Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C91BBEA6B211F191B253D4CE1D38B0.roa
File:                     E7C91BBEA6B211F191B253D4CE1D38B0.roa (raw, json)
Hash identifier:          2/Ek5KkHP08oogly26cQKucmbE59mM7DwGHycu/dXEU=
Subject key identifier:   53:8B:C7:62:5B:B1:C3:80:FA:94:EC:D7:CC:40:51:4F:51:53:0E:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C91BBEA6B211F191B253D4CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 09:44:35 +0000
ROA not before:           Wed 02 Sep 2026 09:44:31 +0000
ROA not after:            Wed 14 Oct 2026 09:44:31 +0000
asID:                     211826
IP address blocks:        154.197.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124073 (0x1e4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 09:44:31 2026 GMT
            Not After : Oct 14 09:44:31 2026 GMT
        Subject: CN=6a97f003-1004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:c1:0e:d8:8b:6c:a2:f2:60:3f:6b:80:7f:
                    93:a8:99:0d:04:0d:a0:45:a9:d4:f1:f5:29:e7:e3:
                    41:c7:80:07:7b:5d:9b:81:cb:66:ea:5f:50:89:93:
                    87:8c:f6:73:14:9e:cc:b7:9a:f1:77:45:81:0f:ea:
                    e7:01:a9:92:e9:e8:90:29:94:a7:f4:cf:91:83:05:
                    0a:b7:4d:9b:3b:65:04:9b:31:56:6a:7c:b2:23:55:
                    30:22:80:11:fd:37:d8:0c:f2:94:64:73:2a:42:3b:
                    78:c8:89:43:90:bd:86:97:c1:08:20:ad:39:78:fa:
                    92:a5:2f:9a:53:b0:85:e5:9d:d0:c3:a3:c7:f5:23:
                    eb:66:57:26:93:c3:c8:d4:28:e8:e3:a8:6d:13:8b:
                    8b:e1:c8:10:74:08:7c:12:d9:f7:f7:19:b2:11:0b:
                    54:dd:34:42:f9:c3:98:c3:81:b1:a3:6c:fa:8d:80:
                    33:5d:87:49:6a:de:41:01:9b:05:3f:1b:21:12:6a:
                    e0:8d:87:11:27:62:f9:8c:68:24:56:84:a4:bf:10:
                    61:3c:0d:64:3e:7f:bb:cf:2a:1a:f0:4b:a9:e3:73:
                    fd:d2:83:b0:a9:03:3b:a9:24:9b:5a:53:d9:52:7a:
                    87:1e:5e:11:46:67:78:04:a3:5a:fe:32:db:8f:00:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:C7:62:5B:B1:C3:80:FA:94:EC:D7:CC:40:51:4F:51:53:0E:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C91BBEA6B211F191B253D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:f1:d1:cc:48:70:3d:e3:c2:6e:4b:89:14:85:4f:b4:99:
         f8:71:74:d6:9c:34:6d:29:35:0c:93:12:56:15:51:5e:1a:7a:
         84:b7:6b:67:64:9c:3f:c4:39:49:4f:b6:52:13:3f:50:a3:f9:
         cd:5e:4a:3f:89:ed:f6:49:36:fc:97:20:70:d5:77:a2:06:b5:
         b1:a9:e6:10:9e:0c:a4:0b:77:05:16:20:6a:19:e5:0b:92:0c:
         d4:bf:81:72:7f:ef:bb:f5:c3:09:8a:31:c7:45:a8:cc:05:34:
         18:f6:8a:5b:2e:7e:1c:b0:70:30:4d:e8:30:0f:95:ea:83:48:
         72:2b:aa:5a:3c:8d:0c:6d:31:5a:47:2c:81:11:8f:57:78:2a:
         e9:dd:78:b2:c7:af:72:58:e6:ab:3e:1d:6e:60:b8:8c:56:31:
         51:c7:5e:5f:e5:ff:e0:e5:a0:a5:c2:96:b8:9c:57:01:bb:2f:
         7b:6e:4c:f2:4a:49:62:62:a4:7c:71:51:ae:1e:93:51:e8:a7:
         d3:7a:39:22:d4:ee:f0:64:fc:fd:63:9b:fb:d5:76:88:46:0e:
         55:5e:39:3c:35:99:ac:73:35:aa:c7:92:f4:a9:1f:a1:1c:bc:
         40:46:d6:4a:8a:d5:32:38:c4:6c:ce:0f:aa:44:8a:53:dd:99:
         bf:10:b3:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeSpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTAyMDk0NDMxWhcNMjYxMDE0MDk0NDMxWjAYMRYw
FAYDVQQDEw02YTk3ZjAwMy0xMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs+bBDtiLbKLyYD9rgH+TqJkNBA2gRanU8fUp5+NBx4AHe12bgctm6l9Q
iZOHjPZzFJ7Mt5rxd0WBD+rnAamS6eiQKZSn9M+RgwUKt02bO2UEmzFWanyyI1Uw
IoAR/TfYDPKUZHMqQjt4yIlDkL2Gl8EIIK05ePqSpS+aU7CF5Z3Qw6PH9SPrZlcm
k8PI1Cjo46htE4uL4cgQdAh8Etn39xmyEQtU3TRC+cOYw4Gxo2z6jYAzXYdJat5B
AZsFPxshEmrgjYcRJ2L5jGgkVoSkvxBhPA1kPn+7zyoa8Eup43P90oOwqQM7qSSb
WlPZUnqHHl4RRmd4BKNa/jLbjwDOoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFOL
x2JbscOA+pTs18xAUU9RUw6uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0M5MUJCRUE2QjIxMUYxOTFCMjUzRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVuMA0GCSqGSIb3DQEB
CwUAA4IBAQB2TPHRzEhwPePCbkuJFIVPtJn4cXTWnDRtKTUMkxJWFVFeGnqEt2tn
ZJw/xDlJT7ZSEz9Qo/nNXko/ie32STb8lyBw1XeiBrWxqeYQngykC3cFFiBqGeUL
kgzUv4Fyf++79cMJijHHRajMBTQY9opbLn4csHAwTegwD5Xqg0hyK6paPI0MbTFa
RyyBEY9XeCrp3Xiyx69yWOarPh1uYLiMVjFRx15f5f/g5aClwpa4nFcBuy97bkzy
SkliYqR8cVGuHpNR6KfTejki1O7wZPz9Y5v71XaIRg5VXjk8NZmsczWqx5L0qR+h
HLxARtZKitUyOMRszg+qRIpT3Zm/ELPh
-----END CERTIFICATE-----