Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1B93CAB3F511F194C2F200CF1D38B0.roa
File:                     8F1B93CAB3F511F194C2F200CF1D38B0.roa (raw, json)
Hash identifier:          GnQi4OeEWGkHl9krTOWg0VRwYUzWb6eotBl1xl+G4Do=
Subject key identifier:   19:5C:6D:4D:6A:92:4B:3B:5E:8A:E6:46:B7:3A:CF:DC:7A:F2:03:1C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1B93CAB3F511F194C2F200CF1D38B0.roa
Signing time:             Sat 19 Sep 2026 06:44:28 +0000
ROA not before:           Sat 19 Sep 2026 06:44:24 +0000
ROA not after:            Wed 21 Oct 2026 06:44:24 +0000
asID:                     274973
IP address blocks:        154.95.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125138 (0x1e8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 19 06:44:24 2026 GMT
            Not After : Oct 21 06:44:24 2026 GMT
        Subject: CN=6aae2f4c-5778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:6c:d3:4a:91:de:37:72:3e:9f:f7:85:53:
                    46:96:8a:37:cf:dc:8d:66:c8:88:c9:1b:43:df:27:
                    69:4c:5e:20:24:d6:1f:a1:26:dd:0a:6a:cf:68:1b:
                    b8:0f:d3:b5:e2:9d:75:7c:bb:db:0c:88:be:0c:03:
                    a0:60:1e:df:e1:46:0f:19:75:cf:59:8d:2f:56:24:
                    32:6f:02:90:aa:98:4d:61:14:1d:e3:28:f0:91:84:
                    d7:8b:14:83:aa:8f:20:e5:2b:b6:eb:a3:cb:9d:5a:
                    c4:32:52:40:5b:0e:d7:95:1d:34:a4:d5:f4:a3:c0:
                    b2:66:24:42:ce:27:d9:01:18:32:5f:76:2e:ca:63:
                    9e:5d:bb:14:98:4d:01:75:af:cb:88:48:b7:47:5b:
                    fa:5b:b6:39:12:8f:59:b2:6b:75:fa:3c:2d:df:06:
                    a4:04:18:c4:7d:54:b7:3a:b7:80:f8:09:7f:ca:33:
                    15:49:31:dd:bb:da:b6:4e:e0:fd:4c:45:68:28:a3:
                    dd:45:5c:ad:22:aa:ad:f5:c8:02:57:c4:33:3f:4c:
                    e7:08:c9:ba:7a:bf:af:67:ef:e8:a8:b3:6a:d7:25:
                    3c:b6:98:ad:61:d6:28:8f:cb:78:0e:58:ce:63:20:
                    76:68:e0:27:dd:57:47:90:62:c0:c6:88:a5:63:6d:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:6D:4D:6A:92:4B:3B:5E:8A:E6:46:B7:3A:CF:DC:7A:F2:03:1C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1B93CAB3F511F194C2F200CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:0e:df:19:32:5d:e1:5a:82:13:26:6d:e7:5e:f6:49:40:
         f9:13:4c:a8:7b:dd:08:77:ca:a3:99:ba:0a:28:11:ce:79:fb:
         50:e4:a6:df:5d:1f:0e:cd:5f:da:9c:92:4a:89:5d:e4:0b:2b:
         1e:ce:54:87:db:fe:e2:be:49:57:cd:4b:fe:d9:f5:9f:3b:c5:
         83:42:dc:9d:3d:fd:a7:6b:34:53:8b:dd:81:cd:7b:e7:99:b6:
         f4:3d:09:0e:ba:a0:df:59:59:ea:82:a5:d5:cd:db:8a:21:bd:
         f4:61:f7:dc:22:d5:e3:e6:49:2b:80:55:79:ce:df:8d:5f:da:
         7a:88:e0:a8:6c:44:e7:ba:07:f4:58:9a:b9:24:83:37:96:1e:
         0a:79:e5:db:c3:b3:66:ab:39:d9:dc:cc:ae:88:5e:2e:9a:fd:
         91:81:9e:09:6d:98:3b:d7:b9:7d:b0:de:03:01:0c:fd:c8:df:
         0c:ba:b8:15:91:e3:d0:ae:05:a7:96:11:3e:da:52:df:f8:a2:
         aa:ed:4b:69:b3:e6:76:6e:d3:0c:53:27:76:b0:c3:79:9b:45:
         9d:34:b0:20:9b:67:e8:e2:16:eb:8a:4d:b5:5f:71:98:e2:0c:
         c3:b9:8c:b8:41:69:38:de:ea:65:9e:e7:79:72:c2:52:0b:47:
         54:22:6e:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAejSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE5MDY0NDI0WhcNMjYxMDIxMDY0NDI0WjAYMRYw
FAYDVQQDEw02YWFlMmY0Yy01Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAse1s00qR3jdyPp/3hVNGloo3z9yNZsiIyRtD3ydpTF4gJNYfoSbdCmrP
aBu4D9O14p11fLvbDIi+DAOgYB7f4UYPGXXPWY0vViQybwKQqphNYRQd4yjwkYTX
ixSDqo8g5Su266PLnVrEMlJAWw7XlR00pNX0o8CyZiRCzifZARgyX3YuymOeXbsU
mE0Bda/LiEi3R1v6W7Y5Eo9Zsmt1+jwt3wakBBjEfVS3OreA+Al/yjMVSTHdu9q2
TuD9TEVoKKPdRVytIqqt9cgCV8QzP0znCMm6er+vZ+/oqLNq1yU8tpitYdYoj8t4
DljOYyB2aOAn3VdHkGLAxoilY20WYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBlc
bU1qkks7XormRrc6z9x68gMcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjFCOTNDQUIzRjUxMUYxOTRDMkYyMDBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml80MA0GCSqGSIb3DQEB
CwUAA4IBAQCk9g7fGTJd4VqCEyZt5172SUD5E0yoe90Id8qjmboKKBHOeftQ5Kbf
XR8OzV/anJJKiV3kCysezlSH2/7ivklXzUv+2fWfO8WDQtydPf2nazRTi92BzXvn
mbb0PQkOuqDfWVnqgqXVzduKIb30YffcItXj5kkrgFV5zt+NX9p6iOCobETnugf0
WJq5JIM3lh4KeeXbw7NmqznZ3MyuiF4umv2RgZ4JbZg717l9sN4DAQz9yN8MurgV
kePQrgWnlhE+2lLf+KKq7Utps+Z2btMMUyd2sMN5m0WdNLAgm2fo4hbrik21X3GY
4gzDuYy4QWk43uplnud5csJSC0dUIm7F
-----END CERTIFICATE-----