Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC2232A37D11F19F6F0DF0CE1D38B0.roa
File:                     A2CC2232A37D11F19F6F0DF0CE1D38B0.roa (raw, json)
Hash identifier:          GHl21dTgaAu3V/XwtSGSnovQ4/gBbpK5f2pITR2sOHc=
Subject key identifier:   42:4F:97:32:05:10:8E:F5:F2:28:B0:94:99:26:FA:DA:29:EB:86:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC2232A37D11F19F6F0DF0CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 07:45:43 +0000
ROA not before:           Sat 29 Aug 2026 07:45:39 +0000
ROA not after:            Tue 29 Sep 2026 07:45:39 +0000
asID:                     214467
IP address blocks:        154.222.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123885 (0x1e3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 07:45:39 2026 GMT
            Not After : Sep 29 07:45:39 2026 GMT
        Subject: CN=6a928e26-3a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:08:ad:e8:5a:4f:db:a3:96:7e:cc:2d:cc:
                    ac:62:2f:4e:f1:7c:ee:f8:f4:8f:b0:22:03:0f:70:
                    f6:e8:a7:0e:62:40:9b:e8:d8:58:17:b9:be:89:9b:
                    20:a7:bb:e6:10:03:79:35:97:77:47:74:64:39:64:
                    e1:9b:dc:f8:43:b5:39:e7:36:b8:2e:98:d4:f2:25:
                    f8:ee:e2:9e:04:f0:f2:c9:58:65:8a:3f:af:0e:e4:
                    71:de:00:05:20:9c:f8:2c:0a:bf:6a:a9:23:d1:d8:
                    54:79:f4:1e:70:ed:cd:d2:4d:3b:eb:3b:99:ec:6a:
                    da:08:11:39:72:38:99:d7:23:00:88:f4:4b:9f:06:
                    c3:0b:27:22:ac:a3:66:dc:d4:21:55:af:0d:96:93:
                    30:df:c7:c6:09:dd:e3:59:16:f1:62:a8:d3:e7:1c:
                    1c:b2:d4:11:f1:5e:51:4c:10:e5:4e:2e:eb:b8:1c:
                    10:3f:f6:c6:55:ba:eb:5d:98:04:b7:c4:68:a9:59:
                    07:73:26:e2:fb:2a:73:50:47:97:a9:7d:d0:61:58:
                    94:d7:ad:f0:d0:14:9b:15:b0:da:5f:d0:c9:53:43:
                    65:d1:ef:03:d2:61:39:26:5c:02:5c:7c:ce:f9:51:
                    58:97:79:a1:56:f1:6e:06:f5:ae:62:df:44:f4:73:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:97:32:05:10:8E:F5:F2:28:B0:94:99:26:FA:DA:29:EB:86:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC2232A37D11F19F6F0DF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:e9:fd:ae:2f:ce:8a:3f:2c:7d:b7:62:26:80:2f:b1:07:
         69:43:ba:87:22:37:99:30:dc:48:e0:56:04:a0:3b:59:a9:99:
         b9:48:64:40:20:f5:e9:ee:f8:34:73:c6:37:9b:79:e1:04:91:
         5f:23:6b:24:bf:b5:c0:37:ac:f2:b5:e5:a8:01:ab:2e:9d:3e:
         27:e1:79:7b:4e:4d:2b:95:e6:59:cd:74:4d:0b:c7:6b:bc:09:
         a2:2e:1a:2a:eb:30:3d:9d:04:73:27:71:65:da:0f:c0:a5:69:
         6d:8b:e3:01:84:1d:fd:ab:89:a7:85:62:50:fd:08:21:30:f1:
         24:4a:61:05:0e:be:7d:fa:64:52:f7:b0:7c:bf:4d:6a:ac:08:
         de:fc:14:86:76:e4:7f:da:43:ba:59:f3:12:ce:bc:52:e0:7a:
         6c:82:e6:ae:fa:bb:e2:f1:e5:0b:50:4c:d4:aa:e6:29:28:d7:
         19:b3:4c:0a:7c:67:cc:23:4a:47:b3:b2:46:c6:f6:83:ed:c0:
         d0:22:09:4e:16:89:ee:6f:7d:c1:4b:ee:bf:fc:42:d8:6a:3b:
         7e:4b:b0:0e:b6:4a:23:56:47:1d:ac:b1:7a:32:9c:3a:0f:5d:
         b8:0c:69:f4:89:be:8a:6d:67:49:a6:49:d2:e6:ec:0a:9c:f0:
         65:47:c4:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAePtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI5MDc0NTM5WhcNMjYwOTI5MDc0NTM5WjAYMRYw
FAYDVQQDEw02YTkyOGUyNi0zYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0gUIrehaT9ujln7MLcysYi9O8Xzu+PSPsCIDD3D26KcOYkCb6NhYF7m+
iZsgp7vmEAN5NZd3R3RkOWThm9z4Q7U55za4LpjU8iX47uKeBPDyyVhlij+vDuRx
3gAFIJz4LAq/aqkj0dhUefQecO3N0k076zuZ7GraCBE5cjiZ1yMAiPRLnwbDCyci
rKNm3NQhVa8NlpMw38fGCd3jWRbxYqjT5xwcstQR8V5RTBDlTi7ruBwQP/bGVbrr
XZgEt8RoqVkHcybi+ypzUEeXqX3QYViU163w0BSbFbDaX9DJU0Nl0e8D0mE5JlwC
XHzO+VFYl3mhVvFuBvWuYt9E9HNhIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEJP
lzIFEI718iiwlJkm+top64YbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkNDMjIzMkEzN0QxMUYxOUY2RjBERjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4KMA0GCSqGSIb3DQEB
CwUAA4IBAQAK3un9ri/Oij8sfbdiJoAvsQdpQ7qHIjeZMNxI4FYEoDtZqZm5SGRA
IPXp7vg0c8Y3m3nhBJFfI2skv7XAN6zyteWoAasunT4n4Xl7Tk0rleZZzXRNC8dr
vAmiLhoq6zA9nQRzJ3Fl2g/ApWlti+MBhB39q4mnhWJQ/QghMPEkSmEFDr59+mRS
97B8v01qrAje/BSGduR/2kO6WfMSzrxS4Hpsguau+rvi8eULUEzUquYpKNcZs0wK
fGfMI0pHs7JGxvaD7cDQIglOFonub33BS+6//ELYajt+S7AOtkojVkcdrLF6Mpw6
D124DGn0ib6KbWdJpknS5uwKnPBlR8Th
-----END CERTIFICATE-----