Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A1A0BD4B5B911F182D95314CF1D38B0.roa
File:                     3A1A0BD4B5B911F182D95314CF1D38B0.roa (raw, json)
Hash identifier:          R3BgaQ0+HVA4TdC9WQulVbCwzedyy0hJ0RCZNCACA1M=
Subject key identifier:   65:7F:FC:84:DD:4D:93:43:06:F3:F7:FB:91:F1:F4:DA:DA:F9:EB:FF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A1A0BD4B5B911F182D95314CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 12:37:38 +0000
ROA not before:           Mon 21 Sep 2026 12:37:33 +0000
ROA not after:            Thu 20 Sep 2029 12:37:33 +0000
asID:                     17561
IP address blocks:        154.193.112.0/24 maxlen: 24
                          154.193.113.0/24 maxlen: 24
                          154.193.114.0/24 maxlen: 24
                          154.193.115.0/24 maxlen: 24
                          154.193.116.0/24 maxlen: 24
                          154.193.117.0/24 maxlen: 24
                          154.193.118.0/24 maxlen: 24
                          154.193.119.0/24 maxlen: 24
                          154.193.120.0/24 maxlen: 24
                          154.193.121.0/24 maxlen: 24
                          154.193.122.0/24 maxlen: 24
                          154.193.123.0/24 maxlen: 24
                          154.193.124.0/24 maxlen: 24
                          154.193.125.0/24 maxlen: 24
                          154.193.126.0/24 maxlen: 24
                          154.193.127.0/24 maxlen: 24
                          154.199.80.0/24 maxlen: 24
                          154.199.81.0/24 maxlen: 24
                          154.199.82.0/24 maxlen: 24
                          154.222.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125386 (0x1e9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 12:37:33 2026 GMT
            Not After : Sep 20 12:37:33 2029 GMT
        Subject: CN=6ab12512-719a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:d3:36:87:52:14:63:d2:68:19:71:ff:f4:
                    ab:ff:72:df:b9:8f:00:33:36:d9:30:70:aa:c0:ff:
                    ec:66:21:51:5e:8f:fb:d8:84:7d:18:a2:97:f8:f7:
                    74:6e:29:9c:c3:4f:74:41:7b:71:29:ac:70:67:fe:
                    c6:96:c9:d1:56:21:42:24:6c:7c:29:0c:b7:2d:56:
                    86:ac:f3:d7:b8:2a:68:3c:d5:29:50:79:7a:0b:24:
                    50:80:fc:7d:ca:9d:e0:a1:df:7c:6f:38:4c:d6:ef:
                    06:22:34:a5:0b:ca:46:fd:d4:bc:c4:fc:c1:b1:bd:
                    6a:ab:40:0e:b3:b4:e6:80:00:73:b0:66:56:c5:dc:
                    a8:2a:e1:ca:6d:4b:b0:df:8f:83:47:0c:0b:7c:1c:
                    c3:98:e0:8d:fa:49:94:ef:05:77:26:e7:7b:12:2c:
                    bf:d2:c3:39:7f:dd:4d:51:fa:60:8f:bc:e9:dc:4e:
                    21:40:45:d0:d8:e1:ff:92:a1:2e:82:a7:58:de:0e:
                    6a:1a:29:40:0a:ab:bf:ab:66:c4:52:69:85:7e:68:
                    b7:19:d3:55:36:12:08:5f:86:88:15:e6:13:f6:36:
                    66:d4:2e:19:80:55:84:79:e4:99:18:54:bc:34:66:
                    37:82:75:41:e8:b3:76:ec:57:39:fe:e3:26:8a:a3:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7F:FC:84:DD:4D:93:43:06:F3:F7:FB:91:F1:F4:DA:DA:F9:EB:FF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A1A0BD4B5B911F182D95314CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.112.0/20
                  154.199.80.0-154.199.82.255
                  154.222.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:5b:b7:d2:39:67:3c:2f:14:2a:19:24:da:83:69:5a:73:
         2a:f8:47:49:cc:f0:94:54:fe:3c:52:8e:68:57:2e:6a:02:d6:
         bd:b9:88:af:ff:db:7b:e9:c9:55:36:a3:75:95:18:51:1d:35:
         1a:ea:15:7d:30:96:63:9c:28:9d:fe:2a:dd:cf:93:f3:f1:a7:
         78:a9:f5:a3:2c:03:4b:84:fc:6c:6d:92:12:2b:35:4d:05:44:
         7e:50:2c:a1:d0:88:0d:92:a8:09:7f:6b:df:4d:1f:dc:fd:6a:
         04:36:e5:fc:21:53:6d:c4:42:f5:d1:08:1a:dd:77:65:90:e0:
         d8:bf:b7:e5:98:58:59:2f:4f:bf:eb:63:c4:d0:49:3e:95:e0:
         68:70:2e:c3:e7:70:71:e2:7a:d7:e6:2e:b5:d1:21:18:12:c4:
         9d:7f:9b:2d:d7:4a:11:72:01:8a:fd:9d:63:5d:89:00:59:73:
         8b:5b:dd:df:40:50:01:6c:32:0b:81:f2:a0:6a:3b:79:24:07:
         f7:d4:27:b4:8a:5b:cf:31:74:42:e3:0c:9c:00:23:7d:a2:7c:
         b6:2e:fb:0c:b5:ce:36:34:6c:54:17:a3:42:19:9d:3d:a2:44:
         3f:66:c9:38:73:21:f2:dc:74:a7:f6:5c:2a:b1:ca:29:b7:6d:
         37:06:1e:15
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAenKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIxMTIzNzMzWhcNMjkwOTIwMTIzNzMzWjAYMRYw
FAYDVQQDEw02YWIxMjUxMi03MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv5rTNodSFGPSaBlx//Sr/3LfuY8AMzbZMHCqwP/sZiFRXo/72IR9GKKX
+Pd0bimcw090QXtxKaxwZ/7GlsnRViFCJGx8KQy3LVaGrPPXuCpoPNUpUHl6CyRQ
gPx9yp3god98bzhM1u8GIjSlC8pG/dS8xPzBsb1qq0AOs7TmgABzsGZWxdyoKuHK
bUuw34+DRwwLfBzDmOCN+kmU7wV3Jud7Eiy/0sM5f91NUfpgj7zp3E4hQEXQ2OH/
kqEugqdY3g5qGilACqu/q2bEUmmFfmi3GdNVNhIIX4aIFeYT9jZm1C4ZgFWEeeSZ
GFS8NGY3gnVB6LN27Fc5/uMmiqPaWwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGV/
/ITdTZNDBvP3+5Hx9Nra+ev/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTFBMEJENEI1QjkxMUYxODJEOTUzMTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEmsFwMAwDBASax1ADBACa
x1IDBACa3m0wDQYJKoZIhvcNAQELBQADggEBAB6gW7fSOWc8LxQqGSTag2lacyr4
R0nM8JRU/jxSjmhXLmoC1r25iK//23vpyVU2o3WVGFEdNRrqFX0wlmOcKJ3+Kt3P
k/Pxp3ip9aMsA0uE/GxtkhIrNU0FRH5QLKHQiA2SqAl/a99NH9z9agQ25fwhU23E
QvXRCBrdd2WQ4Ni/t+WYWFkvT7/rY8TQST6V4GhwLsPncHHietfmLrXRIRgSxJ1/
my3XShFyAYr9nWNdiQBZc4tb3d9AUAFsMguB8qBqO3kkB/fUJ7SKW88xdELjDJwA
I32ifLYu+wy1zjY0bFQXo0IZnT2iRD9myThzIfLcdKf2XCqxyim3bTcGHhU=
-----END CERTIFICATE-----