Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBEEFCCC9F611F19CE580C0CE1D38B0.roa
File:                     8FBEEFCCC9F611F19CE580C0CE1D38B0.roa (raw, json)
Hash identifier:          1KgJSbSgXW+qc6TMdwy/FMM6rZdqLihVP+YO5s3gCyo=
Subject key identifier:   05:43:F5:42:97:B4:DE:64:9A:0F:BE:EA:E2:84:75:FB:CC:E1:24:30
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBEEFCCC9F611F19CE580C0CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:47:04 +0000
ROA not before:           Sat 17 Oct 2026 06:46:59 +0000
ROA not after:            Tue 24 Nov 2026 06:46:59 +0000
asID:                     153706
IP address blocks:        154.89.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126595 (0x1ee83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 06:46:59 2026 GMT
            Not After : Nov 24 06:46:59 2026 GMT
        Subject: CN=6ad319e8-d23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:48:16:eb:ff:33:64:fc:8e:d6:21:de:4e:
                    c9:6c:92:92:3a:3e:cb:e4:7a:10:a6:63:7f:55:7e:
                    75:95:2c:79:38:70:21:c3:84:67:91:1f:58:e4:e6:
                    b8:e7:40:e5:f3:40:63:0a:86:13:95:61:51:b6:e5:
                    b0:b8:f9:15:c4:0d:94:7c:d8:fa:25:61:34:14:6d:
                    d5:8a:d3:1a:b4:8c:80:2d:47:2d:30:8b:7c:e0:4d:
                    68:12:ae:d7:e6:99:47:36:32:bb:05:1c:38:ec:de:
                    85:2a:8d:23:6c:8a:58:c4:d2:3e:03:8a:c5:ea:1c:
                    e4:33:4f:2b:b8:c6:4d:ee:d4:52:af:62:8f:0c:d5:
                    33:93:96:4e:ec:88:8b:bc:12:e4:99:16:e8:4f:51:
                    f5:90:46:c9:a4:a3:c3:9b:4b:6c:f6:e6:8f:17:84:
                    9f:d4:37:78:8c:fc:8f:11:8a:d2:12:d5:dd:9e:88:
                    26:bd:90:22:76:cc:b0:d2:1a:2f:79:d9:85:4e:27:
                    b7:d9:5e:0f:93:0a:a6:db:3e:3a:42:c1:a0:b3:14:
                    63:0b:29:12:44:61:27:c4:06:6b:dd:e8:96:a4:ce:
                    0a:01:28:4c:fd:e6:75:4e:e1:a4:1c:7b:05:21:87:
                    93:01:d0:17:72:69:0c:96:99:77:b6:27:1a:cb:7b:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:43:F5:42:97:B4:DE:64:9A:0F:BE:EA:E2:84:75:FB:CC:E1:24:30
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBEEFCCC9F611F19CE580C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:36:d1:d2:50:4a:27:d8:d9:2a:a0:d0:44:7b:1c:9e:38:83:
         bd:38:f4:80:3a:02:6b:6d:a8:5e:e7:ac:a4:4e:ee:7b:99:0a:
         ea:04:46:f9:84:4a:05:40:cc:41:2a:0d:58:57:c9:f3:f9:0f:
         31:86:c3:7f:18:a1:93:4e:e9:7b:7b:20:30:30:f6:96:c3:f2:
         cf:c6:9d:e3:fc:f7:a1:db:be:27:6d:8a:59:bc:47:11:0b:44:
         e6:a5:7f:ff:4b:98:3c:c7:80:54:28:8d:d7:7f:d8:0a:56:a9:
         86:d7:53:55:1d:74:eb:74:48:15:38:e3:63:7d:93:16:01:f8:
         ad:93:be:70:9a:38:ae:9d:3b:c5:a2:d2:b9:ff:35:64:3a:3c:
         2b:fd:a4:be:83:21:18:ce:17:25:cd:7f:b3:f1:33:c8:61:ab:
         a0:6a:2d:75:9f:08:80:37:c0:29:5e:ce:22:62:cb:25:b4:ad:
         c1:ae:e1:81:77:8f:e2:74:cb:e9:61:17:4e:41:a8:03:ec:ac:
         f0:cc:de:17:a0:e2:5b:3d:aa:48:12:66:2a:c7:4e:17:ed:15:
         c7:85:7f:28:ec:71:5d:94:f1:69:79:ac:b5:a1:14:8f:49:1e:
         8f:dd:fd:53:fe:cb:9a:85:9b:d2:42:77:2c:5e:6e:69:ba:53:
         5f:48:fc:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe6DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE3MDY0NjU5WhcNMjYxMTI0MDY0NjU5WjAYMRYw
FAYDVQQDEw02YWQzMTllOC1kMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnGNIFuv/M2T8jtYh3k7JbJKSOj7L5HoQpmN/VX51lSx5OHAhw4RnkR9Y
5Oa450Dl80BjCoYTlWFRtuWwuPkVxA2UfNj6JWE0FG3VitMatIyALUctMIt84E1o
Eq7X5plHNjK7BRw47N6FKo0jbIpYxNI+A4rF6hzkM08ruMZN7tRSr2KPDNUzk5ZO
7IiLvBLkmRboT1H1kEbJpKPDm0ts9uaPF4Sf1Dd4jPyPEYrSEtXdnogmvZAidsyw
0hovedmFTie32V4Pkwqm2z46QsGgsxRjCykSRGEnxAZr3eiWpM4KAShM/eZ1TuGk
HHsFIYeTAdAXcmkMlpl3ticay3vR5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAVD
9UKXtN5kmg++6uKEdfvM4SQwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RkJFRUZDQ0M5RjYxMUYxOUNFNTgwQzBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnCMA0GCSqGSIb3DQEB
CwUAA4IBAQA5NtHSUEon2NkqoNBEexyeOIO9OPSAOgJrbahe56ykTu57mQrqBEb5
hEoFQMxBKg1YV8nz+Q8xhsN/GKGTTul7eyAwMPaWw/LPxp3j/Peh274nbYpZvEcR
C0TmpX//S5g8x4BUKI3Xf9gKVqmG11NVHXTrdEgVOONjfZMWAfitk75wmjiunTvF
otK5/zVkOjwr/aS+gyEYzhclzX+z8TPIYaugai11nwiAN8ApXs4iYssltK3BruGB
d4/idMvpYRdOQagD7KzwzN4XoOJbPapIEmYqx04X7RXHhX8o7HFdlPFpeay1oRSP
SR6P3f1T/suahZvSQncsXm5pulNfSPx4
-----END CERTIFICATE-----