Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAA1212C9F8D11F18172B40CCF1D38B0.roa
File:                     AAA1212C9F8D11F18172B40CCF1D38B0.roa (raw, json)
Hash identifier:          rrNlOsSJU3LYGIj5wvWvbDKsqZnQqfi0fuUuXT6f8HE=
Subject key identifier:   11:B1:05:A1:BF:95:3D:97:C4:1B:AC:5D:38:79:5E:CA:87:D0:3F:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E200
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAA1212C9F8D11F18172B40CCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:30:23 +0000
ROA not before:           Mon 24 Aug 2026 07:30:19 +0000
ROA not after:            Thu 01 Oct 2026 07:30:19 +0000
asID:                     62240
IP address blocks:        154.194.112.0/24 maxlen: 24
                          154.194.113.0/24 maxlen: 24
                          154.195.16.0/24 maxlen: 24
                          154.195.17.0/24 maxlen: 24
                          154.195.18.0/24 maxlen: 24
                          154.195.19.0/24 maxlen: 24
                          154.195.148.0/24 maxlen: 24
                          154.195.149.0/24 maxlen: 24
                          154.196.60.0/24 maxlen: 24
                          154.196.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123392 (0x1e200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 07:30:19 2026 GMT
            Not After : Oct  1 07:30:19 2026 GMT
        Subject: CN=6a8bf30f-0140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:85:53:a4:e1:06:19:5e:d4:41:29:46:e0:
                    85:12:ae:52:f9:f5:e2:50:57:b5:12:42:1d:2e:7f:
                    d7:07:b1:eb:3b:03:ae:4f:90:af:cc:ab:35:88:5b:
                    27:2b:df:e2:a1:03:8f:ee:57:38:3c:b0:e7:d6:07:
                    8f:7d:b7:eb:cb:a7:50:c7:99:32:d8:b3:f4:9b:03:
                    62:8c:3d:1e:65:d6:b9:e5:64:27:8c:e8:af:f1:ae:
                    31:bc:a8:ce:0a:13:01:31:c8:85:57:e0:44:de:a8:
                    1a:3a:e1:36:0a:d6:bf:7d:a5:66:bf:53:41:2a:35:
                    b3:ab:56:16:fa:ba:94:41:88:00:ed:a7:8a:cc:ed:
                    b9:af:7b:93:09:11:4f:8f:c1:d2:04:5c:f7:36:c3:
                    c4:d7:d6:0a:cd:2e:88:5b:94:2a:b1:9c:c4:20:87:
                    0a:b5:c2:cf:ea:65:35:18:0a:7c:07:eb:56:cf:2f:
                    e7:da:8d:65:28:7a:13:5e:6c:39:f1:a3:e3:9c:af:
                    8d:38:6b:39:ed:e7:78:4b:61:38:3c:30:d5:c0:47:
                    ae:0f:30:de:ca:cf:12:b5:57:c6:d7:5a:7e:db:d6:
                    62:59:97:82:32:08:ef:fc:2e:8c:f6:e4:0e:c2:b0:
                    07:86:57:6f:c4:fe:70:cd:a9:ec:9e:45:0e:9f:a1:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:05:A1:BF:95:3D:97:C4:1B:AC:5D:38:79:5E:CA:87:D0:3F:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAA1212C9F8D11F18172B40CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.112.0/23
                  154.195.16.0/22
                  154.195.148.0/23
                  154.196.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:78:e1:8f:a0:f2:c0:f3:77:ab:eb:97:fc:c0:db:2e:6b:
         80:be:fe:41:30:2e:ca:be:b9:6c:ed:f4:34:f2:51:75:5b:ba:
         63:b1:68:92:e6:a8:7e:e9:36:08:a1:93:3c:c4:1e:af:51:c5:
         e1:40:ea:63:46:71:88:01:3f:ae:cb:8b:35:6c:a5:e9:58:d0:
         75:97:46:4a:48:9f:8b:f0:60:92:79:c5:ab:74:89:5b:09:6c:
         5d:68:6a:53:45:bd:21:ac:54:49:1a:ef:47:3a:3b:dc:06:6e:
         34:bf:68:71:83:ad:29:07:c2:02:43:8e:81:a4:ad:b9:a8:45:
         b8:5b:96:28:1c:cc:01:fe:61:5b:31:bc:0a:80:7d:fc:f1:b8:
         b3:39:c0:6f:51:01:fc:df:62:49:3c:0b:0c:95:68:2e:17:45:
         a9:f4:83:a2:f0:4f:c9:c3:2d:9c:b9:df:a5:a9:68:3e:be:41:
         19:d9:8e:bf:13:63:9c:65:87:70:ed:5c:cd:52:c5:00:26:0d:
         be:fc:e1:4e:92:a5:fc:af:57:55:13:c1:93:f8:de:f1:d1:3b:
         4f:79:51:7a:06:70:b1:e9:c9:f1:55:65:72:c2:cb:3d:4a:ec:
         32:87:ad:b0:c8:f3:66:bf:22:a5:c7:ba:9b:fa:c7:90:c1:10:
         ac:3e:7f:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAeIAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MDczMDE5WhcNMjYxMDAxMDczMDE5WjAYMRYw
FAYDVQQDEw02YThiZjMwZi0wMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmxaFU6ThBhle1EEpRuCFEq5S+fXiUFe1EkIdLn/XB7HrOwOuT5CvzKs1
iFsnK9/ioQOP7lc4PLDn1gePfbfry6dQx5ky2LP0mwNijD0eZda55WQnjOiv8a4x
vKjOChMBMciFV+BE3qgaOuE2Cta/faVmv1NBKjWzq1YW+rqUQYgA7aeKzO25r3uT
CRFPj8HSBFz3NsPE19YKzS6IW5QqsZzEIIcKtcLP6mU1GAp8B+tWzy/n2o1lKHoT
Xmw58aPjnK+NOGs57ed4S2E4PDDVwEeuDzDeys8StVfG11p+29ZiWZeCMgjv/C6M
9uQOwrAHhldvxP5wzansnkUOn6HdZQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFBGx
BaG/lT2XxBusXTh5XsqH0D+nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQUExMjEyQzlGOEQxMUYxODE3MkI0MENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBmsJwAwQCmsMQAwQBmsOU
AwQBmsQ8MA0GCSqGSIb3DQEBCwUAA4IBAQBEP3jhj6DywPN3q+uX/MDbLmuAvv5B
MC7Kvrls7fQ08lF1W7pjsWiS5qh+6TYIoZM8xB6vUcXhQOpjRnGIAT+uy4s1bKXp
WNB1l0ZKSJ+L8GCSecWrdIlbCWxdaGpTRb0hrFRJGu9HOjvcBm40v2hxg60pB8IC
Q46BpK25qEW4W5YoHMwB/mFbMbwKgH388bizOcBvUQH832JJPAsMlWguF0Wp9IOi
8E/Jwy2cud+lqWg+vkEZ2Y6/E2OcZYdw7VzNUsUAJg2+/OFOkqX8r1dVE8GT+N7x
0TtPeVF6BnCx6cnxVWVywss9Suwyh62wyPNmvyKlx7qb+seQwRCsPn/6
-----END CERTIFICATE-----