Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FB3B96ADB311F19D377ABFCE1D38B0.roa
File:                     65FB3B96ADB311F19D377ABFCE1D38B0.roa (raw, json)
Hash identifier:          V7XLuEFpUlSCTIYzrlshXjLzfGl2ne55e4DsND4ET6A=
Subject key identifier:   39:49:7F:CD:D6:A7:F0:1D:61:B2:04:8E:8A:5C:43:52:DE:E6:DF:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FB3B96ADB311F19D377ABFCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:35:45 +0000
ROA not before:           Fri 11 Sep 2026 07:35:41 +0000
ROA not after:            Sun 18 Oct 2026 07:35:41 +0000
asID:                     22773
IP address blocks:        154.82.224.0/19 maxlen: 24
                          154.85.4.0/22 maxlen: 24
                          154.85.13.0/24 maxlen: 24
                          154.85.121.0/24 maxlen: 24
                          154.85.122.0/24 maxlen: 24
                          154.94.32.0/24 maxlen: 24
                          154.94.36.0/23 maxlen: 24
                          154.94.40.0/24 maxlen: 24
                          154.94.43.0/24 maxlen: 24
                          154.94.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124771 (0x1e763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:35:41 2026 GMT
            Not After : Oct 18 07:35:41 2026 GMT
        Subject: CN=6aa3af51-9a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:c6:df:43:b7:d4:47:8f:04:f3:f7:ee:c3:
                    3f:02:0d:b9:6b:f6:a7:ab:9d:ef:82:87:10:27:58:
                    ea:de:d9:f4:a5:1f:80:9a:5a:7a:95:0a:27:a8:75:
                    a4:01:10:64:19:a9:58:c0:08:5f:b6:78:41:c8:0b:
                    79:26:29:b6:ad:30:a8:18:c1:de:46:2c:ff:ee:3b:
                    f2:c2:4a:9b:7b:68:7d:b0:c9:99:b7:b7:aa:f7:cd:
                    a8:e7:9c:0f:bf:8f:0f:8b:e0:47:c3:df:11:dc:f1:
                    f4:cf:2d:73:60:d1:d4:a7:ad:59:c4:0b:f0:9d:aa:
                    74:91:6c:38:22:34:e8:f3:04:5f:10:10:bb:d1:01:
                    af:93:99:b9:4a:b7:f9:8c:f9:1b:9b:10:16:2d:9d:
                    98:28:c1:6c:30:85:ed:31:53:c9:b4:bf:16:7d:ef:
                    e9:5e:4e:60:ad:a1:cd:fe:39:ee:37:a6:09:1a:37:
                    c9:3d:af:bb:01:37:12:f1:f5:38:3d:4e:22:ef:69:
                    e3:66:68:db:dc:1f:ce:20:47:4e:08:ed:97:b0:6d:
                    f7:3d:67:8c:91:bc:9e:93:36:6a:f2:75:e3:46:dc:
                    af:ee:38:12:76:6d:ce:7e:12:34:d3:e8:51:92:40:
                    fc:b5:2f:0e:53:3b:06:a3:91:a8:2b:ce:3a:9b:12:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:7F:CD:D6:A7:F0:1D:61:B2:04:8E:8A:5C:43:52:DE:E6:DF:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FB3B96ADB311F19D377ABFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.224.0/19
                  154.85.4.0/22
                  154.85.13.0/24
                  154.85.121.0-154.85.122.255
                  154.94.32.0/24
                  154.94.36.0/23
                  154.94.40.0/24
                  154.94.43.0/24
                  154.94.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:be:de:c3:0e:4e:19:ac:98:77:94:6e:82:b6:c3:59:0a:
         33:48:7a:16:8d:f5:9e:3f:0c:4e:1c:1e:f4:1f:5b:bb:82:48:
         54:f2:4a:49:62:a9:9e:a4:41:eb:d0:e4:ee:e9:26:c9:7b:d1:
         7b:4a:b7:9b:09:6a:01:76:b1:ae:0b:05:82:e3:53:9b:4a:d9:
         d6:5a:aa:21:82:9d:68:a6:b6:15:c8:55:16:8b:13:64:35:df:
         ae:8b:23:a8:36:22:67:3e:87:fb:3f:7e:6f:fc:6e:32:0d:71:
         eb:bb:55:0d:43:7e:45:db:fc:59:cf:44:0e:a9:4b:9c:1c:19:
         79:c1:1a:ad:b3:99:a8:c9:0b:44:52:9c:0a:91:35:c3:56:f4:
         2d:77:ea:0d:eb:ed:84:b9:7a:a2:de:48:62:df:61:43:2c:13:
         87:e5:d9:e1:fb:03:8e:c1:f5:c9:52:a3:d3:fd:62:f7:e0:ca:
         00:55:a8:69:b1:dc:ba:9a:ec:59:f2:50:82:19:e7:55:17:15:
         64:0d:35:ae:17:dc:2d:5a:85:97:52:10:3a:f3:86:2b:74:39:
         63:c8:a5:bb:ab:ef:6f:1d:a1:6d:e6:23:db:e0:5b:f5:41:d6:
         56:33:f4:1b:04:70:6d:1d:67:64:6c:c4:78:9d:5f:46:dc:54:
         ad:57:71:12
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAedjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTExMDczNTQxWhcNMjYxMDE4MDczNTQxWjAYMRYw
FAYDVQQDEw02YWEzYWY1MS05YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmATG30O31EePBPP37sM/Ag25a/anq53vgocQJ1jq3tn0pR+Amlp6lQon
qHWkARBkGalYwAhftnhByAt5Jim2rTCoGMHeRiz/7jvywkqbe2h9sMmZt7eq982o
55wPv48Pi+BHw98R3PH0zy1zYNHUp61ZxAvwnap0kWw4IjTo8wRfEBC70QGvk5m5
Srf5jPkbmxAWLZ2YKMFsMIXtMVPJtL8Wfe/pXk5graHN/jnuN6YJGjfJPa+7ATcS
8fU4PU4i72njZmjb3B/OIEdOCO2XsG33PWeMkbyekzZq8nXjRtyv7jgSdm3OfhI0
0+hRkkD8tS8OUzsGo5GoK846mxJcJwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFDlJ
f83Wp/AdYbIEjopcQ1Le5t/pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NUZCM0I5NkFEQjMxMUYxOUQzNzdBQkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQFmlLgAwQCmlUEAwQAmlUN
MAwDBACaVXkDBACaVXoDBACaXiADBAGaXiQDBACaXigDBACaXisDBACaXj8wDQYJ
KoZIhvcNAQELBQADggEBABrrvt7DDk4ZrJh3lG6CtsNZCjNIehaN9Z4/DE4cHvQf
W7uCSFTySkliqZ6kQevQ5O7pJsl70XtKt5sJagF2sa4LBYLjU5tK2dZaqiGCnWim
thXIVRaLE2Q1366LI6g2Imc+h/s/fm/8bjINceu7VQ1DfkXb/FnPRA6pS5wcGXnB
Gq2zmajJC0RSnAqRNcNW9C136g3r7YS5eqLeSGLfYUMsE4fl2eH7A47B9clSo9P9
YvfgygBVqGmx3Lqa7FnyUIIZ51UXFWQNNa4X3C1ahZdSEDrzhit0OWPIpbur728d
oW3mI9vgW/VB1lYz9BsEcG0dZ2RsxHidX0bcVK1XcRI=
-----END CERTIFICATE-----