Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB96ADCB36911F1936AE1CBCE1D38B0.roa
File:                     CBB96ADCB36911F1936AE1CBCE1D38B0.roa (raw, json)
Hash identifier:          nxP2RgAFCHWoLMWd5vZRKTSatQzZPwUUsjE+vlri4D8=
Subject key identifier:   AC:C4:9E:A5:C9:95:C5:7F:8B:C9:C5:7D:3D:FF:57:5C:87:01:EB:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB96ADCB36911F1936AE1CBCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 14:04:00 +0000
ROA not before:           Fri 18 Sep 2026 14:03:56 +0000
ROA not after:            Mon 26 Oct 2026 14:03:56 +0000
asID:                     401362
IP address blocks:        154.86.103.0/24 maxlen: 24
                          154.86.104.0/24 maxlen: 24
                          154.86.105.0/24 maxlen: 24
                          154.86.106.0/24 maxlen: 24
                          154.86.107.0/24 maxlen: 24
                          154.86.108.0/24 maxlen: 24
                          154.86.109.0/24 maxlen: 24
                          154.86.110.0/24 maxlen: 24
                          154.86.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125119 (0x1e8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 18 14:03:56 2026 GMT
            Not After : Oct 26 14:03:56 2026 GMT
        Subject: CN=6aad44d0-3ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:4f:c6:f7:79:97:c3:8a:3e:78:28:6d:8b:
                    0b:af:7d:b4:1d:8a:03:f2:57:d5:b7:e6:ad:64:6b:
                    13:7a:31:af:6f:f0:fa:d6:90:1a:44:31:90:24:38:
                    ce:b6:49:23:90:07:f9:8b:a5:78:82:07:87:f9:c5:
                    66:b8:1d:52:45:d4:4a:07:72:63:d8:95:6d:18:91:
                    ba:50:82:29:88:c4:1f:e8:bb:79:1f:de:84:69:f2:
                    f4:7e:05:6c:42:36:0e:bf:fd:ad:35:0f:86:6e:09:
                    26:0e:ce:e7:52:7b:c1:d0:82:d7:37:b7:d0:ac:4c:
                    20:2f:53:3f:5d:35:d0:fe:87:70:aa:3e:1b:8e:16:
                    40:0a:e3:19:30:6f:69:ca:3a:ca:43:60:ae:61:5e:
                    b4:a3:65:18:a7:7f:5f:4d:9a:70:6e:49:62:1b:0d:
                    9a:40:95:f8:0e:b6:d8:59:97:79:b8:c3:25:a7:b5:
                    9e:75:9a:76:3e:54:e0:9b:ab:d2:95:d9:6b:bb:b9:
                    fa:26:01:4e:30:91:98:1c:bc:65:df:f3:0c:db:ac:
                    ce:b2:99:08:b6:72:8f:05:78:ef:b7:8e:55:d5:6f:
                    2f:d0:99:09:68:b7:27:d2:62:f2:e2:52:4d:66:cd:
                    f6:f1:73:05:4f:52:aa:3b:08:b5:2a:16:52:d3:93:
                    86:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:9E:A5:C9:95:C5:7F:8B:C9:C5:7D:3D:FF:57:5C:87:01:EB:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB96ADCB36911F1936AE1CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.103.0-154.86.111.255

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:da:f2:7f:7d:c9:c2:14:88:57:a0:1f:e0:17:69:8f:fe:
         44:75:2f:cf:09:ce:40:ea:45:29:52:60:51:49:07:0e:a8:22:
         20:ae:b5:07:e1:6e:f8:c5:43:cf:32:90:84:33:ad:72:59:4f:
         0d:49:f4:28:97:21:9e:f6:db:d4:ea:d9:0b:84:15:cd:39:6a:
         be:d6:4c:94:55:ce:49:c1:66:a1:8d:88:a1:75:cf:12:68:80:
         f4:81:f0:c4:0b:5d:bc:bd:5f:84:c4:1d:66:2e:94:cd:a6:51:
         56:08:ed:14:e0:eb:ac:43:52:4f:b2:30:8e:60:4f:5e:0f:64:
         c6:fb:11:88:e7:aa:c9:8f:fb:eb:2c:95:e5:fa:e8:99:8d:9f:
         5d:6f:73:5a:de:0a:2a:ef:02:4d:d3:1a:17:2f:d5:31:41:d2:
         dd:26:a9:6b:47:d7:dd:b0:5d:77:06:8a:f4:50:30:62:8d:ae:
         2f:93:02:94:17:a7:39:5b:4a:25:86:ed:ed:80:e6:df:fb:8a:
         42:7b:b5:15:d6:d9:01:9f:d9:d7:59:fb:8e:aa:86:f8:12:6c:
         ae:7a:67:df:af:cd:38:18:13:a7:b7:26:4b:49:3f:bd:64:f8:
         6b:7e:66:37:fd:02:4d:c6:6f:d1:fd:94:39:e4:40:8a:80:30:
         29:03:ff:77
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAei/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE4MTQwMzU2WhcNMjYxMDI2MTQwMzU2WjAYMRYw
FAYDVQQDEw02YWFkNDRkMC0zYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XdPxvd5l8OKPngobYsLr320HYoD8lfVt+atZGsTejGvb/D61pAaRDGQ
JDjOtkkjkAf5i6V4ggeH+cVmuB1SRdRKB3Jj2JVtGJG6UIIpiMQf6Lt5H96EafL0
fgVsQjYOv/2tNQ+GbgkmDs7nUnvB0ILXN7fQrEwgL1M/XTXQ/odwqj4bjhZACuMZ
MG9pyjrKQ2CuYV60o2UYp39fTZpwbkliGw2aQJX4DrbYWZd5uMMlp7WedZp2PlTg
m6vSldlru7n6JgFOMJGYHLxl3/MM26zOspkItnKPBXjvt45V1W8v0JkJaLcn0mLy
4lJNZs328XMFT1KqOwi1KhZS05OGZQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKzE
nqXJlcV/i8nFfT3/V1yHAeu9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQkI5NkFEQ0IzNjkxMUYxOTM2QUUxQ0JDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaVmcDBASaVmAwDQYJ
KoZIhvcNAQELBQADggEBAJe62vJ/fcnCFIhXoB/gF2mP/kR1L88JzkDqRSlSYFFJ
Bw6oIiCutQfhbvjFQ88ykIQzrXJZTw1J9CiXIZ7229Tq2QuEFc05ar7WTJRVzknB
ZqGNiKF1zxJogPSB8MQLXby9X4TEHWYulM2mUVYI7RTg66xDUk+yMI5gT14PZMb7
EYjnqsmP++ssleX66JmNn11vc1reCirvAk3TGhcv1TFB0t0mqWtH192wXXcGivRQ
MGKNri+TApQXpzlbSiWG7e2A5t/7ikJ7tRXW2QGf2ddZ+46qhvgSbK56Z9+vzTgY
E6e3JktJP71k+Gt+Zjf9Ak3Gb9H9lDnkQIqAMCkD/3c=
-----END CERTIFICATE-----