Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BB1FECCACA11F1AF8121A4CE1D38B0.roa
File:                     50BB1FECCACA11F1AF8121A4CE1D38B0.roa (raw, json)
Hash identifier:          GnvhsA6eZ+9BkKNdmS5fVtwkeooZ38Jb7vvbNCWgFUo=
Subject key identifier:   FD:0E:55:51:22:81:88:1D:E1:C5:CB:12:DE:07:DC:1F:3F:2E:28:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BB1FECCACA11F1AF8121A4CE1D38B0.roa
Signing time:             Sun 18 Oct 2026 08:02:52 +0000
ROA not before:           Sun 18 Oct 2026 08:02:47 +0000
ROA not after:            Tue 27 Oct 2026 08:02:47 +0000
asID:                     17497
IP address blocks:        154.81.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126650 (0x1eeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 18 08:02:47 2026 GMT
            Not After : Oct 27 08:02:47 2026 GMT
        Subject: CN=6ad47d2b-304c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:46:64:bc:d1:57:52:c1:6f:0e:45:e6:17:
                    90:6b:5a:bd:b1:51:ee:8a:a8:7d:d1:8a:bf:d1:0f:
                    f1:5e:9b:2f:e5:7e:e0:fd:85:26:a4:7d:51:dd:d2:
                    97:d7:a9:41:d1:62:e8:65:cc:f8:10:47:e4:64:55:
                    a2:ad:19:fd:3a:b8:0b:30:78:ce:57:31:66:4d:50:
                    56:2b:0b:eb:70:2e:4e:88:05:8c:3a:d6:f1:fc:e4:
                    7b:11:48:a1:d7:8b:a9:73:b8:05:99:ef:3e:0d:5b:
                    53:83:56:8e:63:8c:8d:a3:09:2c:19:ee:d8:82:71:
                    ef:a6:06:54:e1:54:0d:61:5a:51:81:d0:5b:4f:ac:
                    c8:13:2f:a3:c7:f7:cc:aa:12:0f:83:bd:b9:ce:e3:
                    c6:43:4d:bb:2c:34:93:0f:5f:de:2a:3f:3e:b5:27:
                    25:e4:97:7d:e4:72:47:72:87:88:4b:35:b2:2f:aa:
                    7f:cf:bd:78:62:49:c4:2f:0f:cd:ef:e7:45:8e:aa:
                    12:30:01:0a:37:b6:db:e1:0d:27:32:21:7b:ef:e6:
                    94:42:b7:11:0f:ea:a9:fd:34:e8:92:25:6f:27:80:
                    39:e4:0f:d7:59:9b:f2:31:11:b2:9a:b8:19:df:a9:
                    74:78:4a:0d:b0:4d:8c:f3:92:4c:6d:7e:84:df:40:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:55:51:22:81:88:1D:E1:C5:CB:12:DE:07:DC:1F:3F:2E:28:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BB1FECCACA11F1AF8121A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:c4:13:74:9a:cd:46:f7:eb:dd:d4:e5:5e:44:e2:24:35:
         fd:79:90:a5:a5:55:c3:bf:5b:86:79:4a:91:27:07:d2:bb:e5:
         19:17:d0:1a:72:4a:99:aa:b7:5d:51:b3:36:8b:9b:ad:d1:82:
         79:4f:e9:78:e9:9e:d6:59:6b:e2:02:8a:f6:11:5b:e6:bf:d8:
         21:8c:09:bb:17:bd:7c:04:43:c8:eb:7b:68:74:a9:1c:6e:74:
         b0:00:39:e5:10:28:ed:9b:30:a9:10:4b:82:08:52:48:e7:7d:
         44:ae:86:6c:e6:ba:79:2b:1c:90:7e:d3:d3:56:74:9f:cd:5c:
         f1:73:0e:05:23:20:be:8e:e6:51:eb:e2:d1:da:ee:43:37:07:
         f3:e6:68:a4:aa:02:b2:52:ae:7c:3e:67:7f:67:dc:17:59:13:
         b2:9d:58:2b:76:0f:1a:ea:fa:ad:17:04:0a:4d:d7:bd:65:44:
         cd:05:22:66:14:06:8c:6a:63:bf:7e:62:ea:ba:8b:eb:a6:b6:
         99:cd:6e:cd:6c:07:0a:10:c0:40:30:55:87:60:b5:bd:06:80:
         b1:a3:a7:ec:64:62:c7:aa:d2:5f:95:b6:2f:77:a2:40:50:1c:
         eb:94:d5:c0:02:78:dd:e1:3b:cb:89:bf:c2:b6:94:1f:4f:d2:
         7d:95:06:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe66MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE4MDgwMjQ3WhcNMjYxMDI3MDgwMjQ3WjAYMRYw
FAYDVQQDEw02YWQ0N2QyYi0zMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9lGZLzRV1LBbw5F5heQa1q9sVHuiqh90Yq/0Q/xXpsv5X7g/YUmpH1R
3dKX16lB0WLoZcz4EEfkZFWirRn9OrgLMHjOVzFmTVBWKwvrcC5OiAWMOtbx/OR7
EUih14upc7gFme8+DVtTg1aOY4yNowksGe7YgnHvpgZU4VQNYVpRgdBbT6zIEy+j
x/fMqhIPg725zuPGQ027LDSTD1/eKj8+tScl5Jd95HJHcoeISzWyL6p/z714YknE
Lw/N7+dFjqoSMAEKN7bb4Q0nMiF77+aUQrcRD+qp/TTokiVvJ4A55A/XWZvyMRGy
mrgZ36l0eEoNsE2M85JMbX6E30ActwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP0O
VVEigYgd4cXLEt4H3B8/LihoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MEJCMUZFQ0NBQ0ExMUYxQUY4MTIxQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGfMA0GCSqGSIb3DQEB
CwUAA4IBAQBLr8QTdJrNRvfr3dTlXkTiJDX9eZClpVXDv1uGeUqRJwfSu+UZF9Aa
ckqZqrddUbM2i5ut0YJ5T+l46Z7WWWviAor2EVvmv9ghjAm7F718BEPI63todKkc
bnSwADnlECjtmzCpEEuCCFJI531EroZs5rp5KxyQftPTVnSfzVzxcw4FIyC+juZR
6+LR2u5DNwfz5mikqgKyUq58Pmd/Z9wXWROynVgrdg8a6vqtFwQKTde9ZUTNBSJm
FAaMamO/fmLquovrpraZzW7NbAcKEMBAMFWHYLW9BoCxo6fsZGLHqtJflbYvd6JA
UBzrlNXAAnjd4TvLib/CtpQfT9J9lQaY
-----END CERTIFICATE-----