Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78E8839CB5AD11F1B648BEC8CE1D38B0.roa
File:                     78E8839CB5AD11F1B648BEC8CE1D38B0.roa (raw, json)
Hash identifier:          On86M9AeAiEOz2u098VloeEgcYw3Xo3mKEqm4HNwwE0=
Subject key identifier:   05:0E:E3:AE:9B:58:57:2D:A0:6E:89:AC:D3:00:26:1E:61:95:B7:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78E8839CB5AD11F1B648BEC8CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 11:13:29 +0000
ROA not before:           Mon 21 Sep 2026 11:13:25 +0000
ROA not after:            Tue 05 Jan 2027 11:13:25 +0000
asID:                     150008
IP address blocks:        154.206.17.0/24 maxlen: 24
                          154.206.18.0/24 maxlen: 24
                          154.206.21.0/24 maxlen: 24
                          154.206.24.0/24 maxlen: 24
                          154.206.25.0/24 maxlen: 24
                          154.206.31.0/24 maxlen: 24
                          154.209.252.0/24 maxlen: 24
                          154.209.253.0/24 maxlen: 24
                          154.209.254.0/24 maxlen: 24
                          154.209.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125368 (0x1e9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 11:13:25 2026 GMT
            Not After : Jan  5 11:13:25 2027 GMT
        Subject: CN=6ab11159-15eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:87:fc:81:f9:a8:79:d3:c5:43:33:52:9a:
                    6c:63:3b:69:32:87:6a:05:ea:f0:52:96:48:ba:dd:
                    3b:d7:57:d2:2f:83:90:98:fe:9b:4e:cf:7e:b5:fd:
                    df:26:d7:43:35:9d:ca:08:6f:f1:5b:41:f3:32:68:
                    a5:6b:36:80:e7:03:1e:7b:a1:c3:66:b8:65:0b:9c:
                    af:b7:61:01:71:fd:9c:a9:63:39:7b:9d:c9:81:a7:
                    ad:75:b8:35:ac:e2:cb:82:4c:2a:e4:7a:95:e0:c3:
                    c0:3b:9d:2b:05:59:59:f9:7c:ba:03:a0:f5:a9:c0:
                    c9:a3:7f:91:e0:95:5c:6f:3f:ec:ef:3e:ed:a0:7f:
                    1f:5f:aa:24:87:01:a4:0c:bf:66:d2:d6:82:57:4a:
                    d5:31:64:21:ee:5a:71:f0:94:42:7b:c1:f9:39:df:
                    53:15:df:e4:57:30:87:bb:3e:0b:4d:61:23:40:99:
                    b1:52:57:09:95:b4:62:a7:98:fc:e6:35:f1:79:f8:
                    0e:f4:e3:52:c6:4b:e8:3f:64:f1:f6:03:9d:9f:87:
                    67:f0:c5:b8:33:37:5b:bb:40:c4:27:95:8a:7f:9b:
                    2d:98:e5:31:c9:7a:8d:de:3a:b0:6a:62:07:70:1a:
                    0a:b5:c0:96:64:8c:b2:59:a5:55:f0:0c:62:d8:77:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0E:E3:AE:9B:58:57:2D:A0:6E:89:AC:D3:00:26:1E:61:95:B7:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78E8839CB5AD11F1B648BEC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.17.0-154.206.18.255
                  154.206.21.0/24
                  154.206.24.0/23
                  154.206.31.0/24
                  154.209.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:39:cd:6d:1d:80:8c:f8:ef:0c:51:2f:9d:fb:a3:a8:b5:ec:
         34:e4:f8:15:5b:dc:46:f6:43:b2:06:11:84:63:8a:7e:b8:a8:
         aa:ef:e3:c9:50:7a:f4:fd:1d:28:a0:16:b2:9e:20:fc:61:77:
         d3:06:91:b6:7e:87:83:71:45:45:ab:b0:e3:6e:33:2e:85:c3:
         9b:3e:80:6a:53:2b:54:09:67:f5:fc:72:54:fc:8a:17:cc:62:
         5b:1a:db:79:0d:ea:9e:1e:19:71:42:9a:15:0b:64:84:55:cb:
         e2:56:7e:09:5e:37:71:4c:bc:01:b5:93:d4:8f:d4:c3:dc:e8:
         e3:47:84:f4:f4:b0:f0:2c:ec:e6:b0:8f:bf:b6:30:6c:ef:72:
         2a:9f:f8:28:52:88:ce:89:b5:6d:13:df:1a:fc:02:a4:e9:95:
         b4:0f:6f:54:2e:19:4d:3b:d0:17:94:62:cb:10:0a:83:6e:65:
         e4:a0:d1:c2:13:0a:bd:35:5d:ce:9d:c9:5d:23:5d:47:60:21:
         8a:91:73:24:27:5e:3c:66:d3:7a:12:7d:94:fd:a0:b5:75:10:
         00:7c:f3:31:fb:e7:05:f3:33:6f:e7:ed:a1:a9:d9:47:1e:4d:
         98:80:4e:47:30:15:ff:8a:7f:af:fd:3b:af:7b:c5:03:58:a9:
         fc:c9:d4:4a
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAem4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIxMTExMzI1WhcNMjcwMTA1MTExMzI1WjAYMRYw
FAYDVQQDEw02YWIxMTE1OS0xNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtx2H/IH5qHnTxUMzUppsYztpModqBerwUpZIut0711fSL4OQmP6bTs9+
tf3fJtdDNZ3KCG/xW0HzMmilazaA5wMee6HDZrhlC5yvt2EBcf2cqWM5e53Jgaet
dbg1rOLLgkwq5HqV4MPAO50rBVlZ+Xy6A6D1qcDJo3+R4JVcbz/s7z7toH8fX6ok
hwGkDL9m0taCV0rVMWQh7lpx8JRCe8H5Od9TFd/kVzCHuz4LTWEjQJmxUlcJlbRi
p5j85jXxefgO9ONSxkvoP2Tx9gOdn4dn8MW4Mzdbu0DEJ5WKf5stmOUxyXqN3jqw
amIHcBoKtcCWZIyyWaVV8Axi2HepOQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFAUO
466bWFctoG6JrNMAJh5hlbfaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEU4ODM5Q0I1QUQxMUYxQjY0OEJFQzhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACazhEDBACazhIDBACa
zhUDBAGazhgDBACazh8DBAKa0fwwDQYJKoZIhvcNAQELBQADggEBAKo5zW0dgIz4
7wxRL537o6i17DTk+BVb3Eb2Q7IGEYRjin64qKrv48lQevT9HSigFrKeIPxhd9MG
kbZ+h4NxRUWrsONuMy6Fw5s+gGpTK1QJZ/X8clT8ihfMYlsa23kN6p4eGXFCmhUL
ZIRVy+JWfgleN3FMvAG1k9SP1MPc6ONHhPT0sPAs7Oawj7+2MGzvciqf+ChSiM6J
tW0T3xr8AqTplbQPb1QuGU070BeUYssQCoNuZeSg0cITCr01Xc6dyV0jXUdgIYqR
cyQnXjxm03oSfZT9oLV1EAB88zH75wXzM2/n7aGp2UceTZiATkcwFf+Kf6/9O697
xQNYqfzJ1Eo=
-----END CERTIFICATE-----