Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FAA2AAB62811F1914737DCCE1D38B0.roa
File:                     59FAA2AAB62811F1914737DCCE1D38B0.roa (raw, json)
Hash identifier:          ahRbzKKP/NbGDIHLrwzMTsYxyu112mH1hstI5OKByNk=
Subject key identifier:   77:1E:36:32:89:DB:2F:62:84:CA:E4:9A:02:7F:9A:7E:EC:D5:E7:2D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FAA2AAB62811F1914737DCCE1D38B0.roa
Signing time:             Tue 22 Sep 2026 01:53:05 +0000
ROA not before:           Tue 22 Sep 2026 01:52:59 +0000
ROA not after:            Wed 30 Sep 2026 01:52:59 +0000
asID:                     4760
IP address blocks:        154.81.80.0/20 maxlen: 24
                          154.88.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125395 (0x1e9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 01:52:59 2026 GMT
            Not After : Sep 30 01:52:59 2026 GMT
        Subject: CN=6ab1df81-00f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:3c:72:c0:90:31:c7:26:58:01:8c:d7:4a:
                    f1:66:52:cf:6b:fa:d8:b8:8c:e2:14:ea:9e:42:41:
                    2f:cb:5e:90:c3:01:66:5b:78:4d:15:29:55:d1:63:
                    00:b8:51:5b:87:b7:d5:64:ad:e6:6c:54:8e:f5:74:
                    cc:ec:28:0f:59:a9:8c:c5:73:14:4c:cf:4a:1f:13:
                    66:ae:e5:c1:21:72:ef:7d:25:e5:0a:d2:eb:bc:19:
                    27:a7:09:1e:dd:7d:18:b6:41:1a:ad:f1:dd:67:27:
                    dc:3a:b5:94:79:17:4b:d6:dc:3a:70:2e:8e:07:b9:
                    78:d2:97:e3:a7:d2:81:04:31:ab:5a:70:af:ac:b7:
                    52:f6:92:7a:d0:0e:61:74:85:5c:aa:4a:c1:11:11:
                    36:d8:cc:eb:7d:1e:5d:45:22:cd:c5:f0:22:eb:88:
                    35:ef:f9:c4:25:9b:c6:92:bd:b6:39:44:d4:64:8b:
                    5f:4c:bf:4b:71:ea:be:da:ac:49:c4:7d:6c:3a:71:
                    d4:e2:2e:05:3c:b0:ab:da:0f:f6:30:c3:7f:09:97:
                    4a:9d:4f:2f:8c:1a:80:ac:f8:b9:96:bf:f5:e5:2d:
                    0c:19:3c:11:cc:1c:21:3b:77:77:24:4d:0b:d3:fd:
                    ad:7e:4d:30:f3:a1:79:6b:69:a5:ce:af:69:26:c1:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:36:32:89:DB:2F:62:84:CA:E4:9A:02:7F:9A:7E:EC:D5:E7:2D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FAA2AAB62811F1914737DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.80.0/20
                  154.88.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:73:e2:48:28:06:d4:24:18:79:8d:6c:c0:4e:63:95:d8:
         14:48:6e:e3:3e:a9:38:b6:cf:2d:2c:ff:b8:2f:f2:1a:23:2f:
         2c:c6:73:83:f1:25:c9:b9:e4:00:d2:d6:92:ec:77:35:5b:ae:
         ae:3f:93:e3:1d:19:a0:aa:6d:3a:5b:09:22:d0:05:55:cc:8d:
         b6:85:be:28:f7:db:46:64:55:d2:b6:e1:b7:18:aa:cc:b3:a9:
         6d:0b:22:a9:05:f6:aa:40:f8:58:25:fe:b5:a9:04:48:e8:02:
         dc:f6:bf:f0:d3:f2:86:51:6c:a8:a6:46:e0:06:74:78:fa:41:
         c3:01:c6:5f:0c:e7:15:b3:ca:78:8b:b0:e0:ce:37:10:05:f5:
         1e:c3:2c:af:83:6f:fb:d1:c0:4d:bb:a2:18:c3:af:ac:0a:98:
         2b:74:58:31:9b:37:6d:14:fd:d1:7c:57:cb:da:bf:b8:15:46:
         b8:00:21:e7:d9:f0:ce:c7:7c:92:e5:d3:1e:07:26:91:37:9d:
         d0:8d:3c:9e:d6:1c:1d:b0:0e:dc:ed:11:34:d5:74:b0:af:a0:
         0e:04:16:60:a9:67:02:e5:91:a2:7b:ed:87:6a:4e:31:3d:1e:
         58:5a:bc:30:34:9c:58:05:c9:d9:fa:b3:8b:8b:d3:39:b1:d3:
         87:0b:99:8d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAenTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIyMDE1MjU5WhcNMjYwOTMwMDE1MjU5WjAYMRYw
FAYDVQQDEw02YWIxZGY4MS0wMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp0w8csCQMccmWAGM10rxZlLPa/rYuIziFOqeQkEvy16QwwFmW3hNFSlV
0WMAuFFbh7fVZK3mbFSO9XTM7CgPWamMxXMUTM9KHxNmruXBIXLvfSXlCtLrvBkn
pwke3X0YtkEarfHdZyfcOrWUeRdL1tw6cC6OB7l40pfjp9KBBDGrWnCvrLdS9pJ6
0A5hdIVcqkrBERE22MzrfR5dRSLNxfAi64g17/nEJZvGkr22OUTUZItfTL9Lceq+
2qxJxH1sOnHU4i4FPLCr2g/2MMN/CZdKnU8vjBqArPi5lr/15S0MGTwRzBwhO3d3
JE0L0/2tfk0w86F5a2mlzq9pJsEdtQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHce
NjKJ2y9ihMrkmgJ/mn7s1ectMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OUZBQTJBQUI2MjgxMUYxOTE0NzM3RENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlFQAwQEmlhQMA0GCSqG
SIb3DQEBCwUAA4IBAQAY5nPiSCgG1CQYeY1swE5jldgUSG7jPqk4ts8tLP+4L/Ia
Iy8sxnOD8SXJueQA0taS7Hc1W66uP5PjHRmgqm06Wwki0AVVzI22hb4o99tGZFXS
tuG3GKrMs6ltCyKpBfaqQPhYJf61qQRI6ALc9r/w0/KGUWyopkbgBnR4+kHDAcZf
DOcVs8p4i7DgzjcQBfUewyyvg2/70cBNu6IYw6+sCpgrdFgxmzdtFP3RfFfL2r+4
FUa4ACHn2fDOx3yS5dMeByaRN53QjTye1hwdsA7c7RE01XSwr6AOBBZgqWcC5ZGi
e+2Hak4xPR5YWrwwNJxYBcnZ+rOLi9M5sdOHC5mN
-----END CERTIFICATE-----