Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBF59CEAB8911F19AA1191CCF1D38B0.roa
File:                     CCBF59CEAB8911F19AA1191CCF1D38B0.roa (raw, json)
Hash identifier:          +WJ25+W/bc3I9X8yelLRwCx/NEW9Sq6ajUGcPfJtQMg=
Subject key identifier:   28:AE:20:39:BE:61:1E:B5:1E:DE:DE:60:5C:AB:38:78:4D:9F:4D:12
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E678
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBF59CEAB8911F19AA1191CCF1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:32:56 +0000
ROA not before:           Tue 08 Sep 2026 13:32:52 +0000
ROA not after:            Wed 04 Nov 2026 13:32:52 +0000
asID:                     25160
IP address blocks:        154.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124536 (0x1e678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 13:32:52 2026 GMT
            Not After : Nov  4 13:32:52 2026 GMT
        Subject: CN=6aa00e88-085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:71:db:9e:3d:aa:29:6d:be:6f:c8:15:c3:
                    07:f4:74:99:d4:2e:43:e1:73:29:6f:2a:2b:5a:49:
                    35:02:4a:bc:8c:85:87:c4:48:bf:8e:d1:ca:c6:b7:
                    ab:9e:ba:cf:68:11:57:83:69:36:a9:e5:10:0b:04:
                    8e:88:cc:c1:32:7d:97:49:87:6f:f0:35:1e:96:ea:
                    e7:ed:b4:64:a9:1f:44:be:a1:48:9c:b7:ee:41:01:
                    16:ef:d1:cb:ab:15:bd:4b:13:88:05:e0:8c:28:d2:
                    ee:79:63:30:4c:ca:74:41:98:d6:3d:47:c6:77:5a:
                    3a:16:6b:5d:11:1a:ce:a0:ff:77:d8:78:b6:be:36:
                    e8:a6:f9:7b:35:f5:82:f8:00:14:8f:0e:49:e4:2f:
                    34:e2:14:ad:c2:e9:f4:1f:83:b1:f0:d1:1c:18:68:
                    c5:ec:df:b8:eb:f7:d5:1c:c4:32:12:88:6e:15:31:
                    4d:c2:83:c1:d2:01:69:93:43:11:c2:21:a2:47:c5:
                    5b:60:be:e3:e6:a3:f4:99:a9:ae:18:ac:0c:e1:16:
                    07:25:19:98:a4:9f:6b:45:02:0c:a7:df:21:2e:b7:
                    4b:fb:17:c1:7f:90:30:ef:b8:4e:5c:b2:5a:ea:b7:
                    3e:fe:88:a1:eb:88:e0:70:d2:ad:e8:a8:cf:d0:c2:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:20:39:BE:61:1E:B5:1E:DE:DE:60:5C:AB:38:78:4D:9F:4D:12
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBF59CEAB8911F19AA1191CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:83:f2:7a:d0:b5:30:df:15:5e:3f:83:bb:c6:94:d4:ba:e7:
         c6:27:74:34:5e:9b:95:11:2e:d9:7c:8b:11:96:7d:47:e9:61:
         59:0e:30:51:ff:51:0e:16:69:0e:3d:4d:82:02:71:2c:e1:3a:
         1d:68:0c:71:e3:ad:a1:d3:12:69:0c:f1:85:30:32:78:a4:f9:
         d9:26:9c:b7:96:4a:23:83:88:41:d0:45:c1:8f:09:eb:0a:b7:
         6d:2f:db:29:ff:f4:32:42:63:ed:44:d5:c5:e9:5d:a8:4b:d0:
         59:27:82:04:1d:78:e5:ed:d9:31:95:d3:dc:f5:24:11:7f:d4:
         c8:44:52:f0:9a:e4:0d:ad:70:4a:32:0a:bf:ca:de:39:9f:5f:
         09:46:f6:cb:2e:56:03:31:e9:e4:fa:39:37:3d:14:41:0b:8f:
         15:fa:14:e2:c0:0b:85:21:e1:d6:a9:57:78:76:6e:99:31:2c:
         4e:c1:4f:ad:ea:0d:dc:db:3e:18:22:c0:a5:06:55:b8:0e:ce:
         76:fe:65:e7:24:29:41:12:25:b8:80:c4:e1:36:a7:3a:d9:d1:
         5a:d9:60:6c:9c:a7:68:3e:5b:2a:74:8a:0d:bf:7e:6a:5b:c9:
         df:9c:c5:9f:67:b1:a5:4b:ba:23:3c:1e:44:82:b9:03:33:27:
         b1:5a:3c:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeZ4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MTMzMjUyWhcNMjYxMTA0MTMzMjUyWjAYMRYw
FAYDVQQDEw02YWEwMGU4OC0wODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0dZx2549qiltvm/IFcMH9HSZ1C5D4XMpbyorWkk1Akq8jIWHxEi/jtHK
xrernrrPaBFXg2k2qeUQCwSOiMzBMn2XSYdv8DUelurn7bRkqR9EvqFInLfuQQEW
79HLqxW9SxOIBeCMKNLueWMwTMp0QZjWPUfGd1o6FmtdERrOoP932Hi2vjbopvl7
NfWC+AAUjw5J5C804hStwun0H4Ox8NEcGGjF7N+46/fVHMQyEohuFTFNwoPB0gFp
k0MRwiGiR8VbYL7j5qP0mamuGKwM4RYHJRmYpJ9rRQIMp98hLrdL+xfBf5Aw77hO
XLJa6rc+/oih64jgcNKt6KjP0MKg2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCiu
IDm+YR61Ht7eYFyrOHhNn00SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0JGNTlDRUFCODkxMUYxOUFBMTE5MUNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEyMA0GCSqGSIb3DQEB
CwUAA4IBAQBGg/J60LUw3xVeP4O7xpTUuufGJ3Q0XpuVES7ZfIsRln1H6WFZDjBR
/1EOFmkOPU2CAnEs4TodaAxx462h0xJpDPGFMDJ4pPnZJpy3lkojg4hB0EXBjwnr
CrdtL9sp//QyQmPtRNXF6V2oS9BZJ4IEHXjl7dkxldPc9SQRf9TIRFLwmuQNrXBK
Mgq/yt45n18JRvbLLlYDMenk+jk3PRRBC48V+hTiwAuFIeHWqVd4dm6ZMSxOwU+t
6g3c2z4YIsClBlW4Ds52/mXnJClBEiW4gMThNqc62dFa2WBsnKdoPlsqdIoNv35q
W8nfnMWfZ7GlS7ojPB5EgrkDMyexWjxn
-----END CERTIFICATE-----