Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC4C0962B4D511F1BE297BC9CE1D38B0.roa
File:                     AC4C0962B4D511F1BE297BC9CE1D38B0.roa (raw, json)
Hash identifier:          sKhlCWg7TyJI02o21xevEW5PZjJQZhXM0d0x6R3+21M=
Subject key identifier:   45:2E:39:1F:3A:4C:34:41:4C:5D:D0:6B:D3:EA:35:75:7F:A2:C9:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC4C0962B4D511F1BE297BC9CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:28:44 +0000
ROA not before:           Sun 20 Sep 2026 09:28:39 +0000
ROA not after:            Tue 27 Oct 2026 09:28:39 +0000
asID:                     138915
IP address blocks:        154.206.56.0/23 maxlen: 24
                          154.206.58.0/23 maxlen: 24
                          154.206.60.0/23 maxlen: 24
                          154.206.62.0/23 maxlen: 24
                          154.206.67.0/24 maxlen: 24
                          154.206.72.0/23 maxlen: 24
                          154.206.74.0/23 maxlen: 24
                          154.206.76.0/23 maxlen: 24
                          154.206.92.0/23 maxlen: 24
                          154.206.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125187 (0x1e903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:28:39 2026 GMT
            Not After : Oct 27 09:28:39 2026 GMT
        Subject: CN=6aafa74c-a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:76:16:1c:41:97:c3:f1:9d:b2:ec:dd:97:
                    7e:51:7e:19:0f:58:9f:a6:a0:c4:11:b2:09:1c:1c:
                    37:a2:2e:6a:a1:06:9e:2c:27:43:f3:4f:ec:ee:3b:
                    31:c8:b0:8f:f1:e8:c2:3b:8b:c8:41:b6:f6:a9:95:
                    f3:45:e1:79:5b:2a:7a:53:9f:53:e4:f4:d3:c1:ba:
                    c8:9d:f2:3a:92:0e:dd:f9:42:fa:bc:50:be:e7:b7:
                    cf:59:cf:3a:f6:cd:f8:85:da:fc:30:9f:ab:38:2a:
                    ba:96:95:d4:a0:1e:05:44:fd:40:a4:4e:d0:99:74:
                    27:b1:c6:ba:52:cd:f8:8f:5a:74:d7:eb:e1:8a:8a:
                    e9:7a:bc:30:58:54:9b:78:19:2f:4b:85:e2:04:9f:
                    71:ca:4b:26:25:ad:ec:eb:b8:e1:6d:9d:4e:bc:0a:
                    c8:87:52:7e:07:1b:21:a8:e2:8e:93:19:09:32:3f:
                    8f:7e:d7:22:d6:f1:44:18:24:31:dd:66:d2:fb:1a:
                    97:6d:49:2f:4c:a0:71:f0:79:df:d7:cd:23:b8:ab:
                    ef:41:72:77:f1:2a:a8:79:8b:d9:a5:21:6e:91:d5:
                    c1:5f:00:cc:97:47:bc:9c:59:62:9d:10:5d:fb:e4:
                    45:cb:b4:df:aa:74:e3:86:a8:86:f3:c8:86:bc:35:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:39:1F:3A:4C:34:41:4C:5D:D0:6B:D3:EA:35:75:7F:A2:C9:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC4C0962B4D511F1BE297BC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.56.0/21
                  154.206.67.0/24
                  154.206.72.0-154.206.77.255
                  154.206.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:a1:bc:6f:ea:1e:5a:cf:a7:cb:6b:65:f9:77:80:42:09:
         bf:6f:2c:cf:af:67:ef:bd:14:ad:58:d9:39:96:b1:3a:42:8b:
         67:6d:c4:89:8e:62:17:fe:e1:d4:9d:6b:99:da:1e:58:d2:72:
         cd:b4:dc:de:b7:1f:11:4b:61:f4:e1:71:f5:8f:6b:ac:09:20:
         bf:3d:5e:40:a5:8d:c2:d4:45:e3:5f:6f:17:48:a2:9f:01:cc:
         64:b1:40:16:d1:e4:c2:4d:fb:3d:0d:e8:c5:81:60:bc:14:08:
         dd:62:ed:34:56:c2:34:2d:75:a2:53:84:f1:08:4d:d7:96:04:
         16:8b:56:a7:17:89:05:52:4e:89:e0:9c:52:be:0d:02:20:e3:
         06:92:55:23:bf:86:08:85:5d:7a:45:2e:3a:0a:65:f2:11:e6:
         42:33:d1:60:a6:66:94:c0:e1:f8:59:2d:43:e5:52:74:4f:6a:
         b8:08:dc:7d:e8:b7:68:b5:82:37:e9:85:a3:ba:40:a6:e4:a4:
         67:dc:4f:3b:9f:ed:d9:7a:b3:6d:95:a6:ad:0e:7f:86:64:c2:
         6c:2e:db:4b:83:78:8e:35:12:8d:85:25:0c:f7:c8:2f:6c:07:
         ff:7a:71:e7:73:c3:e8:b3:68:bc:a5:98:22:53:8e:8c:9b:41:
         de:9d:4e:3f
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAekDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIwMDkyODM5WhcNMjYxMDI3MDkyODM5WjAYMRYw
FAYDVQQDEw02YWFmYTc0Yy1hMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqVp2FhxBl8PxnbLs3Zd+UX4ZD1ifpqDEEbIJHBw3oi5qoQaeLCdD80/s
7jsxyLCP8ejCO4vIQbb2qZXzReF5Wyp6U59T5PTTwbrInfI6kg7d+UL6vFC+57fP
Wc869s34hdr8MJ+rOCq6lpXUoB4FRP1ApE7QmXQnsca6Us34j1p01+vhiorperww
WFSbeBkvS4XiBJ9xyksmJa3s67jhbZ1OvArIh1J+BxshqOKOkxkJMj+Pftci1vFE
GCQx3WbS+xqXbUkvTKBx8Hnf180juKvvQXJ38SqoeYvZpSFukdXBXwDMl0e8nFli
nRBd++RFy7TfqnTjhqiG88iGvDXAEwIDAQABo4ICvzCCArswHQYDVR0OBBYEFEUu
OR86TDRBTF3Qa9PqNXV/oskEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzRDMDk2MkI0RDUxMUYxQkUyOTdCQzlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDms44AwQAms5DMAwDBAOa
zkgDBAGazkwDBAKazlwwDQYJKoZIhvcNAQELBQADggEBAGYqobxv6h5az6fLa2X5
d4BCCb9vLM+vZ++9FK1Y2TmWsTpCi2dtxImOYhf+4dSda5naHljScs203N63HxFL
YfThcfWPa6wJIL89XkCljcLUReNfbxdIop8BzGSxQBbR5MJN+z0N6MWBYLwUCN1i
7TRWwjQtdaJThPEITdeWBBaLVqcXiQVSTongnFK+DQIg4waSVSO/hgiFXXpFLjoK
ZfIR5kIz0WCmZpTA4fhZLUPlUnRPargI3H3ot2i1gjfphaO6QKbkpGfcTzuf7dl6
s22Vpq0Of4Zkwmwu20uDeI41Eo2FJQz3yC9sB/96cedzw+izaLylmCJTjoybQd6d
Tj8=
-----END CERTIFICATE-----