:30:e2:cb:42:6e:b8:
                    3d:73:3f:f5:ce:0e:4e:f8:48:4e:1a:79:99:5d:41:
                    58:73:1a:ee:33:01:01:c5:e3:ba:13:05:7a:b9:a3:
                    fe:e4:f5:e6:84:4f:3d:2d:f5:ff:c9:c0:75:4a:0f:
                    a7:2d:8c:8e:b8:b9:75:7d:d7:03:22:8a:d0:27:f2:
                    80:da:3e:eb:e8:69:7c:2e:07:22:de:de:63:17:e6:
                    88:52:bb:06:bb:ee:a6:8d:4c:6b:24:ee:83:f0:1f:
                    8d:84:e7:e9:41:ab:00:0a:56:24:4c:40:40:0e:e0:
                    80:c3:73:e9:a2:64:a3:d4:3a:b2:4a:b2:59:a7:43:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:79:F5:C0:81:7D:A8:C9:F3:AA:C4:52:1C:7F:55:54:DC:61:AE:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58A31F949B9E11F19C7ECDF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:d9:93:c3:15:33:1f:2d:9c:c6:c4:a3:55:8b:8d:dc:07:
         5d:13:3d:f3:50:a1:5e:cc:98:c3:8e:a9:b4:61:00:3c:35:86:
         4e:4f:c8:0d:83:e9:cf:d3:be:a5:3a:68:34:00:18:07:04:00:
         75:36:3a:34:0e:bd:76:cf:78:cc:55:0c:64:74:d9:b9:d1:fe:
         e8:87:90:f8:c8:ac:b1:93:b0:a1:91:45:55:d9:5d:37:4c:68:
         e8:7d:6a:13:7e:ed:a3:80:50:08:05:cb:e3:4b:00:fc:32:a0:
         05:f6:ac:0d:ac:6e:c4:74:70:b1:9d:c2:eb:54:6d:d0:d2:49:
         c3:49:f2:7e:46:76:bc:e9:86:87:1d:34:59:9f:c0:87:bc:3b:
         b3:42:1e:b3:c4:00:0f:52:cb:42:46:72:f4:87:4c:a6:19:c9:
         06:58:d9:a3:7b:ee:17:7f:d0:39:90:45:e3:ff:28:af:b9:a8:
         5a:fb:2f:5f:7e:48:dd:5b:26:10:c1:1d:78:a9:99:d5:19:05:
         2c:9e:c6:0e:26:37:af:07:0b:68:0d:fb:7d:52:a2:23:7f:ed:
         8e:a1:b3:4f:2f:d8:d4:a7:e3:15:16:2e:48:67:3f:06:93:92:
         68:9b:34:db:e9:89:f1:01:c3:23:2c:6c:b6:65:bf:d0:3e:1b:
         9e:8a:05:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd/gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE5MDcxOTM4WhcNMjYwOTI0MDcxOTM4WjAYMRYw
FAYDVQQDEw02YTg1NTkwZS04OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzSv+ybuiadO3OKWDCLnEZSm5jKHvzFxPToru9YHa1nuMcQR1koZnQFRt
FldgMgnw1uijdlJ8Axovr3aiMEbDJU4aMZE37lBeRIMzAaT0eS98UTFIzQ3Hl3Wq
8aeptIc9bpoCpBiRiU8Kb7PTlpjzS19HMydJSN7SRx5iSWwiF1Iw4stCbrg9cz/1
zg5O+EhOGnmZXUFYcxruMwEBxeO6EwV6uaP+5PXmhE89LfX/ycB1Sg+nLYyOuLl1
fdcDIorQJ/KA2j7r6Gl8Lgci3t5jF+aIUrsGu+6mjUxrJO6D8B+NhOfpQasAClYk
TEBADuCAw3PpomSj1DqySrJZp0PO5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIB5
9cCBfajJ86rEUhx/VVTcYa7uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OEEzMUY5NDlCOUUxMUYxOUM3RUNERjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlO6MA0GCSqGSIb3DQEB
CwUAA4IBAQCVO9mTwxUzHy2cxsSjVYuN3AddEz3zUKFezJjDjqm0YQA8NYZOT8gN
g+nP076lOmg0ABgHBAB1Njo0Dr12z3jMVQxkdNm50f7oh5D4yKyxk7ChkUVV2V03
TGjofWoTfu2jgFAIBcvjSwD8MqAF9qwNrG7EdHCxncLrVG3Q0knDSfJ+Rna86YaH
HTRZn8CHvDuzQh6zxAAPUstCRnL0h0ymGckGWNmje+4Xf9A5kEXj/yivuaha+y9f
fkjdWyYQwR14qZnVGQUsnsYOJjevBwtoDft9UqIjf+2OobNPL9jUp+MVFi5IZz8G
k5JomzTb6YnxAcMjLGy2Zb/QPhueigVL
-----END CERTIFICATE-----