Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C694D40A07611F1A7FCDA10CF1D38B0.roa
File:                     7C694D40A07611F1A7FCDA10CF1D38B0.roa (raw, json)
Hash identifier:          Ql2c3B49ksHD+XAbEAbsjkkHtDI7nmMAtHxFcw1dBEg=
Subject key identifier:   DD:00:58:30:C5:96:73:82:3A:9C:2F:69:A6:7A:B9:17:D8:57:8F:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C694D40A07611F1A7FCDA10CF1D38B0.roa
Signing time:             Tue 25 Aug 2026 11:16:58 +0000
ROA not before:           Tue 25 Aug 2026 11:16:54 +0000
ROA not after:            Sat 10 Jul 2027 11:16:54 +0000
asID:                     328608
IP address blocks:        154.200.133.0/24 maxlen: 24
                          154.200.134.0/24 maxlen: 24
                          154.200.135.0/24 maxlen: 24
                          154.200.136.0/24 maxlen: 24
                          154.200.137.0/24 maxlen: 24
                          154.200.138.0/24 maxlen: 24
                          154.200.139.0/24 maxlen: 24
                          154.200.141.0/24 maxlen: 24
                          154.200.143.0/24 maxlen: 24
                          154.200.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123623 (0x1e2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 11:16:54 2026 GMT
            Not After : Jul 10 11:16:54 2027 GMT
        Subject: CN=6a8d79aa-c5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:2c:f9:86:e3:c9:84:cb:c9:07:5b:bd:0b:
                    bf:90:0c:f6:28:6e:71:3f:66:d3:91:e0:8d:f8:9c:
                    20:fb:ed:93:6a:af:f0:05:a7:87:31:2c:97:07:f8:
                    15:02:04:d7:b5:b4:c4:19:e7:86:45:b6:c6:7f:45:
                    c8:10:b2:2f:8a:a2:28:36:61:c7:fd:80:4c:1c:bb:
                    34:96:f5:30:41:91:29:60:a9:d6:94:ed:2d:7d:71:
                    e2:45:0e:dd:64:6c:76:36:cb:a7:21:ed:9d:c2:e9:
                    7e:df:bd:c6:c6:44:de:5c:13:09:a0:05:4b:a5:db:
                    59:88:dc:dd:ec:76:00:1d:9f:27:d8:db:73:2d:93:
                    0a:b1:7f:d2:ca:94:96:01:bf:5a:f5:0d:1b:fb:85:
                    b2:99:80:06:39:4d:ef:f9:6e:5b:63:8a:f9:69:9c:
                    69:32:75:ea:6a:96:d7:59:6f:30:d9:d3:59:ca:11:
                    b5:7f:c4:10:30:15:90:1d:11:d3:a3:f6:23:5c:bb:
                    4b:39:c9:8d:19:6c:28:ad:c9:4d:51:fc:b3:3a:6e:
                    fb:ed:a6:bb:f7:83:84:d1:f1:73:b3:18:6e:b4:3a:
                    c4:98:80:72:d5:d4:a8:96:b0:01:12:6c:15:26:9d:
                    77:68:77:51:8c:1e:e9:30:6a:db:7f:4a:15:82:99:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:58:30:C5:96:73:82:3A:9C:2F:69:A6:7A:B9:17:D8:57:8F:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C694D40A07611F1A7FCDA10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.133.0-154.200.139.255
                  154.200.141.0/24
                  154.200.143.0-154.200.144.255

    Signature Algorithm: sha256WithRSAEncryption
         21:1b:51:f8:49:79:7f:e9:8c:e7:62:99:70:8b:0c:46:21:60:
         a9:d8:56:55:6b:b3:b4:17:82:49:a2:50:a4:cd:4d:0e:65:cb:
         36:eb:a8:fa:8a:ab:53:8d:bb:fe:98:e0:9f:d3:2d:c9:ba:72:
         4b:f3:73:2a:ad:de:c8:ee:b2:20:fb:ac:9f:d5:45:ed:f5:c9:
         83:1a:30:57:77:01:8c:d2:84:0c:0e:00:76:ff:ae:36:64:34:
         04:bd:d1:46:56:d0:05:38:27:e6:92:fb:21:d8:f9:2c:29:ba:
         91:cb:46:da:64:71:89:88:7e:98:fb:15:a5:28:1e:6d:42:24:
         62:8a:aa:01:aa:22:14:50:48:6f:97:22:39:68:27:75:bd:28:
         3d:62:c7:da:79:f2:09:40:40:45:bf:b8:56:c0:cf:54:24:84:
         1d:0f:7b:9f:7b:e7:0b:a4:11:21:a1:b6:78:a7:de:4e:04:e8:
         31:b4:9d:23:da:42:e9:bf:74:94:e9:19:25:3b:5e:6b:f6:3f:
         f6:06:13:b2:5b:0d:b8:92:d6:d4:9e:db:a5:92:1c:9b:7e:fa:
         e8:1f:43:df:bb:e2:45:95:30:b8:ee:e5:aa:af:7a:34:c5:d9:
         20:5f:8d:c2:ea:e9:62:53:50:27:95:16:94:7c:f7:a1:d7:d7:
         c4:26:a3:9b
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAeLnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI1MTExNjU0WhcNMjcwNzEwMTExNjU0WjAYMRYw
FAYDVQQDEw02YThkNzlhYS1jNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3+os+YbjyYTLyQdbvQu/kAz2KG5xP2bTkeCN+Jwg++2Taq/wBaeHMSyX
B/gVAgTXtbTEGeeGRbbGf0XIELIviqIoNmHH/YBMHLs0lvUwQZEpYKnWlO0tfXHi
RQ7dZGx2NsunIe2dwul+373GxkTeXBMJoAVLpdtZiNzd7HYAHZ8n2NtzLZMKsX/S
ypSWAb9a9Q0b+4WymYAGOU3v+W5bY4r5aZxpMnXqapbXWW8w2dNZyhG1f8QQMBWQ
HRHTo/YjXLtLOcmNGWworclNUfyzOm777aa794OE0fFzsxhutDrEmIBy1dSolrAB
EmwVJp13aHdRjB7pMGrbf0oVgpkutQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFN0A
WDDFlnOCOpwvaaZ6uRfYV49+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QzY5NEQ0MEEwNzYxMUYxQTdGQ0RBMTBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACayIUDBAKayIgDBACa
yI0wDAMEAJrIjwMEAJrIkDANBgkqhkiG9w0BAQsFAAOCAQEAIRtR+El5f+mM52KZ
cIsMRiFgqdhWVWuztBeCSaJQpM1NDmXLNuuo+oqrU427/pjgn9MtybpyS/NzKq3e
yO6yIPusn9VF7fXJgxowV3cBjNKEDA4Adv+uNmQ0BL3RRlbQBTgn5pL7Idj5LCm6
kctG2mRxiYh+mPsVpSgebUIkYoqqAaoiFFBIb5ciOWgndb0oPWLH2nnyCUBARb+4
VsDPVCSEHQ97n3vnC6QRIaG2eKfeTgToMbSdI9pC6b90lOkZJTtea/Y/9gYTslsN
uJLW1J7bpZIcm3766B9D37viRZUwuO7lqq96NMXZIF+NwurpYlNQJ5UWlHz3odfX
xCajmw==
-----END CERTIFICATE-----