Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC55F740B26111F1B8DC5817CF1D38B0.roa
File:                     FC55F740B26111F1B8DC5817CF1D38B0.roa (raw, json)
Hash identifier:          ZeefGalxTui4WFPH1D2iz8t2QCkqCePJmv02eXABA+8=
Subject key identifier:   C7:10:7D:54:58:1A:C5:D3:DA:99:78:9F:25:05:93:51:B2:63:6E:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E894
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC55F740B26111F1B8DC5817CF1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:35:34 +0000
ROA not before:           Thu 17 Sep 2026 06:35:30 +0000
ROA not after:            Sun 27 Sep 2026 06:35:30 +0000
asID:                     400619
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.118.0/23 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125076 (0x1e894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 06:35:30 2026 GMT
            Not After : Sep 27 06:35:30 2026 GMT
        Subject: CN=6aab8a36-e9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:9a:09:8b:ca:38:96:fc:d8:bc:f4:8c:7d:
                    28:aa:cf:c6:a9:63:e3:16:56:e7:cb:a3:c0:c5:23:
                    fc:cd:c9:de:c4:3b:fa:ff:af:5f:c3:e5:6a:8c:2d:
                    7b:64:94:06:d5:63:86:2f:ce:50:9b:2f:93:d0:4a:
                    99:35:32:28:74:64:59:e3:04:59:9d:3e:4f:16:8d:
                    39:35:dd:c2:99:3e:cb:32:c9:0c:07:6f:28:a6:c0:
                    01:38:d4:e6:37:d3:ff:3f:c1:5f:b2:74:cd:06:2a:
                    90:7d:d2:a7:da:3c:61:bf:3a:0c:c6:db:93:1b:27:
                    db:90:10:96:05:2a:b2:bd:72:3c:38:5e:6e:b5:74:
                    50:04:01:19:2e:6b:80:55:ae:71:20:dd:55:37:48:
                    85:ab:99:69:eb:d8:68:4c:02:d9:97:37:7b:97:d4:
                    8f:fe:6c:4e:f7:ac:c0:72:5b:e8:28:5b:a9:96:c8:
                    27:9b:8f:43:90:8c:0a:61:ef:85:0e:0f:59:5b:ef:
                    6a:ad:f7:e0:6a:b6:12:27:92:87:79:9c:72:01:91:
                    58:b5:ce:eb:a1:0a:64:9d:43:c5:7b:0c:74:9b:ad:
                    5b:04:79:1c:b6:d3:64:c4:6f:3b:30:db:2a:38:75:
                    2e:37:ed:c5:8e:30:1d:26:f9:66:8b:f8:f3:a1:80:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:7D:54:58:1A:C5:D3:DA:99:78:9F:25:05:93:51:B2:63:6E:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC55F740B26111F1B8DC5817CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0-154.202.127.255
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:48:6c:16:75:27:29:35:e2:5b:2f:06:71:8a:67:3a:67:
         32:33:43:86:43:cd:e7:e4:48:52:a1:53:d0:b5:19:02:a0:1b:
         16:da:5f:59:88:e8:42:98:c2:ff:ef:b9:7d:9d:fa:cb:d6:75:
         60:91:21:99:1c:ac:a2:da:bf:71:65:ba:19:03:a4:90:fc:05:
         22:7a:23:80:3a:fc:5a:b5:d6:94:54:55:99:fc:b1:50:e0:f8:
         01:74:14:41:0b:91:dc:9d:03:6d:a7:d7:0e:a4:9a:ba:5f:67:
         1f:3e:30:bb:e3:c3:43:91:3d:1d:63:96:24:90:15:6c:0c:75:
         ca:03:52:f2:14:63:06:92:54:36:60:81:4d:e3:50:07:25:07:
         6f:c7:30:b5:9f:80:96:5c:de:75:9f:2d:e4:38:e8:b2:3d:de:
         78:15:7e:f3:5c:53:83:56:b6:e1:cb:c3:4e:9d:60:2c:ce:0d:
         91:90:46:22:36:f1:f7:71:69:23:dc:3e:a5:00:d4:d1:67:dc:
         09:ea:b2:69:3c:bd:99:7a:52:0e:32:63:14:7b:90:87:26:2f:
         4a:ca:77:cd:6c:b8:46:0c:c9:dd:44:24:e6:81:88:66:b7:98:
         b9:af:2d:bb:2c:47:79:19:fd:0a:fc:85:25:86:82:af:0e:48:
         33:f3:48:e3
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAeiUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE3MDYzNTMwWhcNMjYwOTI3MDYzNTMwWjAYMRYw
FAYDVQQDEw02YWFiOGEzNi1lOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0eaCYvKOJb82Lz0jH0oqs/GqWPjFlbny6PAxSP8zcnexDv6/69fw+Vq
jC17ZJQG1WOGL85Qmy+T0EqZNTIodGRZ4wRZnT5PFo05Nd3CmT7LMskMB28opsAB
ONTmN9P/P8FfsnTNBiqQfdKn2jxhvzoMxtuTGyfbkBCWBSqyvXI8OF5utXRQBAEZ
LmuAVa5xIN1VN0iFq5lp69hoTALZlzd7l9SP/mxO96zAclvoKFuplsgnm49DkIwK
Ye+FDg9ZW+9qrffgarYSJ5KHeZxyAZFYtc7roQpknUPFewx0m61bBHkcttNkxG87
MNsqOHUuN+3FjjAdJvlmi/jzoYCIKwIDAQABo4ICujCCArYwHQYDVR0OBBYEFMcQ
fVRYGsXT2pl4nyUFk1GyY27fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQzU1Rjc0MEIyNjExMUYxQjhEQzU4MTdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBACaynUDBAeaygAwCwME
AZrZ6gMDAZrYMA0GCSqGSIb3DQEBCwUAA4IBAQBOqkhsFnUnKTXiWy8GcYpnOmcy
M0OGQ83n5EhSoVPQtRkCoBsW2l9ZiOhCmML/77l9nfrL1nVgkSGZHKyi2r9xZboZ
A6SQ/AUieiOAOvxatdaUVFWZ/LFQ4PgBdBRBC5HcnQNtp9cOpJq6X2cfPjC748ND
kT0dY5YkkBVsDHXKA1LyFGMGklQ2YIFN41AHJQdvxzC1n4CWXN51ny3kOOiyPd54
FX7zXFODVrbhy8NOnWAszg2RkEYiNvH3cWkj3D6lANTRZ9wJ6rJpPL2ZelIOMmMU
e5CHJi9KynfNbLhGDMndRCTmgYhmt5i5ry27LEd5Gf0K/IUlhoKvDkgz80jj
-----END CERTIFICATE-----