Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98FB3A5ED75311F1BF9237B6CE1D38B0.roa
File:                     98FB3A5ED75311F1BF9237B6CE1D38B0.roa (raw, json)
Hash identifier:          UZ0zDZQ5TrlPZzKkBGrgrUiSjPt3/TsBrRCS4HQUhKc=
Subject key identifier:   5C:A0:7A:8E:33:DA:63:9B:A1:09:3D:51:D0:72:AC:AB:A3:40:73:C8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F260
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98FB3A5ED75311F1BF9237B6CE1D38B0.roa
Signing time:             Tue 03 Nov 2026 06:55:48 +0000
ROA not before:           Tue 03 Nov 2026 06:55:43 +0000
ROA not after:            Sun 06 Dec 2026 06:55:43 +0000
asID:                     274913
IP address blocks:        154.88.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127584 (0x1f260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  3 06:55:43 2026 GMT
            Not After : Dec  6 06:55:43 2026 GMT
        Subject: CN=6ae98574-065e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:1a:ea:44:51:39:d6:e2:56:e1:fd:05:bf:
                    ec:33:03:ec:71:ea:d1:cd:cb:b5:91:67:31:5f:67:
                    c9:65:18:78:a2:87:1c:33:8e:31:7f:a7:5c:e4:52:
                    72:3f:aa:88:f2:a0:77:37:69:89:ef:da:e8:d7:05:
                    fa:7f:dd:85:73:21:d9:e8:f8:cc:ee:92:8b:45:a6:
                    e1:50:61:28:a0:f3:01:81:82:77:a8:12:e1:d4:fd:
                    8a:ff:7f:ca:38:76:51:86:c4:85:88:86:f3:d6:9c:
                    35:92:d0:da:2f:ca:d1:63:a4:cc:f0:d0:7e:f1:d8:
                    78:11:b2:b7:4f:96:37:03:83:da:ca:b2:ad:6b:bd:
                    5a:04:15:24:e0:5b:73:d9:33:c8:5c:7f:cf:80:68:
                    39:bd:b7:12:6f:2a:0e:8a:da:8b:f9:16:b0:f3:43:
                    cc:07:9a:00:f8:c1:0d:2c:e3:1b:24:99:63:b8:17:
                    2d:f6:e2:e8:7c:fb:55:33:0b:c3:c5:9d:41:28:5e:
                    67:08:8a:cb:e3:2c:d8:b4:a3:29:52:94:ac:cb:09:
                    dc:c1:31:a1:8e:01:0c:a3:d5:5e:05:25:bf:e0:45:
                    8c:01:6d:9c:b8:3b:48:3d:d1:2e:41:55:40:62:02:
                    f9:2f:61:6d:13:28:b9:99:4a:75:5d:5a:0b:96:dc:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:7A:8E:33:DA:63:9B:A1:09:3D:51:D0:72:AC:AB:A3:40:73:C8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98FB3A5ED75311F1BF9237B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:43:26:c3:2e:e4:de:d3:a1:a3:ba:ea:f4:08:48:d6:45:
         03:48:f0:58:88:c6:41:65:f7:a7:cf:30:0e:ef:f5:24:2f:78:
         9e:48:bd:22:11:d6:ed:e9:99:2d:ff:16:74:6b:69:61:c1:22:
         9b:c0:bf:d0:c7:cd:c1:e8:45:f8:ea:35:04:6b:f0:29:a8:c6:
         6c:d0:be:43:f2:77:32:06:0d:58:e5:56:89:66:95:cc:bd:92:
         12:c7:d5:cf:d6:5b:01:df:78:52:60:73:a0:09:fb:d1:b5:10:
         39:cd:68:25:8a:bd:c1:b4:9c:9d:4b:bc:72:99:ba:01:13:c6:
         c7:0f:ac:f8:e4:54:15:dc:31:74:92:2e:88:f3:d1:74:2d:00:
         4a:4b:97:da:31:d5:0b:75:5d:f8:d2:2e:3d:d1:fb:d9:c3:fd:
         9f:39:92:dd:11:5f:2f:f7:85:e4:80:25:6d:e4:9f:12:36:4b:
         99:01:6f:7d:df:7b:63:b4:5e:0f:1e:67:43:55:7e:4d:7b:5e:
         6e:2a:e5:59:f2:19:9e:0f:89:e6:9c:c6:a2:cb:23:79:bb:c3:
         8f:fb:c4:b7:d7:c3:17:cd:fc:19:a1:e2:89:82:ad:b2:c3:0b:
         25:98:86:47:6e:ee:86:24:eb:b3:c4:a2:77:c5:84:48:fc:9a:
         3b:3c:b2:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAfJgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMTAzMDY1NTQzWhcNMjYxMjA2MDY1NTQzWjAYMRYw
FAYDVQQDEw02YWU5ODU3NC0wNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Wca6kRROdbiVuH9Bb/sMwPscerRzcu1kWcxX2fJZRh4ooccM44xf6dc
5FJyP6qI8qB3N2mJ79ro1wX6f92FcyHZ6PjM7pKLRabhUGEooPMBgYJ3qBLh1P2K
/3/KOHZRhsSFiIbz1pw1ktDaL8rRY6TM8NB+8dh4EbK3T5Y3A4PayrKta71aBBUk
4Ftz2TPIXH/PgGg5vbcSbyoOitqL+Raw80PMB5oA+MENLOMbJJljuBct9uLofPtV
MwvDxZ1BKF5nCIrL4yzYtKMpUpSsywncwTGhjgEMo9VeBSW/4EWMAW2cuDtIPdEu
QVVAYgL5L2FtEyi5mUp1XVoLltwpiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFyg
eo4z2mOboQk9UdByrKujQHPIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OEZCM0E1RUQ3NTMxMUYxQkY5MjM3QjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmli0MA0GCSqGSIb3DQEB
CwUAA4IBAQCQ8kMmwy7k3tOho7rq9AhI1kUDSPBYiMZBZfenzzAO7/UkL3ieSL0i
Edbt6Zkt/xZ0a2lhwSKbwL/Qx83B6EX46jUEa/ApqMZs0L5D8ncyBg1Y5VaJZpXM
vZISx9XP1lsB33hSYHOgCfvRtRA5zWglir3BtJydS7xymboBE8bHD6z45FQV3DF0
ki6I89F0LQBKS5faMdULdV340i490fvZw/2fOZLdEV8v94XkgCVt5J8SNkuZAW99
33tjtF4PHmdDVX5Ne15uKuVZ8hmeD4nmnMaiyyN5u8OP+8S318MXzfwZoeKJgq2y
wwslmIZHbu6GJOuzxKJ3xYRI/Jo7PLL4
-----END CERTIFICATE-----