Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E433195EACE911F1993B2EF7CE1D38B0.roa
File:                     E433195EACE911F1993B2EF7CE1D38B0.roa (raw, json)
Hash identifier:          LmByL7/+lyjWKF2HVlAB5D73tr31y/ceQ41EWRLzo50=
Subject key identifier:   79:E6:6D:33:AD:09:00:5C:8B:B1:40:D9:F9:41:E2:CA:FA:ED:2B:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E433195EACE911F1993B2EF7CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:33:18 +0000
ROA not before:           Thu 10 Sep 2026 07:33:14 +0000
ROA not after:            Sat 17 Oct 2026 07:33:14 +0000
asID:                     22773
IP address blocks:        154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
                          154.85.106.0/24 maxlen: 24
                          154.90.18.0/24 maxlen: 24
                          154.90.149.0/24 maxlen: 24
                          154.90.150.0/24 maxlen: 24
                          154.90.151.0/24 maxlen: 24
                          154.90.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124647 (0x1e6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:33:14 2026 GMT
            Not After : Oct 17 07:33:14 2026 GMT
        Subject: CN=6aa25d3e-a81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bf:d0:86:2c:a6:d5:0b:15:e2:61:85:83:8f:
                    b8:60:94:a9:dd:08:37:48:fc:21:54:80:e6:03:6e:
                    4a:61:cf:2b:5a:7b:10:05:7d:2a:35:68:0b:00:37:
                    18:62:54:d9:d8:f2:99:e1:b9:40:61:45:5f:ba:97:
                    2e:ea:a1:60:90:77:32:d5:74:1a:1d:07:67:39:2e:
                    6d:3b:6b:30:b8:c9:ac:e2:ff:59:1f:5c:70:f6:22:
                    c8:e9:48:97:2e:4e:75:51:d9:f0:1b:c3:b9:42:f4:
                    00:0d:0b:1f:a8:56:cb:bb:09:79:97:72:d8:ac:50:
                    9b:21:02:0f:ed:01:94:28:ef:83:ba:4a:52:60:d2:
                    11:43:8c:be:97:77:d2:15:da:07:9a:fc:9c:4e:dc:
                    9e:08:91:6b:83:54:a4:00:48:9a:17:1c:19:79:e5:
                    79:22:17:63:79:31:c9:bc:50:8d:06:75:b5:52:97:
                    ec:f3:d9:16:b3:d1:25:e5:55:c8:bb:95:db:85:e2:
                    73:d5:16:93:cc:d4:fa:60:52:77:6f:15:c9:e8:02:
                    0c:f8:f0:16:2f:04:07:2a:fb:9e:c7:7b:20:70:0a:
                    19:ff:55:5f:80:72:f9:e3:eb:97:a6:f2:e0:dd:b1:
                    0b:ac:34:32:99:8a:9c:61:7f:1f:78:eb:77:45:83:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E6:6D:33:AD:09:00:5C:8B:B1:40:D9:F9:41:E2:CA:FA:ED:2B:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E433195EACE911F1993B2EF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.22.0/23
                  154.85.104.0-154.85.106.255
                  154.90.18.0/24
                  154.90.149.0-154.90.151.255
                  154.90.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:43:cf:18:70:86:96:69:46:90:b2:8f:f1:31:da:2c:3e:
         f0:99:87:f6:67:c4:fa:5a:1f:d5:17:de:2e:96:85:dd:e1:ff:
         91:2e:02:41:3d:f4:7a:36:4e:32:51:53:b0:be:82:27:d4:02:
         a0:ac:94:09:6d:f7:46:65:9b:98:bf:6c:29:41:6f:e9:11:e0:
         fc:fa:95:61:4e:3c:f6:e1:30:08:c9:55:62:cd:67:ad:bf:28:
         bf:a8:21:60:5d:ed:b5:cf:e4:04:ee:16:3a:65:35:57:79:df:
         32:6f:51:11:1c:77:20:d3:85:a1:8d:fa:c9:7c:14:9a:02:c0:
         d2:2c:6e:f2:01:89:21:33:b8:f9:fe:3f:0a:b7:3b:0c:87:90:
         fa:72:de:43:0c:74:b9:2b:82:eb:98:02:0c:d7:0a:db:d7:21:
         71:58:c5:d8:c5:c7:50:94:d8:ca:dd:c3:71:f6:0c:b8:69:98:
         ee:0f:6a:96:17:db:ed:48:10:4c:c1:e0:1c:b2:f1:d8:03:42:
         51:f0:d2:cc:73:43:60:67:d6:98:0c:37:c6:de:10:ce:66:ea:
         18:8b:cf:1f:68:b0:64:50:7d:2d:a7:20:44:99:5d:ec:ff:a3:
         55:ba:05:b3:36:04:cd:41:3e:f5:e2:8e:d7:9f:90:47:c5:c0:
         11:0f:c3:14
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAebnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEwMDczMzE0WhcNMjYxMDE3MDczMzE0WjAYMRYw
FAYDVQQDEw02YWEyNWQzZS1hODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA67/Qhiym1QsV4mGFg4+4YJSp3Qg3SPwhVIDmA25KYc8rWnsQBX0qNWgL
ADcYYlTZ2PKZ4blAYUVfupcu6qFgkHcy1XQaHQdnOS5tO2swuMms4v9ZH1xw9iLI
6UiXLk51UdnwG8O5QvQADQsfqFbLuwl5l3LYrFCbIQIP7QGUKO+DukpSYNIRQ4y+
l3fSFdoHmvycTtyeCJFrg1SkAEiaFxwZeeV5IhdjeTHJvFCNBnW1Upfs89kWs9El
5VXIu5XbheJz1RaTzNT6YFJ3bxXJ6AIM+PAWLwQHKvuex3sgcAoZ/1VfgHL54+uX
pvLg3bELrDQymYqcYX8feOt3RYMOowIDAQABo4ICzTCCAskwHQYDVR0OBBYEFHnm
bTOtCQBci7FA2flB4sr67StIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDMzMTk1RUFDRTkxMUYxOTkzQjJFRjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmlUWMAwDBAOaVWgDBACa
VWoDBACaWhIwDAMEAJpalQMEA5pakAMEAJpanzANBgkqhkiG9w0BAQsFAAOCAQEA
bkFDzxhwhpZpRpCyj/Ex2iw+8JmH9mfE+lof1RfeLpaF3eH/kS4CQT30ejZOMlFT
sL6CJ9QCoKyUCW33RmWbmL9sKUFv6RHg/PqVYU489uEwCMlVYs1nrb8ov6ghYF3t
tc/kBO4WOmU1V3nfMm9RERx3INOFoY36yXwUmgLA0ixu8gGJITO4+f4/Crc7DIeQ
+nLeQwx0uSuC65gCDNcK29chcVjF2MXHUJTYyt3DcfYMuGmY7g9qlhfb7UgQTMHg
HLLx2ANCUfDSzHNDYGfWmAw3xt4QzmbqGIvPH2iwZFB9LacgRJld7P+jVboFszYE
zUE+9eKO15+QR8XAEQ/DFA==
-----END CERTIFICATE-----