Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFC53E0B4DB11F1BB1FA5F0CE1D38B0.roa
File:                     BEFC53E0B4DB11F1BB1FA5F0CE1D38B0.roa (raw, json)
Hash identifier:          EaNBmkKXzJgMzTMpGVeU5qJ1Ds/Kyk35jrWqZL6Zv8I=
Subject key identifier:   6D:22:8E:2A:A1:08:1E:71:44:42:2D:DC:24:49:AA:D9:4D:0C:91:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E911
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFC53E0B4DB11F1BB1FA5F0CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 10:12:12 +0000
ROA not before:           Sun 20 Sep 2026 10:12:08 +0000
ROA not after:            Tue 27 Oct 2026 10:12:08 +0000
asID:                     138915
IP address blocks:        154.205.128.0/24 maxlen: 24
                          154.205.129.0/24 maxlen: 24
                          154.205.130.0/24 maxlen: 24
                          154.205.131.0/24 maxlen: 24
                          154.205.132.0/24 maxlen: 24
                          154.205.133.0/24 maxlen: 24
                          154.205.134.0/24 maxlen: 24
                          154.205.135.0/24 maxlen: 24
                          154.205.136.0/23 maxlen: 24
                          154.205.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125201 (0x1e911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 10:12:08 2026 GMT
            Not After : Oct 27 10:12:08 2026 GMT
        Subject: CN=6aafb17c-13a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:d2:f2:de:70:4a:89:06:a1:80:6f:a1:0a:
                    66:c4:84:9c:75:9f:47:44:f0:dd:61:06:9d:35:15:
                    f8:d1:a4:a2:1a:6d:e0:96:03:6a:f9:63:4a:29:e6:
                    55:23:1c:eb:5f:4b:82:a6:e3:47:37:83:3c:66:49:
                    a0:e7:07:b2:8e:ff:c6:73:fe:e2:1b:4c:54:7a:46:
                    84:a9:47:ba:9b:5c:2a:bd:51:80:bc:92:bf:ef:76:
                    64:67:58:34:61:00:40:69:bf:37:01:41:e7:7b:12:
                    88:bd:82:2f:ed:8a:af:ab:e9:e1:08:48:58:9e:6c:
                    d1:94:be:a2:49:df:ac:60:05:7e:3d:f5:36:5a:a0:
                    5e:cf:b9:fe:fb:d1:ef:96:d6:eb:2f:4a:2b:a7:01:
                    9c:56:80:04:a6:f4:cc:d0:c4:29:23:2f:b2:d9:4b:
                    de:b6:31:a3:09:a1:c8:7e:f5:d6:97:80:fb:97:2d:
                    19:42:2d:a3:fc:73:23:d2:6c:0c:71:9f:91:d3:b1:
                    39:18:37:ca:c7:c4:1e:14:61:af:0e:2c:5e:f4:d9:
                    68:cd:fd:9c:fb:4a:5d:6c:c9:6b:2d:67:18:e7:0b:
                    08:82:3d:c9:44:a9:d7:eb:8e:ec:5e:56:52:8b:53:
                    d1:49:56:28:31:48:29:4d:f9:6b:3e:5a:a1:f2:bc:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:8E:2A:A1:08:1E:71:44:42:2D:DC:24:49:AA:D9:4D:0C:91:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFC53E0B4DB11F1BB1FA5F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.128.0-154.205.138.255

    Signature Algorithm: sha256WithRSAEncryption
         71:03:ae:00:cc:f3:ad:90:bb:47:8d:84:ae:93:08:e5:0e:a7:
         34:17:9f:a9:f5:39:db:67:06:1f:e1:51:d2:e4:3a:91:c7:46:
         60:1e:52:ca:39:38:d9:72:ed:01:02:51:cd:d4:b5:aa:05:c9:
         49:34:19:95:8d:10:88:d1:d3:c8:8e:a4:85:7b:32:55:b6:ca:
         0d:8a:98:27:46:af:e6:67:6a:5c:5f:a4:fe:12:ad:fc:80:ea:
         99:3c:4a:cd:07:a4:77:f5:82:e8:cc:e8:69:67:fd:2a:e1:62:
         2e:eb:2f:f1:15:93:4c:1f:44:65:a4:6b:d2:03:9b:e7:f3:f3:
         a0:24:d5:94:20:27:e8:2f:9e:e4:36:78:d4:7b:55:33:5f:1a:
         c3:35:eb:f9:69:ce:b2:0a:64:7c:91:31:63:c5:f9:88:de:72:
         13:98:e4:5a:48:be:0c:dc:79:31:4c:36:f2:8b:fb:4c:67:97:
         86:81:32:dc:c7:c5:2a:a9:16:50:a5:af:46:19:dd:e2:2c:19:
         1e:a4:e6:9d:88:65:d8:29:db:10:c5:8d:10:d5:15:63:22:e7:
         36:c3:ed:14:e4:4f:8a:76:0d:5d:7a:a1:dd:72:c3:01:26:06:
         c9:6c:74:b5:8f:a3:59:60:06:8c:6d:25:a6:f4:33:be:7d:2b:
         a4:76:44:c4
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAekRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIwMTAxMjA4WhcNMjYxMDI3MTAxMjA4WjAYMRYw
FAYDVQQDEw02YWFmYjE3Yy0xM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApHnS8t5wSokGoYBvoQpmxIScdZ9HRPDdYQadNRX40aSiGm3glgNq+WNK
KeZVIxzrX0uCpuNHN4M8Zkmg5weyjv/Gc/7iG0xUekaEqUe6m1wqvVGAvJK/73Zk
Z1g0YQBAab83AUHnexKIvYIv7Yqvq+nhCEhYnmzRlL6iSd+sYAV+PfU2WqBez7n+
+9HvltbrL0orpwGcVoAEpvTM0MQpIy+y2UvetjGjCaHIfvXWl4D7ly0ZQi2j/HMj
0mwMcZ+R07E5GDfKx8QeFGGvDixe9Nlozf2c+0pdbMlrLWcY5wsIgj3JRKnX647s
XlZSi1PRSVYoMUgpTflrPlqh8ryV5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFG0i
jiqhCB5xREIt3CRJqtlNDJEUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUZDNTNFMEI0REIxMUYxQkIxRkE1RjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeazYADBACazYowDQYJ
KoZIhvcNAQELBQADggEBAHEDrgDM862Qu0eNhK6TCOUOpzQXn6n1OdtnBh/hUdLk
OpHHRmAeUso5ONly7QECUc3UtaoFyUk0GZWNEIjR08iOpIV7MlW2yg2KmCdGr+Zn
alxfpP4SrfyA6pk8Ss0HpHf1gujM6Gln/SrhYi7rL/EVk0wfRGWka9IDm+fz86Ak
1ZQgJ+gvnuQ2eNR7VTNfGsM16/lpzrIKZHyRMWPF+YjechOY5FpIvgzceTFMNvKL
+0xnl4aBMtzHxSqpFlClr0YZ3eIsGR6k5p2IZdgp2xDFjRDVFWMi5zbD7RTkT4p2
DV16od1ywwEmBslsdLWPo1lgBoxtJab0M759K6R2RMQ=
-----END CERTIFICATE-----