Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D9E158AA9111F1904480C4CE1D38B0.roa
File:                     A3D9E158AA9111F1904480C4CE1D38B0.roa (raw, json)
Hash identifier:          Tc6Exh021mH6sJ9dGHb/xtirODaHcSAKEX/uW4ukdgI=
Subject key identifier:   F9:86:43:CE:BF:70:E2:58:95:53:BF:4C:6B:60:93:C8:61:76:CD:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D9E158AA9111F1904480C4CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 07:56:32 +0000
ROA not before:           Mon 07 Sep 2026 07:56:28 +0000
ROA not after:            Tue 14 Sep 2027 07:56:28 +0000
asID:                     135600
IP address blocks:        154.91.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124448 (0x1e620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 07:56:28 2026 GMT
            Not After : Sep 14 07:56:28 2027 GMT
        Subject: CN=6a9e6e30-d72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:21:4f:ae:ec:58:22:4b:f4:7f:85:75:50:
                    95:b5:7a:5e:80:d2:c1:af:f5:1d:7f:9b:44:ae:fe:
                    ff:8f:2b:d2:8a:79:7d:0b:c4:ae:08:d8:91:b0:b9:
                    4a:46:f5:ab:0f:7b:09:78:78:54:9d:b3:e7:ad:bf:
                    a7:e6:91:a3:55:98:ec:14:00:f6:8e:50:f8:5c:51:
                    b0:e6:8d:6d:85:8b:01:09:da:28:26:78:4e:4a:20:
                    77:e0:90:e4:5b:ff:f2:c6:7d:fd:5e:8d:31:67:aa:
                    71:fd:5e:9f:f2:a5:1a:65:0c:b2:8f:53:cd:8a:91:
                    49:f3:a6:d7:ae:4a:bf:ea:f2:b0:46:78:76:ed:19:
                    06:54:bd:4b:4f:11:ee:32:e4:92:27:24:67:9b:70:
                    79:33:40:d3:f9:e0:43:94:16:ad:fc:c7:46:b8:88:
                    3d:d2:fb:b8:72:14:94:67:dc:d9:d8:27:d4:07:41:
                    7b:b5:9a:3a:52:a5:9e:42:73:c8:c0:36:9b:75:bc:
                    1b:7d:bf:1a:0b:0e:f9:68:9b:22:3a:41:b8:4b:e4:
                    7c:e2:4f:3f:3c:68:3c:f2:fd:ea:24:69:7b:36:43:
                    d8:9b:cf:65:75:dd:2e:45:b9:b6:0f:4f:d9:ae:ec:
                    eb:1c:74:4f:87:2e:5b:dc:b8:78:96:4a:e8:7c:09:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:43:CE:BF:70:E2:58:95:53:BF:4C:6B:60:93:C8:61:76:CD:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D9E158AA9111F1904480C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:8d:60:de:0e:0a:33:99:ef:c5:56:81:c2:14:9d:d4:70:
         0d:da:ca:15:55:26:10:89:ea:41:f8:9a:62:00:02:f1:7a:b3:
         a0:03:9e:18:4a:76:d2:80:59:10:63:56:de:26:3b:02:0b:24:
         ab:77:20:d4:96:10:e4:64:b7:7a:14:7c:60:db:4b:7d:80:eb:
         98:28:91:ac:12:d7:38:e8:68:68:fc:4a:38:b3:9a:e4:e3:11:
         10:2e:c5:72:c0:70:90:9b:f8:7d:96:d0:eb:85:07:c3:c9:d1:
         bc:14:f4:71:62:5e:d4:cf:58:c6:29:75:46:a4:5e:a7:6b:19:
         44:0f:a3:59:f6:6d:f6:60:80:2c:34:65:f1:6e:96:97:15:18:
         02:1e:1c:45:b6:26:09:a3:49:fb:1f:bc:40:a6:af:57:c5:81:
         2c:c2:f7:3e:71:89:38:3d:f1:28:49:34:75:7c:73:2e:62:a4:
         e2:93:1e:bd:22:c5:df:c5:6a:c0:62:3e:b6:0a:04:83:af:fa:
         33:40:42:47:9f:82:af:17:3d:81:34:79:72:62:b1:90:b8:a8:
         58:c8:46:70:da:c9:04:ee:3b:69:7a:1c:d2:30:97:52:48:47:
         51:7c:74:8e:62:9a:3f:4f:ca:3b:d2:83:aa:ae:12:bb:3a:30:
         73:35:4e:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeYgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA3MDc1NjI4WhcNMjcwOTE0MDc1NjI4WjAYMRYw
FAYDVQQDEw02YTllNmUzMC1kNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulshT67sWCJL9H+FdVCVtXpegNLBr/Udf5tErv7/jyvSinl9C8SuCNiR
sLlKRvWrD3sJeHhUnbPnrb+n5pGjVZjsFAD2jlD4XFGw5o1thYsBCdooJnhOSiB3
4JDkW//yxn39Xo0xZ6px/V6f8qUaZQyyj1PNipFJ86bXrkq/6vKwRnh27RkGVL1L
TxHuMuSSJyRnm3B5M0DT+eBDlBat/MdGuIg90vu4chSUZ9zZ2CfUB0F7tZo6UqWe
QnPIwDabdbwbfb8aCw75aJsiOkG4S+R84k8/PGg88v3qJGl7NkPYm89ldd0uRbm2
D0/ZruzrHHRPhy5b3Lh4lkrofAlZjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPmG
Q86/cOJYlVO/TGtgk8hhds3zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BM0Q5RTE1OEFBOTExMUYxOTA0NDgwQzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlsoMA0GCSqGSIb3DQEB
CwUAA4IBAQCj4I1g3g4KM5nvxVaBwhSd1HAN2soVVSYQiepB+JpiAALxerOgA54Y
SnbSgFkQY1beJjsCCySrdyDUlhDkZLd6FHxg20t9gOuYKJGsEtc46Gho/Eo4s5rk
4xEQLsVywHCQm/h9ltDrhQfDydG8FPRxYl7Uz1jGKXVGpF6naxlED6NZ9m32YIAs
NGXxbpaXFRgCHhxFtiYJo0n7H7xApq9XxYEswvc+cYk4PfEoSTR1fHMuYqTikx69
IsXfxWrAYj62CgSDr/ozQEJHn4KvFz2BNHlyYrGQuKhYyEZw2skE7jtpehzSMJdS
SEdRfHSOYpo/T8o70oOqrhK7OjBzNU58
-----END CERTIFICATE-----