Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/252C0AE6B4D911F18A5E3ADFCE1D38B0.roa
File:                     252C0AE6B4D911F18A5E3ADFCE1D38B0.roa (raw, json)
Hash identifier:          mfGfhi5MEXG9j1t/I6g0ABz225TXAn8+Wdl55B79Vio=
Subject key identifier:   B7:48:A2:FD:2D:31:30:7B:D5:32:71:5A:D2:D5:BF:C5:33:6A:25:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E90B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/252C0AE6B4D911F18A5E3ADFCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:53:35 +0000
ROA not before:           Sun 20 Sep 2026 09:53:31 +0000
ROA not after:            Tue 27 Oct 2026 09:53:31 +0000
asID:                     138915
IP address blocks:        154.203.142.0/24 maxlen: 24
                          154.203.164.0/24 maxlen: 24
                          154.203.166.0/24 maxlen: 24
                          154.203.191.0/24 maxlen: 24
                          154.205.139.0/24 maxlen: 24
                          154.205.141.0/24 maxlen: 24
                          154.205.142.0/23 maxlen: 24
                          154.205.144.0/24 maxlen: 24
                          154.205.146.0/24 maxlen: 24
                          154.205.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125195 (0x1e90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:53:31 2026 GMT
            Not After : Oct 27 09:53:31 2026 GMT
        Subject: CN=6aafad1f-2565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:b6:8f:0a:9a:13:fd:ed:78:20:92:85:48:
                    3d:3f:dd:f5:70:ad:25:e8:b9:21:91:b8:36:ef:9f:
                    d8:fe:26:d0:15:49:3d:12:fc:66:21:e2:eb:30:cd:
                    36:68:83:17:8e:2c:40:41:d6:a6:7e:3e:a6:08:d0:
                    cc:e5:6a:d4:5c:73:52:bf:fd:cf:c2:55:d8:73:42:
                    7f:9f:c8:b5:e6:02:ff:d2:b9:91:a1:4a:6b:2a:dd:
                    38:71:49:3a:eb:72:46:38:ef:ce:b7:7a:b6:0a:0a:
                    cc:21:1e:97:40:f9:b4:c0:17:ff:6b:b3:79:fd:fa:
                    9d:da:25:f9:5d:3c:fc:42:17:31:1d:ee:d0:43:ad:
                    d9:a4:31:53:ad:e1:c5:40:22:12:3b:75:0d:33:f9:
                    0b:82:f2:47:02:2e:ee:0d:68:0b:6e:dd:41:44:8d:
                    82:ba:5b:cd:53:e8:ed:47:5e:78:94:83:aa:04:53:
                    22:a2:ee:db:88:d6:b9:53:3c:7f:49:ef:34:6a:ee:
                    56:da:83:ad:ac:8b:84:4e:8b:c6:08:e1:69:61:81:
                    6a:c3:96:5d:0c:29:9c:0f:9e:b7:aa:e0:ce:86:ef:
                    17:63:a9:bf:1e:b9:93:9a:9e:c4:68:23:de:ed:1c:
                    b3:ef:9f:00:d5:e4:05:4c:a2:6c:e9:9e:54:16:63:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:A2:FD:2D:31:30:7B:D5:32:71:5A:D2:D5:BF:C5:33:6A:25:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/252C0AE6B4D911F18A5E3ADFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.142.0/24
                  154.203.164.0/24
                  154.203.166.0/24
                  154.203.191.0/24
                  154.205.139.0/24
                  154.205.141.0-154.205.144.255
                  154.205.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:74:93:51:ca:51:43:cb:7a:17:08:08:88:21:34:01:5d:ff:
         4d:ad:b9:06:88:b9:0b:70:9a:9f:90:50:92:ec:7f:c5:2c:d2:
         40:80:b1:44:18:67:46:f3:37:98:1d:76:5d:e0:24:6d:b4:f7:
         84:aa:8a:b2:57:fb:cb:6d:2a:0b:fc:42:1a:79:14:7c:4d:98:
         f5:6f:37:4b:44:d4:51:45:6f:df:cb:b7:df:c3:b4:0b:16:cb:
         62:13:81:e7:76:67:08:02:ce:2d:de:e1:36:b9:59:a8:60:83:
         47:49:bf:9d:d4:4d:87:71:ba:b9:73:82:43:7a:16:8e:93:17:
         55:09:80:97:22:96:b7:86:17:21:1c:35:b6:56:1a:51:32:31:
         cb:dd:21:06:24:86:87:71:b1:84:93:1a:41:db:8a:44:0f:df:
         94:63:4e:06:f8:24:e5:a4:19:13:e6:6e:fa:9e:71:c5:68:99:
         6c:46:df:9a:42:e9:70:ed:cf:68:2e:e6:0f:b0:d6:9d:cf:b7:
         c8:fc:58:92:70:75:42:63:c6:5c:eb:06:3d:28:a1:ea:cc:6a:
         cc:3a:ed:f5:4a:07:9c:da:9d:6d:51:ed:52:93:98:70:ba:ca:
         d6:d1:a6:40:e4:c6:ee:ad:b3:9d:5c:c7:b9:0e:99:03:e3:08:
         f2:7c:d1:f8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAekLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIwMDk1MzMxWhcNMjYxMDI3MDk1MzMxWjAYMRYw
FAYDVQQDEw02YWFmYWQxZi0yNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyBa2jwqaE/3teCCShUg9P931cK0l6Lkhkbg275/Y/ibQFUk9EvxmIeLr
MM02aIMXjixAQdamfj6mCNDM5WrUXHNSv/3PwlXYc0J/n8i15gL/0rmRoUprKt04
cUk663JGOO/Ot3q2CgrMIR6XQPm0wBf/a7N5/fqd2iX5XTz8QhcxHe7QQ63ZpDFT
reHFQCISO3UNM/kLgvJHAi7uDWgLbt1BRI2CulvNU+jtR154lIOqBFMiou7biNa5
Uzx/Se80au5W2oOtrIuETovGCOFpYYFqw5ZdDCmcD563quDOhu8XY6m/HrmTmp7E
aCPe7Ryz758A1eQFTKJs6Z5UFmPNrwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFLdI
ov0tMTB71TJxWtLVv8UzaiWjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTJDMEFFNkI0RDkxMUYxOEE1RTNBREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAmsuOAwQAmsukAwQAmsum
AwQAmsu/AwQAms2LMAwDBACazY0DBACazZADBAGazZIwDQYJKoZIhvcNAQELBQAD
ggEBAGN0k1HKUUPLehcICIghNAFd/02tuQaIuQtwmp+QUJLsf8Us0kCAsUQYZ0bz
N5gddl3gJG2094SqirJX+8ttKgv8Qhp5FHxNmPVvN0tE1FFFb9/Lt9/DtAsWy2IT
ged2ZwgCzi3e4Ta5Wahgg0dJv53UTYdxurlzgkN6Fo6TF1UJgJcilreGFyEcNbZW
GlEyMcvdIQYkhodxsYSTGkHbikQP35RjTgb4JOWkGRPmbvqeccVomWxG35pC6XDt
z2gu5g+w1p3Pt8j8WJJwdUJjxlzrBj0ooerMasw67fVKB5zanW1R7VKTmHC6ytbR
pkDkxu6ts51cx7kOmQPjCPJ80fg=
-----END CERTIFICATE-----