Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849E92DEB0E511F188CF4D16CF1D38B0.roa
File:                     849E92DEB0E511F188CF4D16CF1D38B0.roa (raw, json)
Hash identifier:          S/NSl/S9Dt5U0frdrSPyGA/jXzeK+u0PMcgYMWKAMqg=
Subject key identifier:   C6:68:A6:90:F3:96:56:09:1C:51:7E:0D:A7:38:1F:6C:54:0C:C9:96
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E85F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849E92DEB0E511F188CF4D16CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:12:05 +0000
ROA not before:           Tue 15 Sep 2026 09:12:01 +0000
ROA not after:            Mon 19 Oct 2026 09:12:01 +0000
asID:                     6079
IP address blocks:        154.221.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125023 (0x1e85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 09:12:01 2026 GMT
            Not After : Oct 19 09:12:01 2026 GMT
        Subject: CN=6aa90be5-75a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:fd:47:f9:e3:02:3b:7d:5a:b0:f8:b9:57:
                    b5:46:4f:2f:e0:cc:1b:e5:3b:f6:d8:ba:71:d2:f7:
                    b1:fc:35:63:9b:51:c1:76:ca:65:a4:f7:d0:b1:95:
                    27:77:0a:9c:dd:cf:79:07:16:e5:30:25:96:bf:28:
                    b7:ad:ca:2b:41:b2:dc:df:57:45:e9:1b:db:af:4e:
                    57:81:f8:4d:e1:81:ed:70:ff:86:c4:89:40:57:65:
                    4e:13:ce:48:ea:b4:af:3d:d6:bc:3d:7c:33:99:12:
                    e8:f0:88:db:a5:90:15:2f:0b:d2:a3:9b:fe:a3:08:
                    ab:5e:19:2a:0e:c1:07:12:18:e7:ec:e4:7e:f9:a1:
                    e2:f2:01:05:aa:eb:98:20:af:8c:08:17:5b:57:5d:
                    c6:9f:1e:56:23:80:f6:85:dc:b9:a0:55:e4:71:92:
                    4d:1f:d5:65:9f:7a:de:63:92:db:6a:f3:ee:99:f8:
                    13:4a:88:e5:82:4f:59:57:8e:01:19:6e:a6:66:97:
                    cb:3f:73:ba:18:ee:06:07:f9:16:09:d6:51:38:4d:
                    b2:3e:05:11:7a:67:9b:ff:17:9e:a4:21:a2:a9:3f:
                    1c:ab:c2:49:56:2c:ef:86:af:f8:34:57:a7:57:a2:
                    94:b9:4e:98:e8:07:e9:ca:c1:b0:6a:07:81:5e:8a:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:68:A6:90:F3:96:56:09:1C:51:7E:0D:A7:38:1F:6C:54:0C:C9:96
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849E92DEB0E511F188CF4D16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:11:bf:5f:93:67:ab:95:56:03:d7:67:49:90:47:2a:75:
         81:0d:5b:99:f7:95:96:36:d9:35:44:2c:4e:3b:25:d4:0f:92:
         c9:bc:52:d6:23:71:f6:e7:fa:b4:ec:13:e1:aa:d3:69:17:ec:
         79:f9:b3:d0:ae:15:d8:8e:c1:6b:29:e1:6d:89:88:51:af:a1:
         e0:91:af:f7:33:a4:f0:c5:49:a5:8d:ef:5c:58:c9:5f:85:41:
         d0:2f:f4:54:6e:65:41:8f:d8:e6:78:6b:2b:0b:7d:37:19:9a:
         97:b9:0c:15:19:b4:66:dd:90:a3:c4:6f:2e:30:48:9e:83:03:
         3c:14:65:2e:1b:8d:5e:88:8a:e0:ed:b4:f8:b4:1c:35:a7:a6:
         8f:10:2c:fd:f2:af:ef:ad:d7:02:7b:2e:6f:60:8e:cf:48:d2:
         1f:4c:3c:e9:5f:cf:8f:4b:80:d3:e0:29:73:dd:64:7e:b3:04:
         90:98:c5:c3:d8:97:05:bf:28:6b:f5:cc:e4:0c:84:61:32:7e:
         83:0d:b2:1b:08:75:ef:25:a6:eb:80:5f:ad:be:f1:63:c6:50:
         2f:dc:e9:76:e7:39:35:3c:ba:39:db:f5:8a:eb:81:b1:45:4c:
         ab:8e:cd:87:3c:a1:2d:5f:df:25:0f:2b:07:36:2a:d0:e9:ea:
         9a:49:e2:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAehfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTE1MDkxMjAxWhcNMjYxMDE5MDkxMjAxWjAYMRYw
FAYDVQQDEw02YWE5MGJlNS03NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuej9R/njAjt9WrD4uVe1Rk8v4Mwb5Tv22Lpx0vex/DVjm1HBdsplpPfQ
sZUndwqc3c95BxblMCWWvyi3rcorQbLc31dF6Rvbr05XgfhN4YHtcP+GxIlAV2VO
E85I6rSvPda8PXwzmRLo8IjbpZAVLwvSo5v+owirXhkqDsEHEhjn7OR++aHi8gEF
quuYIK+MCBdbV13Gnx5WI4D2hdy5oFXkcZJNH9Vln3reY5LbavPumfgTSojlgk9Z
V44BGW6mZpfLP3O6GO4GB/kWCdZROE2yPgURemeb/xeepCGiqT8cq8JJVizvhq/4
NFenV6KUuU6Y6AfpysGwageBXop2OwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMZo
ppDzllYJHFF+Dac4H2xUDMmWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDlFOTJERUIwRTUxMUYxODhDRjREMTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmt3AMA0GCSqGSIb3DQEB
CwUAA4IBAQCgHRG/X5Nnq5VWA9dnSZBHKnWBDVuZ95WWNtk1RCxOOyXUD5LJvFLW
I3H25/q07BPhqtNpF+x5+bPQrhXYjsFrKeFtiYhRr6Hgka/3M6TwxUmlje9cWMlf
hUHQL/RUbmVBj9jmeGsrC303GZqXuQwVGbRm3ZCjxG8uMEiegwM8FGUuG41eiIrg
7bT4tBw1p6aPECz98q/vrdcCey5vYI7PSNIfTDzpX8+PS4DT4Clz3WR+swSQmMXD
2JcFvyhr9czkDIRhMn6DDbIbCHXvJabrgF+tvvFjxlAv3Ol25zk1PLo52/WK64Gx
RUyrjs2HPKEtX98lDysHNirQ6eqaSeLx
-----END CERTIFICATE-----