Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0669A7D4A9C711F1AC6B12FACE1D38B0.roa
File:                     0669A7D4A9C711F1AC6B12FACE1D38B0.roa (raw, json)
Hash identifier:          FRg+B2AXwa8Wx8RdJXuL97JmyIhcU3WeCbMFevDDlII=
Subject key identifier:   BB:52:63:62:BA:9F:43:A1:9F:5B:A7:66:0A:27:7A:9E:04:0E:B6:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0669A7D4A9C711F1AC6B12FACE1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:46:10 +0000
ROA not before:           Sun 06 Sep 2026 07:46:06 +0000
ROA not after:            Wed 07 Oct 2026 07:46:06 +0000
asID:                     137535
IP address blocks:        154.86.16.0/23 maxlen: 24
                          154.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124371 (0x1e5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:46:06 2026 GMT
            Not After : Oct  7 07:46:06 2026 GMT
        Subject: CN=6a9d1a42-0b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:18:a9:b4:0d:ac:01:fc:35:91:c9:9e:65:
                    31:bc:e3:74:cc:41:01:e6:a3:71:8b:6a:36:fb:db:
                    00:ae:bb:9d:5f:29:d0:f5:38:84:8d:6f:83:72:6a:
                    ab:2e:52:ea:a8:82:02:70:84:1b:34:6b:bd:7a:cf:
                    6b:48:9f:d0:ba:22:41:81:40:b3:2e:95:a4:05:ae:
                    12:f7:b8:51:ea:50:2f:10:38:21:48:bc:c4:f3:0a:
                    be:41:88:ed:68:f4:7b:5d:8c:70:96:26:ac:35:70:
                    ae:c2:32:65:61:d4:e0:6b:e7:45:40:60:a8:7d:02:
                    88:0c:b2:6b:97:bf:f3:ef:c7:a1:80:60:a7:f6:f2:
                    70:8e:13:5f:36:4c:c9:61:d6:e1:c9:d3:ff:98:be:
                    be:dc:7e:59:6e:9a:65:18:b1:e6:37:3c:5b:2e:8f:
                    2e:57:f0:f8:30:de:bb:c6:cf:ec:d2:63:2d:dc:3b:
                    03:e7:b3:99:e4:21:21:96:9d:21:a7:b4:5a:4d:f4:
                    da:23:41:38:42:e8:62:f6:ec:0d:26:c8:13:52:b5:
                    8c:1e:a5:64:1e:51:19:0d:45:16:71:b5:89:69:4a:
                    ed:44:51:b5:f6:a1:27:c7:07:b3:fe:d5:18:fe:4f:
                    72:48:8a:9a:f2:d1:02:c2:1e:f8:18:68:4a:64:c0:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:63:62:BA:9F:43:A1:9F:5B:A7:66:0A:27:7A:9E:04:0E:B6:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0669A7D4A9C711F1AC6B12FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:01:dc:a6:d8:e0:58:e0:8b:6e:21:44:2a:1e:b4:ac:f3:f4:
         1f:da:de:ff:b4:a0:09:1c:4f:28:53:1e:d0:8c:28:a9:4e:3e:
         04:b9:55:5c:25:cd:dc:fe:66:3f:f0:a7:01:18:8e:c2:d6:56:
         1d:b5:a6:c8:05:5c:fa:5d:12:72:dd:a2:54:47:f9:29:a5:38:
         2d:f8:29:17:49:e7:e7:65:2d:4a:c2:b3:ac:d0:e4:62:7a:9a:
         81:1e:9b:5e:f0:17:f5:07:65:08:4f:6c:72:58:46:13:d8:54:
         83:76:e0:5f:fa:f4:20:a0:7a:6e:e7:df:b5:d9:3b:cc:9d:5d:
         ed:f0:63:40:40:0f:93:f4:9f:e3:5c:76:43:4f:49:a4:54:27:
         a2:88:54:96:b7:28:7b:66:11:7d:2a:82:3e:4e:20:ce:f6:e2:
         13:17:09:bd:f1:6b:13:a9:78:af:97:32:74:db:60:73:df:fa:
         5f:ad:32:ac:25:eb:5c:29:a1:d9:9d:43:2f:eb:b4:35:e7:fb:
         9f:ca:d8:f6:e5:c5:bb:9b:50:d0:f9:71:92:d0:51:6b:8f:3e:
         ed:f9:d2:6c:77:25:61:e8:a4:1b:ce:3b:82:26:7f:8f:ac:fe:
         8f:af:9b:f3:fb:b7:b0:25:f3:34:15:40:93:39:eb:bd:0d:6c:
         d1:26:c0:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeXTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA2MDc0NjA2WhcNMjYxMDA3MDc0NjA2WjAYMRYw
FAYDVQQDEw02YTlkMWE0Mi0wYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnfIYqbQNrAH8NZHJnmUxvON0zEEB5qNxi2o2+9sArrudXynQ9TiEjW+D
cmqrLlLqqIICcIQbNGu9es9rSJ/QuiJBgUCzLpWkBa4S97hR6lAvEDghSLzE8wq+
QYjtaPR7XYxwliasNXCuwjJlYdTga+dFQGCofQKIDLJrl7/z78ehgGCn9vJwjhNf
NkzJYdbhydP/mL6+3H5ZbpplGLHmNzxbLo8uV/D4MN67xs/s0mMt3DsD57OZ5CEh
lp0hp7RaTfTaI0E4Quhi9uwNJsgTUrWMHqVkHlEZDUUWcbWJaUrtRFG19qEnxwez
/tUY/k9ySIqa8tECwh74GGhKZMD1twIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLtS
Y2K6n0Ohn1unZgonep4EDrYzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjY5QTdENEE5QzcxMUYxQUM2QjEyRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQCBAdym2OBY4ItuIUQqHrSs8/Qf2t7/tKAJHE8oUx7QjCipTj4EuVVc
Jc3c/mY/8KcBGI7C1lYdtabIBVz6XRJy3aJUR/kppTgt+CkXSefnZS1KwrOs0ORi
epqBHpte8Bf1B2UIT2xyWEYT2FSDduBf+vQgoHpu59+12TvMnV3t8GNAQA+T9J/j
XHZDT0mkVCeiiFSWtyh7ZhF9KoI+TiDO9uITFwm98WsTqXivlzJ022Bz3/pfrTKs
JetcKaHZnUMv67Q15/ufytj25cW7m1DQ+XGS0FFrjz7t+dJsdyVh6KQbzjuCJn+P
rP6Pr5vz+7ewJfM0FUCTOeu9DWzRJsDD
-----END CERTIFICATE-----