Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AD330B6BB6A11F1A767BEAECE1D38B0.roa
File:                     9AD330B6BB6A11F1A767BEAECE1D38B0.roa (raw, json)
Hash identifier:          a8SXvvysuN2ldi7CA2XLlP9P9wUhfQ1dDxMK76pHbHE=
Subject key identifier:   4A:0F:AA:30:43:0D:7E:0A:79:61:40:47:12:21:2B:92:0F:BD:41:7C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AD330B6BB6A11F1A767BEAECE1D38B0.roa
Signing time:             Mon 28 Sep 2026 18:29:57 +0000
ROA not before:           Mon 28 Sep 2026 18:29:53 +0000
ROA not after:            Mon 12 Oct 2026 18:29:53 +0000
asID:                     26617
IP address blocks:        154.202.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125742 (0x1eb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 28 18:29:53 2026 GMT
            Not After : Oct 12 18:29:53 2026 GMT
        Subject: CN=6abab225-9e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:c2:e5:0c:72:d7:e2:48:69:a4:25:01:27:
                    5e:2e:42:a3:80:c1:9d:79:72:ef:21:29:ef:48:e2:
                    35:9a:b1:86:d6:42:f0:cf:d9:3b:f2:6d:62:3d:86:
                    1b:7d:ce:56:96:2f:e6:1d:d2:79:59:b5:b4:7d:d4:
                    a3:14:f9:e8:5b:ba:38:0b:56:93:92:0d:11:2f:85:
                    8c:7f:ef:65:bb:b5:80:f3:87:50:28:ef:55:4f:be:
                    e0:e6:18:7c:a7:f4:1e:01:ba:ae:77:af:ad:00:e0:
                    18:e8:3f:8e:43:3e:25:9f:1e:43:3f:f8:86:15:f7:
                    89:fd:7a:d0:03:ce:4e:42:94:a3:27:44:a4:ff:1e:
                    40:33:90:47:b9:81:56:49:7f:f8:9f:b6:55:73:5d:
                    9d:53:a1:27:17:1e:21:1f:db:e8:e8:75:df:9c:87:
                    48:78:5f:e7:84:a7:c4:4b:6b:52:9a:ea:e5:0c:87:
                    d7:72:10:5f:eb:87:26:e9:d3:92:d1:42:3c:31:73:
                    03:96:6f:4e:4f:80:f1:bf:ef:a4:49:85:b9:aa:07:
                    14:6b:ca:35:8b:89:33:27:40:59:cc:a5:0d:c1:37:
                    04:2a:9d:8d:35:d1:57:a5:4c:88:3b:7a:82:e2:d8:
                    71:9e:27:94:e5:a5:e7:31:76:4e:b1:ce:80:fc:b6:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0F:AA:30:43:0D:7E:0A:79:61:40:47:12:21:2B:92:0F:BD:41:7C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AD330B6BB6A11F1A767BEAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:f5:74:38:b4:44:40:8f:99:54:ca:c8:34:5f:c0:56:93:2f:
         ab:68:f2:42:21:62:9e:5f:a4:58:23:38:90:88:da:c1:26:99:
         59:e8:7e:ff:d7:c7:8c:a1:dd:7e:fd:25:9a:3d:90:13:17:fa:
         e2:9f:07:65:d7:66:5d:37:f7:05:ba:bc:af:1d:37:27:bc:bd:
         02:80:03:17:82:45:e1:8f:9e:ef:bb:14:d3:f8:21:9e:e1:d4:
         e7:29:0a:5e:98:1c:38:58:c5:05:ec:17:74:8e:5f:2c:da:0e:
         7e:57:51:12:b8:3f:23:44:91:53:22:5e:c3:45:2c:0a:8d:40:
         9d:e2:11:60:50:a7:57:c8:45:54:c8:d1:39:f8:7a:da:80:c2:
         f2:b3:4a:e1:7f:6f:c3:ac:cd:6b:4f:46:0f:40:27:c3:4c:da:
         29:74:0d:59:2f:3b:8c:01:a9:ad:58:a6:97:05:cf:ed:1f:9b:
         85:80:df:e8:97:b0:2f:94:8c:b9:11:3c:92:55:d0:ba:ba:dd:
         0f:cf:e6:eb:69:11:2a:36:46:c9:b3:e7:d9:84:f1:16:6b:a4:
         5b:62:db:50:e2:09:12:2e:47:0c:27:0f:34:e5:8b:cd:14:bc:
         87:16:e2:6b:8d:4c:e7:dc:f9:f5:f1:7e:e0:b1:74:5d:d9:c5:
         b2:45:7c:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAesuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI4MTgyOTUzWhcNMjYxMDEyMTgyOTUzWjAYMRYw
FAYDVQQDEw02YWJhYjIyNS05ZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2hLC5Qxy1+JIaaQlASdeLkKjgMGdeXLvISnvSOI1mrGG1kLwz9k78m1i
PYYbfc5Wli/mHdJ5WbW0fdSjFPnoW7o4C1aTkg0RL4WMf+9lu7WA84dQKO9VT77g
5hh8p/QeAbqud6+tAOAY6D+OQz4lnx5DP/iGFfeJ/XrQA85OQpSjJ0Sk/x5AM5BH
uYFWSX/4n7ZVc12dU6EnFx4hH9vo6HXfnIdIeF/nhKfES2tSmurlDIfXchBf64cm
6dOS0UI8MXMDlm9OT4Dxv++kSYW5qgcUa8o1i4kzJ0BZzKUNwTcEKp2NNdFXpUyI
O3qC4thxnieU5aXnMXZOsc6A/Lbb/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEoP
qjBDDX4KeWFARxIhK5IPvUF8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QUQzMzBCNkJCNkExMUYxQTc2N0JFQUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoGMA0GCSqGSIb3DQEB
CwUAA4IBAQC79XQ4tERAj5lUysg0X8BWky+raPJCIWKeX6RYIziQiNrBJplZ6H7/
18eMod1+/SWaPZATF/rinwdl12ZdN/cFuryvHTcnvL0CgAMXgkXhj57vuxTT+CGe
4dTnKQpemBw4WMUF7Bd0jl8s2g5+V1ESuD8jRJFTIl7DRSwKjUCd4hFgUKdXyEVU
yNE5+HragMLys0rhf2/DrM1rT0YPQCfDTNopdA1ZLzuMAamtWKaXBc/tH5uFgN/o
l7AvlIy5ETySVdC6ut0Pz+braREqNkbJs+fZhPEWa6RbYttQ4gkSLkcMJw805YvN
FLyHFuJrjUzn3Pn18X7gsXRd2cWyRXx1
-----END CERTIFICATE-----