Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3EEE3CCB67311F19B5406D8CE1D38B0.roa
File:                     E3EEE3CCB67311F19B5406D8CE1D38B0.roa (raw, json)
Hash identifier:          OWCMshW5EVaP+JV1FUmQZ/BcfQzc5Pk5+BRvPsmJt9s=
Subject key identifier:   CC:A7:2E:38:5C:EF:0E:E9:5B:B2:36:91:81:D3:8E:DC:F3:40:C8:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3EEE3CCB67311F19B5406D8CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 10:53:49 +0000
ROA not before:           Tue 22 Sep 2026 10:53:45 +0000
ROA not after:            Sat 24 Oct 2026 10:53:45 +0000
asID:                     401362
IP address blocks:        154.84.176.0/24 maxlen: 24
                          154.84.177.0/24 maxlen: 24
                          154.84.179.0/24 maxlen: 24
                          154.84.180.0/24 maxlen: 24
                          154.86.9.0/24 maxlen: 24
                          154.86.10.0/24 maxlen: 24
                          154.86.11.0/24 maxlen: 24
                          154.86.12.0/24 maxlen: 24
                          154.86.13.0/24 maxlen: 24
                          154.86.14.0/24 maxlen: 24
                          154.86.15.0/24 maxlen: 24
                          154.86.115.0/24 maxlen: 24
                          154.86.120.0/24 maxlen: 24
                          154.86.121.0/24 maxlen: 24
                          154.86.122.0/24 maxlen: 24
                          154.86.123.0/24 maxlen: 24
                          154.86.124.0/24 maxlen: 24
                          154.86.125.0/24 maxlen: 24
                          154.86.126.0/24 maxlen: 24
                          154.86.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125466 (0x1ea1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 10:53:45 2026 GMT
            Not After : Oct 24 10:53:45 2026 GMT
        Subject: CN=6ab25e3d-3b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:64:d6:53:79:9a:50:6a:fe:97:a9:67:5f:
                    a7:bb:a1:fd:00:ff:da:ff:86:06:ac:77:f8:27:fa:
                    48:33:51:b1:c3:bb:2b:26:d2:fa:a1:39:79:e4:9f:
                    92:64:76:02:0e:84:a7:3e:28:84:21:89:12:f8:65:
                    d2:ec:64:cd:ee:e5:c4:ca:e7:b0:d9:0c:91:3a:86:
                    1d:59:91:e0:5e:a3:5a:e7:e5:b5:43:36:7d:21:06:
                    4a:54:c0:62:55:e2:58:e2:15:fa:ff:83:a2:09:d2:
                    1a:c5:44:93:f4:72:41:fc:6b:4c:b7:3a:27:03:5f:
                    84:00:c8:88:8f:a0:c9:b3:df:1d:12:34:e1:20:7f:
                    8a:d5:01:7d:cc:01:77:ac:ad:76:c8:16:a7:89:06:
                    26:09:e0:e6:64:1e:a4:66:a3:20:08:cd:aa:b8:3d:
                    2a:bc:05:92:cc:17:0a:7e:8a:ee:e8:41:e2:2f:01:
                    3d:ec:a8:1e:1f:7e:b1:03:dd:8f:aa:b7:9d:87:db:
                    1d:67:6c:39:50:9d:22:ee:da:70:d5:3f:7f:e8:f5:
                    14:2d:f9:06:98:ec:1b:ec:28:e8:f0:bc:63:d5:c4:
                    31:45:db:f7:7d:aa:2f:fa:0c:82:88:c3:97:81:8c:
                    69:ff:34:6f:ca:be:50:89:eb:b1:b6:f7:23:97:f1:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:2E:38:5C:EF:0E:E9:5B:B2:36:91:81:D3:8E:DC:F3:40:C8:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3EEE3CCB67311F19B5406D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.176.0/23
                  154.84.179.0-154.84.180.255
                  154.86.9.0-154.86.15.255
                  154.86.115.0/24
                  154.86.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:f6:9a:21:30:61:dc:dd:6b:85:ef:51:b9:48:a7:ee:70:
         a7:93:86:50:af:0f:d0:ab:49:51:46:9e:0d:ef:52:5b:b1:d5:
         e3:32:e9:28:6b:f5:d8:d3:bd:73:ac:b6:a6:e8:17:d1:61:14:
         b0:39:92:1c:a7:1c:2b:9e:aa:5e:b4:c2:b3:1b:6b:42:98:0f:
         76:db:2c:e3:a5:13:a7:a6:b7:f3:f2:cb:c8:08:b0:ee:d2:10:
         e2:f1:d8:34:0b:33:7e:f6:7d:86:4e:34:83:5c:1e:44:6d:67:
         8e:4d:5c:7b:6c:ba:e1:2f:a6:90:63:d0:15:be:ea:6f:9a:ef:
         ea:6c:e9:aa:ef:a9:b2:bc:92:1a:fa:ad:50:e9:c9:8e:a1:59:
         92:ec:bb:7b:00:3e:9a:cb:e7:0d:ca:b5:5b:b3:f3:f4:8f:b8:
         14:8f:7a:4b:64:84:65:9f:c1:b5:82:58:2d:d4:4d:12:64:92:
         06:f9:9a:a1:68:d9:ea:ac:fd:65:17:72:e8:c0:f0:80:ba:8b:
         5c:e1:e1:fd:99:26:f2:c0:46:7d:f4:ca:ea:b5:18:28:91:a4:
         0e:1f:c4:53:95:a9:40:c1:ca:39:1b:45:ac:5e:4c:c8:bd:5d:
         6e:39:9e:a2:42:80:1b:58:65:5a:39:aa:39:55:9b:c4:9f:7b:
         b1:e2:fc:85
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAeoaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIyMTA1MzQ1WhcNMjYxMDI0MTA1MzQ1WjAYMRYw
FAYDVQQDEw02YWIyNWUzZC0zYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAueFk1lN5mlBq/pepZ1+nu6H9AP/a/4YGrHf4J/pIM1Gxw7srJtL6oTl5
5J+SZHYCDoSnPiiEIYkS+GXS7GTN7uXEyuew2QyROoYdWZHgXqNa5+W1QzZ9IQZK
VMBiVeJY4hX6/4OiCdIaxUST9HJB/GtMtzonA1+EAMiIj6DJs98dEjThIH+K1QF9
zAF3rK12yBaniQYmCeDmZB6kZqMgCM2quD0qvAWSzBcKforu6EHiLwE97KgeH36x
A92Pqredh9sdZ2w5UJ0i7tpw1T9/6PUULfkGmOwb7Cjo8Lxj1cQxRdv3faov+gyC
iMOXgYxp/zRvyr5Qieuxtvcjl/H5JQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFMyn
Ljhc7w7pW7I2kYHTjtzzQMhQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FM0VFRTNDQ0I2NzMxMUYxOUI1NDA2RDhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmlSwMAwDBACaVLMDBACa
VLQwDAMEAJpWCQMEBJpWAAMEAJpWcwMEA5pWeDANBgkqhkiG9w0BAQsFAAOCAQEA
SLX2miEwYdzda4XvUblIp+5wp5OGUK8P0KtJUUaeDe9SW7HV4zLpKGv12NO9c6y2
pugX0WEUsDmSHKccK56qXrTCsxtrQpgPdtss46UTp6a38/LLyAiw7tIQ4vHYNAsz
fvZ9hk40g1weRG1njk1ce2y64S+mkGPQFb7qb5rv6mzpqu+psrySGvqtUOnJjqFZ
kuy7ewA+msvnDcq1W7Pz9I+4FI96S2SEZZ/BtYJYLdRNEmSSBvmaoWjZ6qz9ZRdy
6MDwgLqLXOHh/Zkm8sBGffTK6rUYKJGkDh/EU5WpQMHKORtFrF5MyL1dbjmeokKA
G1hlWjmqOVWbxJ97seL8hQ==
-----END CERTIFICATE-----