Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EDF478AA7F11F195F63ED6CE1D38B0.roa
File:                     64EDF478AA7F11F195F63ED6CE1D38B0.roa (raw, json)
Hash identifier:          ztTwNiUGoMRyMkZGB/WumufedoA6QsWoyc4YKxsXXTY=
Subject key identifier:   43:EE:5B:E5:11:3B:9E:1A:C4:D0:72:76:58:FF:50:88:EA:9D:FE:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E613
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EDF478AA7F11F195F63ED6CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 05:45:56 +0000
ROA not before:           Mon 07 Sep 2026 05:45:52 +0000
ROA not after:            Mon 05 Oct 2026 05:45:52 +0000
asID:                     154820
IP address blocks:        154.203.249.0/24 maxlen: 24
                          154.204.38.0/24 maxlen: 24
                          154.204.39.0/24 maxlen: 24
                          154.204.44.0/24 maxlen: 24
                          154.204.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124435 (0x1e613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 05:45:52 2026 GMT
            Not After : Oct  5 05:45:52 2026 GMT
        Subject: CN=6a9e4f94-0753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:98:08:b3:3a:c6:69:6a:fb:ca:46:01:ad:
                    fe:fa:6d:4f:e3:80:25:58:b2:f0:9d:7e:33:4f:7d:
                    f8:1c:7a:a2:6e:70:13:2f:ab:34:6e:f8:78:34:be:
                    e3:e2:7d:0a:b2:5a:01:e1:a6:9a:6d:83:27:86:81:
                    82:3a:ac:d5:5d:e3:55:49:32:d4:4b:4f:cd:9f:3f:
                    9f:9c:73:0e:15:b9:72:67:fe:69:ac:c2:1c:1c:17:
                    4a:57:f1:3e:d3:5e:ec:4d:59:34:94:2c:c3:a0:12:
                    2b:e0:55:b6:38:7b:d9:9b:c2:dd:4f:18:07:7e:a6:
                    dd:b1:f1:72:01:cc:f6:b9:3e:9d:4f:74:48:f6:cf:
                    d6:a4:d7:c7:87:23:1e:56:be:b7:0d:5f:e7:5c:31:
                    d1:68:16:2f:74:21:f3:dd:75:f0:11:25:8c:98:31:
                    51:68:e1:ec:74:18:78:56:82:0e:2c:6e:4e:cf:23:
                    f7:c2:10:8c:12:94:f7:de:09:32:f5:c8:60:9c:0f:
                    c3:e1:ad:a8:12:96:d8:2d:10:7e:51:8a:7e:92:fd:
                    2f:d7:fa:78:85:4b:47:6a:ff:80:98:14:b5:37:58:
                    45:d0:cb:33:a4:31:ef:99:1a:ac:c2:b4:a6:e1:84:
                    72:5d:ae:3d:d5:89:aa:be:95:50:89:66:73:91:fd:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:5B:E5:11:3B:9E:1A:C4:D0:72:76:58:FF:50:88:EA:9D:FE:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EDF478AA7F11F195F63ED6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.249.0/24
                  154.204.38.0/23
                  154.204.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:5b:a9:ce:e7:59:5b:82:86:1d:85:f4:1c:ec:17:e8:e7:
         16:1b:8a:77:04:f2:51:91:b8:88:81:0b:7c:90:c0:ce:5f:4f:
         d4:50:5a:73:92:80:f0:dd:72:15:fa:3b:ff:96:ad:f2:a2:4e:
         5a:91:77:59:df:7f:2c:08:8b:46:53:98:5e:16:fb:b1:e6:41:
         cc:db:10:49:1a:ca:e6:37:9e:a1:71:99:47:6d:4a:69:85:9d:
         b1:97:5e:d3:05:f7:08:4a:15:12:e5:35:6c:ed:18:aa:2e:69:
         64:07:f7:0d:30:50:a3:36:1f:86:ed:13:29:89:fb:d1:8e:ab:
         8a:ef:b6:cd:be:c8:b4:9c:72:af:03:3d:01:b8:a1:a0:e0:8c:
         7a:a2:49:ff:b6:91:87:6f:82:4d:55:82:9a:64:98:97:7a:cb:
         3e:8e:02:79:13:bd:3a:25:f8:30:4f:cd:b5:73:42:82:2d:66:
         df:34:f7:a4:d4:84:5b:49:84:4a:8c:bb:48:df:a8:f7:18:d4:
         5c:1a:4a:55:d8:98:f6:0d:cd:b8:09:70:91:85:04:d7:a4:d8:
         91:d8:7e:03:57:15:8a:dc:4e:48:25:3e:e8:73:6d:12:a5:6c:
         ba:69:84:91:fc:4d:7b:04:7e:6c:4a:da:e8:bf:35:76:95:a4:
         82:ea:3f:9b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAeYTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA3MDU0NTUyWhcNMjYxMDA1MDU0NTUyWjAYMRYw
FAYDVQQDEw02YTllNGY5NC0wNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx5aYCLM6xmlq+8pGAa3++m1P44AlWLLwnX4zT334HHqibnATL6s0bvh4
NL7j4n0KsloB4aaabYMnhoGCOqzVXeNVSTLUS0/Nnz+fnHMOFblyZ/5prMIcHBdK
V/E+017sTVk0lCzDoBIr4FW2OHvZm8LdTxgHfqbdsfFyAcz2uT6dT3RI9s/WpNfH
hyMeVr63DV/nXDHRaBYvdCHz3XXwESWMmDFRaOHsdBh4VoIOLG5OzyP3whCMEpT3
3gky9chgnA/D4a2oEpbYLRB+UYp+kv0v1/p4hUtHav+AmBS1N1hF0MszpDHvmRqs
wrSm4YRyXa491YmqvpVQiWZzkf0sNQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFEPu
W+URO54axNBydlj/UIjqnf51MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NEVERjQ3OEFBN0YxMUYxOTVGNjNFRDZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmsv5AwQBmswmAwQBmsws
MA0GCSqGSIb3DQEBCwUAA4IBAQCLglupzudZW4KGHYX0HOwX6OcWG4p3BPJRkbiI
gQt8kMDOX0/UUFpzkoDw3XIV+jv/lq3yok5akXdZ338sCItGU5heFvux5kHM2xBJ
GsrmN56hcZlHbUpphZ2xl17TBfcIShUS5TVs7RiqLmlkB/cNMFCjNh+G7RMpifvR
jquK77bNvsi0nHKvAz0BuKGg4Ix6okn/tpGHb4JNVYKaZJiXess+jgJ5E706Jfgw
T821c0KCLWbfNPek1IRbSYRKjLtI36j3GNRcGkpV2Jj2Dc24CXCRhQTXpNiR2H4D
VxWK3E5IJT7oc20SpWy6aYSR/E17BH5sStrovzV2laSC6j+b
-----END CERTIFICATE-----