Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F92599CA77511F1945F6EF1CE1D38B0.roa
File:                     8F92599CA77511F1945F6EF1CE1D38B0.roa (raw, json)
Hash identifier:          MdydmlkEzEuo4Py6OCSUz2Pw/UtMjfqEa1nHzrqOeRU=
Subject key identifier:   84:A6:1F:3B:E6:75:D5:04:DC:B4:96:BF:D1:7D:03:4C:A5:F6:7A:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E50D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F92599CA77511F1945F6EF1CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:57:59 +0000
ROA not before:           Thu 03 Sep 2026 08:57:55 +0000
ROA not after:            Sat 10 Oct 2026 08:57:55 +0000
asID:                     154177
IP address blocks:        154.90.44.0/23 maxlen: 24
                          154.90.46.0/23 maxlen: 24
                          154.90.52.0/23 maxlen: 24
                          154.90.56.0/23 maxlen: 24
                          154.90.58.0/23 maxlen: 24
                          154.90.62.0/23 maxlen: 24
                          154.93.37.0/24 maxlen: 24
                          154.93.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124173 (0x1e50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 08:57:55 2026 GMT
            Not After : Oct 10 08:57:55 2026 GMT
        Subject: CN=6a993697-6131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:63:ad:b1:05:61:5b:82:ee:20:61:d2:61:
                    d3:af:de:4f:eb:15:99:54:a8:d9:dc:d4:ec:07:44:
                    85:c7:54:74:cd:db:dd:55:19:7b:03:06:6b:51:7b:
                    a0:b2:9a:d9:35:51:de:2d:95:a2:6b:63:bb:13:80:
                    90:0d:bb:dc:5e:5d:9a:f0:ff:d0:89:89:c1:f3:1b:
                    2d:ae:54:d8:32:68:dd:3f:ae:67:8a:a5:cc:52:07:
                    53:61:1b:8d:27:9e:9d:db:ef:fc:13:bf:b0:32:1f:
                    00:8b:f1:3a:e6:1f:c2:97:fe:7d:9b:f7:7d:6e:6c:
                    4a:2c:d9:40:41:fc:28:d8:1d:f5:77:e9:36:26:28:
                    54:f5:d2:b6:a9:34:e0:77:f2:bb:6e:d8:07:53:54:
                    9e:ea:e0:08:6a:95:ad:1f:43:a9:64:fe:01:67:b4:
                    e6:3d:3f:25:26:b5:bb:ac:0c:64:81:7a:94:f1:9a:
                    a2:f5:81:db:4e:33:23:b8:86:13:6c:24:dc:31:64:
                    e8:b4:dc:4e:a5:e7:75:86:11:5a:e8:80:ca:5e:08:
                    47:52:7b:7b:dd:c5:f7:8b:43:e4:f0:12:98:dc:53:
                    6e:66:ae:7a:05:7a:29:a0:20:d4:9a:aa:42:af:d9:
                    07:d3:f0:cd:de:59:e1:4d:79:eb:68:0c:b6:82:e0:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A6:1F:3B:E6:75:D5:04:DC:B4:96:BF:D1:7D:03:4C:A5:F6:7A:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F92599CA77511F1945F6EF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.44.0/22
                  154.90.52.0/23
                  154.90.56.0/22
                  154.90.62.0/23
                  154.93.37.0/24
                  154.93.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:da:54:07:be:82:4f:5c:24:00:fe:fb:77:d8:a3:c8:82:
         f8:f0:9f:9d:a8:d2:e0:a1:12:ba:86:eb:d5:a3:e9:2e:61:ca:
         7c:93:17:15:42:ce:f8:98:35:08:4a:ec:1e:79:79:4a:a6:f0:
         0a:64:58:b3:5a:7c:2e:da:ba:ca:76:75:ca:48:83:74:ab:7f:
         48:78:6b:d5:11:2d:39:cd:02:29:8b:79:09:6b:84:52:33:b6:
         20:51:9d:67:59:52:f7:db:96:2f:87:09:f6:02:7d:c8:41:d9:
         12:01:27:f8:d5:d2:33:cd:9b:3f:c1:66:b7:fe:1d:32:09:af:
         df:52:bf:ec:91:f5:90:0e:43:a9:00:8b:9f:11:6f:cc:f7:e7:
         e1:55:63:0e:b7:d9:2f:cb:05:83:a5:7b:3b:ac:6f:99:ed:aa:
         db:22:fb:ef:56:ac:25:5c:ba:fe:da:e1:1f:0c:08:0b:ce:47:
         94:96:f4:31:fe:f3:95:eb:5a:3f:b4:a2:79:c7:ba:41:71:80:
         bc:f4:6d:67:54:94:d1:b7:87:a5:4e:e0:cb:8c:db:0c:6e:c2:
         cf:55:32:9a:88:55:52:50:aa:7d:e7:72:5f:cb:39:42:9a:c9:
         36:89:1f:d4:8d:05:30:08:10:1b:47:7f:92:1f:45:79:3f:df:
         db:58:bc:5e
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAeUNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTAzMDg1NzU1WhcNMjYxMDEwMDg1NzU1WjAYMRYw
FAYDVQQDEw02YTk5MzY5Ny02MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6EVjrbEFYVuC7iBh0mHTr95P6xWZVKjZ3NTsB0SFx1R0zdvdVRl7AwZr
UXugsprZNVHeLZWia2O7E4CQDbvcXl2a8P/QiYnB8xstrlTYMmjdP65niqXMUgdT
YRuNJ56d2+/8E7+wMh8Ai/E65h/Cl/59m/d9bmxKLNlAQfwo2B31d+k2JihU9dK2
qTTgd/K7btgHU1Se6uAIapWtH0OpZP4BZ7TmPT8lJrW7rAxkgXqU8Zqi9YHbTjMj
uIYTbCTcMWTotNxOped1hhFa6IDKXghHUnt73cX3i0Pk8BKY3FNuZq56BXopoCDU
mqpCr9kH0/DN3lnhTXnraAy2guAYOwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFISm
HzvmddUE3LSWv9F9A0yl9npoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjkyNTk5Q0E3NzUxMUYxOTQ1RjZFRjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCmlosAwQBmlo0AwQCmlo4
AwQBmlo+AwQAml0lAwQAml0zMA0GCSqGSIb3DQEBCwUAA4IBAQBf89pUB76CT1wk
AP77d9ijyIL48J+dqNLgoRK6huvVo+kuYcp8kxcVQs74mDUISuweeXlKpvAKZFiz
Wnwu2rrKdnXKSIN0q39IeGvVES05zQIpi3kJa4RSM7YgUZ1nWVL325Yvhwn2An3I
QdkSASf41dIzzZs/wWa3/h0yCa/fUr/skfWQDkOpAIufEW/M9+fhVWMOt9kvywWD
pXs7rG+Z7arbIvvvVqwlXLr+2uEfDAgLzkeUlvQx/vOV61o/tKJ5x7pBcYC89G1n
VJTRt4elTuDLjNsMbsLPVTKaiFVSUKp953JfyzlCmsk2iR/UjQUwCBAbR3+SH0V5
P9/bWLxe
-----END CERTIFICATE-----