Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84F330EB00511F1BE439DCCCE1D38B0.roa
File:                     A84F330EB00511F1BE439DCCCE1D38B0.roa (raw, json)
Hash identifier:          naz1SUZmGIiKvojEWOBTiQvBNou27gZ/iUrh78pZFrQ=
Subject key identifier:   B4:98:70:F6:B6:12:4E:2A:6E:0D:75:F2:77:A6:0C:61:19:B9:0E:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84F330EB00511F1BE439DCCCE1D38B0.roa
Signing time:             Mon 14 Sep 2026 06:29:37 +0000
ROA not before:           Mon 14 Sep 2026 06:29:33 +0000
ROA not after:            Thu 22 Oct 2026 06:29:33 +0000
asID:                     141159
IP address blocks:        154.94.228.0/22 maxlen: 24
                          154.94.228.0/24 maxlen: 24
                          154.94.229.0/24 maxlen: 24
                          154.94.230.0/24 maxlen: 24
                          154.94.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124926 (0x1e7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 06:29:33 2026 GMT
            Not After : Oct 22 06:29:33 2026 GMT
        Subject: CN=6aa79451-ca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:2d:fc:2a:7d:bc:83:a0:93:73:b6:26:9e:
                    92:89:f5:84:f1:c0:9b:16:49:2b:64:27:12:23:89:
                    3a:29:47:d4:db:c1:12:fc:88:e3:06:2e:bd:67:bd:
                    2d:1a:2d:d6:9f:82:24:cd:4d:35:cb:91:67:cb:e6:
                    c0:fd:79:ec:80:b5:5a:55:c8:e6:82:e0:63:25:75:
                    fe:91:37:e3:b9:ab:d7:98:e9:ed:4a:74:c4:20:fc:
                    fe:06:12:56:a4:d8:e0:24:7d:a4:c9:5d:69:55:11:
                    3f:76:15:41:2a:69:07:85:c2:80:49:b5:4f:bf:60:
                    59:e8:76:58:d3:2d:b1:76:76:ee:92:ab:65:dd:fa:
                    af:05:a3:d3:28:36:4e:26:05:a3:9b:55:f4:ad:93:
                    9e:40:7f:68:2b:fa:b1:b5:a9:9a:0a:75:da:53:c7:
                    35:5e:7d:c9:b1:da:4c:f5:76:44:31:8a:8c:d0:6a:
                    d5:2a:fe:d0:78:b2:ca:38:9a:66:c7:be:a6:05:b0:
                    10:59:aa:31:44:2e:f4:0f:99:32:e1:ff:3c:9f:33:
                    fa:5d:d9:a2:36:22:32:55:66:bd:22:7e:72:36:47:
                    c3:bb:2a:ab:69:41:22:9f:1e:ff:1d:c3:51:05:8f:
                    d0:94:44:b9:d8:d2:0a:01:4d:6f:c2:1e:de:22:43:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:70:F6:B6:12:4E:2A:6E:0D:75:F2:77:A6:0C:61:19:B9:0E:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84F330EB00511F1BE439DCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:7e:01:61:b0:ae:f4:dd:15:d0:d7:6c:18:5c:ee:d5:c3:
         df:9c:59:57:6b:0c:bd:be:ad:83:40:5c:fa:07:57:35:df:10:
         ee:13:48:42:91:14:e7:32:ea:ef:7d:83:3b:19:65:b5:75:08:
         fc:ee:14:f3:10:25:e7:cd:f5:c8:9b:23:1b:62:7f:d7:ae:a1:
         2f:c3:2c:2b:c3:f2:95:db:6f:5b:c8:f4:e8:1e:c4:d3:8c:81:
         0b:b3:9e:29:ea:da:04:c6:cd:90:68:ba:28:69:36:83:53:06:
         d8:80:07:0f:f7:ae:24:3e:07:5d:75:bd:60:61:5b:22:1a:75:
         82:6c:36:47:7e:6c:c5:a1:62:f1:81:d4:1c:d1:38:71:f2:20:
         09:6a:b7:03:e4:c6:81:6d:98:cb:51:2d:1b:2c:90:01:f7:06:
         e7:ab:31:90:9b:1c:f5:34:60:ea:ca:87:15:6e:a8:fa:2c:df:
         3a:13:b8:a8:57:57:8f:fc:b7:18:62:63:5e:20:f3:46:55:7f:
         eb:17:aa:e8:66:52:c0:2c:40:5e:1b:67:3d:e7:1d:67:05:42:
         8f:a1:0b:88:8f:a5:d8:8c:88:5e:29:fd:91:c3:74:f1:f8:c9:
         80:86:31:27:94:71:dd:0d:2d:39:69:99:a3:46:c6:d3:50:70:
         3c:50:d3:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAef+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE0MDYyOTMzWhcNMjYxMDIyMDYyOTMzWjAYMRYw
FAYDVQQDEw02YWE3OTQ1MS1jYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAybQt/Cp9vIOgk3O2Jp6SifWE8cCbFkkrZCcSI4k6KUfU28ES/IjjBi69
Z70tGi3Wn4IkzU01y5Fny+bA/XnsgLVaVcjmguBjJXX+kTfjuavXmOntSnTEIPz+
BhJWpNjgJH2kyV1pVRE/dhVBKmkHhcKASbVPv2BZ6HZY0y2xdnbukqtl3fqvBaPT
KDZOJgWjm1X0rZOeQH9oK/qxtamaCnXaU8c1Xn3JsdpM9XZEMYqM0GrVKv7QeLLK
OJpmx76mBbAQWaoxRC70D5ky4f88nzP6XdmiNiIyVWa9In5yNkfDuyqraUEinx7/
HcNRBY/QlES52NIKAU1vwh7eIkOtFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLSY
cPa2Ek4qbg118nemDGEZuQ6FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BODRGMzMwRUIwMDUxMUYxQkU0MzlEQ0NDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCml7kMA0GCSqGSIb3DQEB
CwUAA4IBAQC+xn4BYbCu9N0V0NdsGFzu1cPfnFlXawy9vq2DQFz6B1c13xDuE0hC
kRTnMurvfYM7GWW1dQj87hTzECXnzfXImyMbYn/XrqEvwywrw/KV229byPToHsTT
jIELs54p6toExs2QaLooaTaDUwbYgAcP964kPgdddb1gYVsiGnWCbDZHfmzFoWLx
gdQc0Thx8iAJarcD5MaBbZjLUS0bLJAB9wbnqzGQmxz1NGDqyocVbqj6LN86E7io
V1eP/LcYYmNeIPNGVX/rF6roZlLALEBeG2c95x1nBUKPoQuIj6XYjIheKf2Rw3Tx
+MmAhjEnlHHdDS05aZmjRsbTUHA8UNM/
-----END CERTIFICATE-----