Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937DD2E8B67A11F19D82B602CF1D38B0.roa
File:                     937DD2E8B67A11F19D82B602CF1D38B0.roa (raw, json)
Hash identifier:          YNzgy6r6whCcPUbFs3avbD2cVe4yN9vgw6VSlTErJZo=
Subject key identifier:   8E:43:4F:56:43:84:6A:A1:3B:47:09:38:A8:08:AE:CF:33:71:8C:38
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937DD2E8B67A11F19D82B602CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 11:41:40 +0000
ROA not before:           Tue 22 Sep 2026 11:41:36 +0000
ROA not after:            Sat 07 Nov 2026 11:41:36 +0000
asID:                     63099
IP address blocks:        154.193.2.0/24 maxlen: 24
                          154.200.131.0/24 maxlen: 24
                          154.200.154.0/24 maxlen: 24
                          154.200.156.0/24 maxlen: 24
                          154.200.157.0/24 maxlen: 24
                          154.200.158.0/24 maxlen: 24
                          154.200.159.0/24 maxlen: 24
                          154.200.160.0/24 maxlen: 24
                          154.200.161.0/24 maxlen: 24
                          154.200.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 15:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125478 (0x1ea26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 11:41:36 2026 GMT
            Not After : Nov  7 11:41:36 2026 GMT
        Subject: CN=6ab26974-9d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:7d:bf:81:65:86:b6:78:db:e1:df:97:15:
                    b9:94:82:16:44:a0:8d:67:61:50:c9:5c:19:fe:03:
                    d8:60:ff:57:d0:1d:86:fb:a1:c5:d8:28:a3:cd:8a:
                    26:51:a2:32:8b:a8:72:14:7d:4b:03:28:bf:01:3b:
                    98:a5:fc:8f:3b:f1:44:fb:cf:e1:34:e8:cb:44:d6:
                    11:e3:ef:77:68:31:18:04:3f:85:30:c8:1c:b0:75:
                    3b:fe:ef:bd:b4:be:49:c7:20:b2:44:f9:9b:ec:c8:
                    29:be:91:9e:68:a8:d5:6c:79:61:17:8a:92:7b:2a:
                    2a:87:b9:d3:ea:f2:34:48:22:0c:f6:3a:cb:1d:38:
                    a2:f4:98:cd:b9:1c:be:2d:43:f6:4e:34:9a:43:e1:
                    4c:54:58:85:2d:b7:27:1b:59:32:dc:f1:c5:3e:06:
                    aa:9a:6d:0f:23:42:1b:94:2e:14:65:93:36:2d:34:
                    cd:87:14:c8:be:64:73:29:3a:c2:e5:cb:a4:d1:ca:
                    3e:6f:a5:ef:f1:65:d8:e4:6d:38:2a:9b:7e:54:d7:
                    fd:4a:3c:34:99:f1:20:50:49:bb:dd:6a:53:76:0c:
                    17:e8:fe:e9:c1:4a:98:6e:cf:e8:7e:17:b2:02:ef:
                    c4:6e:62:93:27:24:78:2c:5d:6c:02:83:2b:5c:5e:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:43:4F:56:43:84:6A:A1:3B:47:09:38:A8:08:AE:CF:33:71:8C:38
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937DD2E8B67A11F19D82B602CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.2.0/24
                  154.200.131.0/24
                  154.200.154.0/24
                  154.200.156.0-154.200.162.255

    Signature Algorithm: sha256WithRSAEncryption
         11:af:10:9e:59:ed:96:95:fb:27:f6:cc:72:7e:1f:91:84:0b:
         97:a4:a8:87:fc:32:5c:72:cc:01:44:eb:ff:51:4a:aa:c8:6c:
         75:49:15:ac:06:dc:e7:9e:a1:05:aa:a1:2e:59:b2:a2:6f:ae:
         9a:f6:ad:32:ad:69:48:d1:2b:08:0e:21:fd:53:92:e1:c0:65:
         43:2b:54:fa:d5:c5:0f:a7:d5:ba:19:9e:0f:b9:59:82:24:b5:
         08:9c:45:65:3f:95:d1:12:cf:53:21:4b:b0:0b:35:b7:9c:23:
         12:ee:77:91:d1:d4:31:fe:80:17:a3:af:b0:6f:97:ac:32:f9:
         c5:ee:15:6e:7b:91:49:1b:7d:37:10:3e:8a:44:55:6d:0b:8a:
         65:09:f2:08:37:10:e4:74:63:df:4e:22:54:a3:40:b3:bc:20:
         a0:68:1c:d5:a3:77:96:af:9b:36:0f:cf:b5:89:13:f0:60:35:
         9f:5d:08:09:af:8e:a2:37:a5:6c:de:cf:1a:d7:36:0b:b5:8a:
         4a:10:2f:99:ae:6a:ff:7e:f8:92:16:69:4c:89:ae:f4:d3:36:
         ba:49:af:4b:1a:bb:84:cf:8b:9b:24:53:c1:47:a1:3e:f8:16:
         c6:06:5a:a0:68:ed:ed:e2:18:de:63:ed:dc:75:db:40:71:b5:
         bf:40:5b:d9
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAeomMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIyMTE0MTM2WhcNMjYxMTA3MTE0MTM2WjAYMRYw
FAYDVQQDEw02YWIyNjk3NC05ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvfR9v4FlhrZ42+HflxW5lIIWRKCNZ2FQyVwZ/gPYYP9X0B2G+6HF2Cij
zYomUaIyi6hyFH1LAyi/ATuYpfyPO/FE+8/hNOjLRNYR4+93aDEYBD+FMMgcsHU7
/u+9tL5JxyCyRPmb7MgpvpGeaKjVbHlhF4qSeyoqh7nT6vI0SCIM9jrLHTii9JjN
uRy+LUP2TjSaQ+FMVFiFLbcnG1ky3PHFPgaqmm0PI0IblC4UZZM2LTTNhxTIvmRz
KTrC5cuk0co+b6Xv8WXY5G04Kpt+VNf9Sjw0mfEgUEm73WpTdgwX6P7pwUqYbs/o
fheyAu/EbmKTJyR4LF1sAoMrXF5j/QIDAQABo4ICvzCCArswHQYDVR0OBBYEFI5D
T1ZDhGqhO0cJOKgIrs8zcYw4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MzdERDJFOEI2N0ExMUYxOUQ4MkI2MDJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsECAwQAmsiDAwQAmsia
MAwDBAKayJwDBACayKIwDQYJKoZIhvcNAQELBQADggEBABGvEJ5Z7ZaV+yf2zHJ+
H5GEC5ekqIf8MlxyzAFE6/9RSqrIbHVJFawG3OeeoQWqoS5ZsqJvrpr2rTKtaUjR
KwgOIf1TkuHAZUMrVPrVxQ+n1boZng+5WYIktQicRWU/ldESz1MhS7ALNbecIxLu
d5HR1DH+gBejr7Bvl6wy+cXuFW57kUkbfTcQPopEVW0LimUJ8gg3EOR0Y99OIlSj
QLO8IKBoHNWjd5avmzYPz7WJE/BgNZ9dCAmvjqI3pWzezxrXNgu1ikoQL5muav9+
+JIWaUyJrvTTNrpJr0sau4TPi5skU8FHoT74FsYGWqBo7e3iGN5j7dx120Bxtb9A
W9k=
-----END CERTIFICATE-----