Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB71B6CAB6011F18886BAA5CE1D38B0.roa
File:                     3FB71B6CAB6011F18886BAA5CE1D38B0.roa (raw, json)
Hash identifier:          PsrlYCIQSlt1Ec/2MRrE8zgk+qwF9V5pTmKXzRArbH4=
Subject key identifier:   A1:A5:60:F5:F4:FB:44:B9:28:96:07:04:13:CC:29:C5:35:CF:CE:DD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E654
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB71B6CAB6011F18886BAA5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:35:30 +0000
ROA not before:           Tue 08 Sep 2026 08:35:26 +0000
ROA not after:            Tue 13 Oct 2026 08:35:26 +0000
asID:                     10753
IP address blocks:        154.203.0.0/23 maxlen: 24
                          154.203.204.0/23 maxlen: 24
                          154.203.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124500 (0x1e654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 08:35:26 2026 GMT
            Not After : Oct 13 08:35:26 2026 GMT
        Subject: CN=6a9fc8d2-7371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:e6:0b:93:70:cf:85:15:75:e6:ea:33:6f:
                    ef:6d:98:75:6f:44:16:80:36:de:5c:dc:79:72:74:
                    2e:08:96:62:60:73:cb:9d:7a:11:ef:68:5e:ba:8a:
                    9c:51:ea:5b:5f:d8:28:89:ce:eb:7e:99:34:48:0b:
                    e1:7f:52:8b:49:8c:2d:51:7a:e2:ac:aa:2f:34:6e:
                    fb:61:ab:02:2b:d6:da:21:89:35:e2:0c:b9:16:88:
                    fe:9e:03:47:e8:01:62:35:09:74:64:14:88:f8:06:
                    70:6c:95:2f:ee:0e:b6:7e:b0:e7:ff:ae:54:13:1a:
                    7f:f2:69:10:fa:79:2b:80:21:0b:d5:32:02:d4:ea:
                    08:7c:e7:48:e9:b1:91:ac:d3:3b:a0:11:5f:95:12:
                    f7:a6:23:9d:14:bf:71:95:a0:0a:06:b3:0c:fb:d8:
                    96:11:74:f0:03:3c:80:2a:9a:fb:91:56:69:e3:80:
                    dd:2d:7b:09:f6:e6:94:67:3e:e6:34:c0:de:66:30:
                    d8:b4:1e:ea:7d:e4:77:82:c5:4b:c3:11:14:cd:86:
                    88:87:56:e9:9a:53:b1:80:94:16:a9:a2:e9:39:02:
                    c7:95:04:83:c8:b0:d6:62:74:99:52:72:9d:cc:90:
                    a7:a5:45:76:ec:87:7c:84:56:fc:56:61:31:2a:e4:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:60:F5:F4:FB:44:B9:28:96:07:04:13:CC:29:C5:35:CF:CE:DD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB71B6CAB6011F18886BAA5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.0.0/23
                  154.203.204.0/23
                  154.203.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:fc:a2:1f:b4:e1:09:bd:78:2d:1a:2f:e7:1d:3b:4f:9a:
         7e:f2:2d:9a:9b:b1:25:bb:2d:d0:a2:6e:a6:d9:65:86:fd:41:
         f5:52:eb:0c:2a:64:40:b7:3c:53:ba:f4:ec:18:22:6c:e8:f1:
         a5:27:af:0e:f6:b7:41:6b:46:fa:16:1d:c7:47:49:15:d0:bc:
         f8:e4:64:5d:04:c5:55:9b:96:ac:21:61:da:ed:85:f0:aa:8d:
         94:2f:d6:aa:09:0a:32:ae:97:74:34:c9:ff:b5:07:17:57:92:
         7a:fa:2e:d2:e2:c9:ad:2f:7d:98:12:a3:1d:b5:d9:ae:84:f5:
         36:1e:24:dd:3b:e1:16:1e:85:e6:b4:44:f3:a8:81:f4:5a:d2:
         41:0a:1a:85:a9:29:3a:19:b0:de:14:a5:c0:33:4d:72:c2:d3:
         7f:6d:1d:5a:7d:c2:33:c1:62:7d:01:b6:77:1f:96:f9:78:f0:
         5e:d4:f7:13:9b:75:02:aa:28:33:a0:f4:88:39:85:6e:d1:d5:
         b6:de:86:34:5b:46:09:99:10:dc:c3:df:bc:d1:fa:29:18:e1:
         3a:dd:c3:03:2f:aa:7c:d2:b7:52:69:d8:c4:7a:56:53:3f:61:
         7b:99:fc:72:62:14:00:80:7e:91:d1:63:4a:93:69:66:0f:8f:
         63:8f:4d:2c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAeZUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MDgzNTI2WhcNMjYxMDEzMDgzNTI2WjAYMRYw
FAYDVQQDEw02YTlmYzhkMi03MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm0LmC5Nwz4UVdebqM2/vbZh1b0QWgDbeXNx5cnQuCJZiYHPLnXoR72he
uoqcUepbX9goic7rfpk0SAvhf1KLSYwtUXrirKovNG77YasCK9baIYk14gy5Foj+
ngNH6AFiNQl0ZBSI+AZwbJUv7g62frDn/65UExp/8mkQ+nkrgCEL1TIC1OoIfOdI
6bGRrNM7oBFflRL3piOdFL9xlaAKBrMM+9iWEXTwAzyAKpr7kVZp44DdLXsJ9uaU
Zz7mNMDeZjDYtB7qfeR3gsVLwxEUzYaIh1bpmlOxgJQWqaLpOQLHlQSDyLDWYnSZ
UnKdzJCnpUV27Id8hFb8VmExKuSUiwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKGl
YPX0+0S5KJYHBBPMKcU1z87dMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRkI3MUI2Q0FCNjAxMUYxODg4NkJBQTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmssAAwQBmsvMAwQBmsv0
MA0GCSqGSIb3DQEBCwUAA4IBAQCL0/yiH7ThCb14LRov5x07T5p+8i2am7Eluy3Q
om6m2WWG/UH1UusMKmRAtzxTuvTsGCJs6PGlJ68O9rdBa0b6Fh3HR0kV0Lz45GRd
BMVVm5asIWHa7YXwqo2UL9aqCQoyrpd0NMn/tQcXV5J6+i7S4smtL32YEqMdtdmu
hPU2HiTdO+EWHoXmtETzqIH0WtJBChqFqSk6GbDeFKXAM01ywtN/bR1afcIzwWJ9
AbZ3H5b5ePBe1PcTm3UCqigzoPSIOYVu0dW23oY0W0YJmRDcw9+80fopGOE63cMD
L6p80rdSadjEelZTP2F7mfxyYhQAgH6R0WNKk2lmD49jj00s
-----END CERTIFICATE-----