Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507865FE842E11F1B66290ECCE1D38B0.roa
File:                     507865FE842E11F1B66290ECCE1D38B0.roa (raw, json)
Hash identifier:          ARUQmcjxNa9quVpnoOPY0sBHzONN26zidRhN9VGj1Iw=
Subject key identifier:   FE:E8:81:F5:93:B0:5F:B4:41:9D:61:F8:09:09:BD:89:E9:91:12:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DA11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507865FE842E11F1B66290ECCE1D38B0.roa
Signing time:             Mon 20 Jul 2026 11:29:48 +0000
ROA not before:           Mon 20 Jul 2026 11:29:44 +0000
ROA not after:            Thu 27 Aug 2026 11:29:44 +0000
asID:                     63139
IP address blocks:        154.94.82.0/24 maxlen: 24
                          154.94.102.0/24 maxlen: 24
                          154.94.103.0/24 maxlen: 24
                          154.94.104.0/24 maxlen: 24
                          154.94.105.0/24 maxlen: 24
                          154.94.106.0/24 maxlen: 24
                          154.94.107.0/24 maxlen: 24
                          154.94.108.0/24 maxlen: 24
                          154.94.109.0/24 maxlen: 24
                          154.94.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121361 (0x1da11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 20 11:29:44 2026 GMT
            Not After : Aug 27 11:29:44 2026 GMT
        Subject: CN=6a5e06ac-b8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:e2:63:57:ab:f3:3f:9e:85:63:78:1b:ed:
                    f9:a4:db:b4:cf:30:56:1a:a8:cb:45:ce:e9:f1:ca:
                    1e:47:c0:06:de:c1:1a:9e:85:92:75:78:48:89:2f:
                    3a:c4:27:0d:0c:95:9f:5a:bc:a6:53:09:7d:a8:5c:
                    cf:c0:bf:f8:ce:f9:2b:ed:fc:06:44:6b:f3:39:0c:
                    7a:e7:a7:db:e2:09:23:e3:6f:b8:1d:d1:ee:3f:67:
                    e4:98:37:6f:3e:b2:43:d4:00:b8:5e:5f:46:75:46:
                    d5:4e:73:53:bc:15:0b:a0:f7:91:39:79:2e:97:d6:
                    90:39:19:9c:93:f1:f8:5d:af:17:4e:1d:08:c1:49:
                    1b:0f:18:38:69:ec:cd:7a:30:c3:81:b5:5c:c2:17:
                    7d:fd:87:42:70:d6:db:19:7d:c6:02:83:ce:ab:c8:
                    83:8a:4a:14:89:3c:24:bd:10:33:16:ed:97:b5:24:
                    0b:5a:f1:f3:9e:e1:3f:37:7e:50:53:2c:c6:95:94:
                    29:57:98:2d:41:3d:96:1a:c5:88:1f:72:a6:29:0a:
                    ee:ac:b8:ec:4a:4a:68:4c:cc:a2:48:82:67:97:9e:
                    55:2f:e9:45:d8:78:a6:c5:24:5d:70:7a:f2:99:3d:
                    71:c9:f9:9a:2b:1b:ad:c0:11:e4:9c:77:66:a7:0b:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:81:F5:93:B0:5F:B4:41:9D:61:F8:09:09:BD:89:E9:91:12:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507865FE842E11F1B66290ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.82.0/24
                  154.94.102.0-154.94.110.255

    Signature Algorithm: sha256WithRSAEncryption
         72:54:71:47:3e:20:db:9d:d7:b6:35:a9:fc:cb:6e:52:c2:da:
         c4:10:65:54:99:ad:25:40:35:e0:86:f7:38:76:57:24:0c:d3:
         7c:36:a9:e3:b2:fc:31:21:1f:58:54:11:39:6c:13:e1:1d:2d:
         be:51:71:14:9a:1c:f8:fd:ec:6b:ec:98:21:72:75:37:a8:ae:
         f2:c3:12:86:4e:a0:6f:0b:e0:e1:23:aa:18:51:ae:d3:21:90:
         ff:9f:2e:40:04:25:67:67:d3:7f:42:f2:b8:23:f2:d1:0f:78:
         4b:ed:92:49:19:21:c5:9f:42:6a:e2:8d:ee:64:ce:f9:5a:ac:
         74:06:16:93:1d:ae:dc:b7:4e:bc:80:d5:a9:8c:b0:6a:57:ef:
         6b:45:5d:a8:ff:17:f4:90:1f:4c:fa:0d:63:f0:cb:5c:12:37:
         40:3b:7e:90:06:60:d2:22:1d:8c:14:f4:eb:72:d9:c6:51:bf:
         23:3a:d7:b2:60:93:fc:88:60:5a:79:4d:19:f6:aa:f3:44:61:
         4a:4e:cf:de:9b:9e:2e:60:40:f5:f6:e1:9a:bd:1e:bf:f6:28:
         ec:e1:77:b4:17:3a:10:86:2c:4f:a2:fc:d9:16:2c:cd:70:6d:
         57:d6:31:b2:d9:df:46:78:81:f9:68:ff:59:96:f9:62:57:65:
         fd:65:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:37 2026 by rpki-client