Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A3B558B5A511F1AE629016CF1D38B0.roa
File:                     E1A3B558B5A511F1AE629016CF1D38B0.roa (raw, json)
Hash identifier:          Rx9RDvNl1N4I6nMk/Ox7P52f0tiTAn49xHyqu1gZlLA=
Subject key identifier:   20:37:5A:7D:03:E6:CB:18:B3:F7:C7:7B:2F:41:6D:4F:0F:2E:9D:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E99C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A3B558B5A511F1AE629016CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:19:09 +0000
ROA not before:           Mon 21 Sep 2026 10:19:05 +0000
ROA not after:            Thu 20 Sep 2029 10:19:05 +0000
asID:                     17561
IP address blocks:        154.200.112.0/24 maxlen: 24
                          154.200.113.0/24 maxlen: 24
                          154.200.114.0/24 maxlen: 24
                          154.200.115.0/24 maxlen: 24
                          154.200.116.0/24 maxlen: 24
                          154.200.117.0/24 maxlen: 24
                          154.200.118.0/24 maxlen: 24
                          154.200.119.0/24 maxlen: 24
                          154.200.120.0/24 maxlen: 24
                          154.200.121.0/24 maxlen: 24
                          154.200.122.0/24 maxlen: 24
                          154.200.123.0/24 maxlen: 24
                          154.200.124.0/24 maxlen: 24
                          154.200.125.0/24 maxlen: 24
                          154.206.44.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
                          154.211.4.0/24 maxlen: 24
                          154.211.5.0/24 maxlen: 24
                          154.211.6.0/24 maxlen: 24
                          154.211.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125340 (0x1e99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:19:05 2026 GMT
            Not After : Sep 20 10:19:05 2029 GMT
        Subject: CN=6ab1049d-eaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:28:ab:01:84:4c:1e:08:bd:15:8d:36:50:
                    55:64:8c:aa:3a:37:db:c9:d0:c8:e9:70:14:8c:8c:
                    70:fa:2e:e4:fa:7c:d9:e2:d6:6e:91:89:b0:15:1d:
                    0e:7e:e8:f1:04:cd:0c:7e:28:f0:64:61:d6:d6:db:
                    3b:e0:83:0c:8c:fe:de:f7:b5:46:fd:d5:72:53:85:
                    7f:7f:a6:dd:a4:6f:0f:d2:dc:8e:62:b2:f4:7b:3e:
                    4b:b0:92:99:47:c1:f3:08:8d:f7:89:a6:f2:c0:0a:
                    b6:4f:3e:37:d8:90:f3:3f:f6:2a:17:19:2d:a5:75:
                    fd:90:f1:0d:ea:1b:8d:03:57:80:a5:ad:c4:33:f0:
                    e0:c1:aa:ba:6d:8c:35:14:bc:9c:5c:fc:0d:ca:27:
                    86:12:79:fa:63:24:15:7a:cb:c5:19:65:97:62:98:
                    53:18:24:8b:9d:b6:9d:80:04:31:01:b1:e1:70:f3:
                    4a:bf:54:25:84:1a:c0:53:55:87:df:4e:46:64:18:
                    1b:28:2d:87:a9:31:2b:ad:9c:1a:4e:5b:fc:bc:30:
                    aa:98:06:5a:5b:e9:81:d2:96:f6:c2:e2:e1:79:eb:
                    50:9c:f4:49:72:31:61:e2:ba:32:81:32:99:21:98:
                    99:b6:f6:2c:2b:ca:5e:cc:c9:55:7d:91:7b:51:a0:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:37:5A:7D:03:E6:CB:18:B3:F7:C7:7B:2F:41:6D:4F:0F:2E:9D:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A3B558B5A511F1AE629016CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.112.0-154.200.125.255
                  154.206.44.0/24
                  154.210.2.0/24
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:df:6a:64:6d:52:f7:57:13:e9:f6:8f:a7:2f:3e:40:36:
         f5:e0:ef:e5:f8:dd:3c:3c:11:2a:16:67:96:77:7e:9a:5b:35:
         8e:c6:fb:67:2d:18:d0:76:f2:a9:a8:ea:c7:f1:af:e4:be:32:
         e7:47:0d:c0:82:da:20:3d:a1:26:38:da:a3:3c:2f:84:4f:c6:
         42:13:ff:e9:be:20:e1:3b:16:52:84:50:4e:8b:4d:f1:08:bc:
         79:40:56:9c:58:9b:1a:bd:64:fd:8d:ce:c0:40:25:9f:a3:74:
         da:c2:82:0f:ce:7a:f6:21:c2:61:ea:0a:f0:fc:8c:cd:57:8f:
         e5:c6:9f:2a:e5:b1:ae:8b:a2:7b:c1:be:ab:86:eb:8f:f3:fc:
         e0:f2:e4:5f:38:1c:02:1a:34:5d:63:9f:63:12:07:44:9d:02:
         8d:a4:8d:25:2e:87:ce:b9:b8:5c:0f:40:ce:5c:35:e8:bd:84:
         e7:cb:63:5b:d6:34:c5:ab:95:a7:9d:87:a5:f2:ef:d2:de:41:
         c9:0c:b0:b9:16:65:58:68:bd:c9:89:e9:1f:ec:00:9b:cd:02:
         b6:0e:fc:a9:80:c0:ba:d6:d8:e0:fc:9b:b1:c6:4d:1e:55:85:
         c2:91:0c:4c:3d:3e:f0:18:11:73:46:67:b6:d6:08:2c:1a:ad:
         b5:7f:16:3b
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAemcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIxMTAxOTA1WhcNMjkwOTIwMTAxOTA1WjAYMRYw
FAYDVQQDEw02YWIxMDQ5ZC1lYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4PQoqwGETB4IvRWNNlBVZIyqOjfbydDI6XAUjIxw+i7k+nzZ4tZukYmw
FR0OfujxBM0MfijwZGHW1ts74IMMjP7e97VG/dVyU4V/f6bdpG8P0tyOYrL0ez5L
sJKZR8HzCI33iabywAq2Tz432JDzP/YqFxktpXX9kPEN6huNA1eApa3EM/Dgwaq6
bYw1FLycXPwNyieGEnn6YyQVesvFGWWXYphTGCSLnbadgAQxAbHhcPNKv1QlhBrA
U1WH305GZBgbKC2HqTErrZwaTlv8vDCqmAZaW+mB0pb2wuLheetQnPRJcjFh4roy
gTKZIZiZtvYsK8pezMlVfZF7UaBQzwIDAQABo4ICvzCCArswHQYDVR0OBBYEFCA3
Wn0D5ssYs/fHey9BbU8PLp3kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMUEzQjU1OEI1QTUxMUYxQUU2MjkwMTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBASayHADBAGayHwDBACa
ziwDBACa0gIDBAKa0wQwDQYJKoZIhvcNAQELBQADggEBAJyb32pkbVL3VxPp9o+n
Lz5ANvXg7+X43Tw8ESoWZ5Z3fppbNY7G+2ctGNB28qmo6sfxr+S+MudHDcCC2iA9
oSY42qM8L4RPxkIT/+m+IOE7FlKEUE6LTfEIvHlAVpxYmxq9ZP2NzsBAJZ+jdNrC
gg/OevYhwmHqCvD8jM1Xj+XGnyrlsa6LonvBvquG64/z/ODy5F84HAIaNF1jn2MS
B0SdAo2kjSUuh865uFwPQM5cNei9hOfLY1vWNMWrlaedh6Xy79LeQckMsLkWZVho
vcmJ6R/sAJvNArYO/KmAwLrW2OD8m7HGTR5VhcKRDEw9PvAYEXNGZ7bWCCwarbV/
Fjs=
-----END CERTIFICATE-----