Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/388EFF24AB7B11F1921414C6CE1D38B0.roa
File:                     388EFF24AB7B11F1921414C6CE1D38B0.roa (raw, json)
Hash identifier:          OZpPC6CMUnAdpZ9OQwRxpDVxJZNQY133u94JPNLNu/E=
Subject key identifier:   D8:38:AE:64:E5:B8:23:C8:5F:EF:E4:E3:83:98:48:6E:E2:4B:E4:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E666
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/388EFF24AB7B11F1921414C6CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 11:48:35 +0000
ROA not before:           Tue 08 Sep 2026 11:48:30 +0000
ROA not after:            Fri 07 Sep 2029 11:48:30 +0000
asID:                     17561
IP address blocks:        154.91.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124518 (0x1e666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 11:48:30 2026 GMT
            Not After : Sep  7 11:48:30 2029 GMT
        Subject: CN=6a9ff612-ff79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:8b:70:97:89:e9:0f:51:a0:ee:42:71:10:
                    f4:1a:53:be:1f:b2:74:59:f0:e6:af:20:e8:49:34:
                    9b:93:22:5f:92:7d:ae:fb:09:21:23:ec:99:bf:88:
                    e8:ee:b6:43:de:15:86:fd:f1:b4:aa:fd:6d:23:aa:
                    87:1d:91:67:99:7c:9f:ef:2a:c0:53:05:7d:73:81:
                    fd:07:30:f3:d0:a9:14:b3:cc:58:b3:e6:b0:43:a0:
                    bc:4b:1c:67:27:9a:8b:2a:e3:d5:50:94:29:cd:a5:
                    a2:dd:37:87:3b:99:e6:da:b5:06:40:f7:3d:d0:68:
                    47:79:c1:00:c6:ad:f5:29:e1:e2:a4:df:85:99:fb:
                    17:83:da:51:6b:8a:93:e0:bd:0b:4b:3e:91:16:bc:
                    93:a0:1d:29:77:59:70:e8:ec:8e:ce:a7:2b:92:ee:
                    02:88:e8:8d:ed:61:3c:46:fb:0c:82:f6:8b:1e:7c:
                    42:25:c8:d4:e1:ea:81:76:31:43:65:79:e1:b6:10:
                    80:df:e3:99:be:83:48:89:f1:4c:46:11:9b:33:a6:
                    82:4b:9c:3e:b2:e2:07:c9:ac:5e:bc:f9:6c:59:f5:
                    ba:98:14:c4:db:0f:41:44:13:4d:68:a2:31:32:18:
                    0b:5d:fb:98:57:32:e2:d7:5b:44:81:d6:c5:98:b0:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:38:AE:64:E5:B8:23:C8:5F:EF:E4:E3:83:98:48:6E:E2:4B:E4:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/388EFF24AB7B11F1921414C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:18:46:ed:c1:cd:94:0b:d5:16:6f:9b:96:a3:2e:81:48:
         96:eb:5e:62:05:30:5c:62:09:1c:70:4c:20:73:c8:b0:25:20:
         ef:ec:4d:b7:2b:5d:b3:b6:72:f0:92:a0:6c:65:4a:2e:57:90:
         25:e3:75:86:fa:d7:f9:89:69:8b:8a:b7:04:cf:60:c2:35:1a:
         40:b5:9c:aa:cd:c4:0c:8c:e2:5b:d7:c6:15:38:d5:9a:7f:16:
         54:1e:d5:7e:35:ce:b8:fe:11:44:c7:ff:8c:74:e9:df:f0:fe:
         89:6d:03:53:63:d1:3a:89:a7:e7:80:9a:d3:23:a9:80:75:be:
         7f:b4:d2:0f:92:dc:e8:e1:9d:8c:42:32:f9:3a:ea:08:21:af:
         45:40:15:ab:65:1e:4a:62:a2:32:65:fe:b4:ff:b5:42:33:41:
         ac:fb:9a:74:80:f2:36:cd:98:88:d7:29:ab:05:86:36:18:40:
         a7:41:46:82:6b:e2:a9:55:68:8a:7f:72:bb:3f:20:29:11:65:
         e1:b4:2a:d4:50:7d:f7:62:08:2a:93:60:46:4c:e3:de:1c:e0:
         04:69:8b:d4:38:25:e4:e9:cf:ea:b0:84:c1:65:2d:ee:e2:7b:
         e1:83:31:b8:44:81:2e:98:7e:65:f9:a2:02:13:d2:c1:85:d2:
         0f:2d:fc:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeZmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MTE0ODMwWhcNMjkwOTA3MTE0ODMwWjAYMRYw
FAYDVQQDEw02YTlmZjYxMi1mZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqLaLcJeJ6Q9RoO5CcRD0GlO+H7J0WfDmryDoSTSbkyJfkn2u+wkhI+yZ
v4jo7rZD3hWG/fG0qv1tI6qHHZFnmXyf7yrAUwV9c4H9BzDz0KkUs8xYs+awQ6C8
SxxnJ5qLKuPVUJQpzaWi3TeHO5nm2rUGQPc90GhHecEAxq31KeHipN+FmfsXg9pR
a4qT4L0LSz6RFryToB0pd1lw6OyOzqcrku4CiOiN7WE8RvsMgvaLHnxCJcjU4eqB
djFDZXnhthCA3+OZvoNIifFMRhGbM6aCS5w+suIHyaxevPlsWfW6mBTE2w9BRBNN
aKIxMhgLXfuYVzLi11tEgdbFmLCy/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNg4
rmTluCPIX+/k44OYSG7iS+SBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODhFRkYyNEFCN0IxMUYxOTIxNDE0QzZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmluqMA0GCSqGSIb3DQEB
CwUAA4IBAQALuhhG7cHNlAvVFm+blqMugUiW615iBTBcYgkccEwgc8iwJSDv7E23
K12ztnLwkqBsZUouV5Al43WG+tf5iWmLircEz2DCNRpAtZyqzcQMjOJb18YVONWa
fxZUHtV+Nc64/hFEx/+MdOnf8P6JbQNTY9E6iafngJrTI6mAdb5/tNIPktzo4Z2M
QjL5OuoIIa9FQBWrZR5KYqIyZf60/7VCM0Gs+5p0gPI2zZiI1ymrBYY2GECnQUaC
a+KpVWiKf3K7PyApEWXhtCrUUH33Yggqk2BGTOPeHOAEaYvUOCXk6c/qsITBZS3u
4nvhgzG4RIEumH5l+aICE9LBhdIPLfz/
-----END CERTIFICATE-----