Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6732CCBA841711F197433EE3CE1D38B0.roa
File:                     6732CCBA841711F197433EE3CE1D38B0.roa (raw, json)
Hash identifier:          QWMGCZbZviuqr1YOF3CHLD4VpPqKrCOrbUPUW+eC+bY=
Subject key identifier:   77:4B:C9:39:18:54:B1:A1:DB:91:89:A4:88:4B:52:E4:1E:91:1E:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D9C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6732CCBA841711F197433EE3CE1D38B0.roa
Signing time:             Mon 20 Jul 2026 08:45:48 +0000
ROA not before:           Mon 20 Jul 2026 08:45:44 +0000
ROA not after:            Thu 19 Jul 2029 08:45:44 +0000
asID:                     17561
IP address blocks:        154.88.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121286 (0x1d9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 20 08:45:44 2026 GMT
            Not After : Jul 19 08:45:44 2029 GMT
        Subject: CN=6a5de03c-ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:09:82:58:52:ec:bb:aa:6f:50:b7:2c:03:
                    5d:40:30:ac:1c:29:ca:ee:37:0b:46:00:f0:41:8c:
                    06:45:da:8e:df:92:5e:37:07:cf:05:36:7f:5f:1a:
                    b2:b4:80:6c:b3:5d:7e:41:7f:d3:3c:c5:90:b5:94:
                    1a:8a:25:8f:85:4d:24:5c:bd:0f:87:05:03:6e:5b:
                    52:0a:13:d3:f2:9a:d6:b0:28:2e:86:43:7a:3c:93:
                    0b:e5:ca:12:e2:81:5b:bd:18:2b:19:3d:23:77:5c:
                    5a:ef:eb:76:90:63:74:12:66:8c:67:93:f4:e3:2a:
                    40:17:0f:e3:97:2f:d2:fc:95:9d:13:13:f9:0d:b9:
                    68:64:8d:cd:ba:a4:04:69:ce:cf:c5:53:2a:3d:b9:
                    7d:af:31:fe:36:a6:ef:26:a0:66:91:42:62:e0:2d:
                    ba:04:02:c3:85:c8:72:2d:4f:db:f4:bf:6a:8a:f1:
                    47:e7:06:10:a0:12:fb:c7:44:5f:e9:c6:56:af:4f:
                    89:82:d5:02:fb:94:7f:76:82:cd:93:af:7d:ee:a5:
                    a3:d1:de:29:bd:47:45:9d:1f:90:e7:4a:65:79:88:
                    5d:08:70:d4:1b:fe:27:3a:05:1f:e0:28:ed:cb:4c:
                    21:3a:22:5c:6e:e8:c5:d7:26:b2:ef:a1:11:86:68:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:C9:39:18:54:B1:A1:DB:91:89:A4:88:4B:52:E4:1E:91:1E:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6732CCBA841711F197433EE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:e6:ed:6b:5b:e9:ac:e1:ac:91:33:e2:aa:e3:2c:77:2c:
         3a:ea:41:cd:bb:f9:d6:af:cb:81:ed:fd:9f:2f:a2:4e:bd:81:
         1f:6f:ee:93:76:1b:29:7d:b4:a3:6d:c7:47:62:b0:d4:59:6c:
         50:d0:c2:7b:77:c9:ae:c0:32:b0:17:1b:94:86:79:ea:04:1e:
         7b:4b:cc:f3:25:02:d1:d9:64:2f:82:cc:fc:5a:bc:7f:b0:d4:
         1b:38:ab:13:e9:f1:96:92:2e:63:a9:0e:a8:35:78:6e:1a:06:
         75:e2:49:91:48:e5:23:d4:8c:99:67:ee:1c:39:66:5c:57:0e:
         5b:93:2d:bd:97:72:00:e3:57:8e:a0:7b:75:28:98:60:21:45:
         04:46:fe:c7:66:a3:3e:ee:78:d6:6c:27:1e:54:7f:82:f6:a7:
         8a:8e:e5:1a:1d:fd:c8:98:93:a7:23:36:9d:80:fa:0b:83:10:
         fb:7c:ed:83:87:38:05:b2:82:29:f2:7d:8e:93:e3:33:e7:b0:
         a4:0d:c9:59:68:4d:1e:77:99:8b:37:5a:92:68:c1:2d:51:f0:
         01:35:4a:e3:f4:39:b8:8e:38:cc:1b:cf:54:b7:1a:93:da:08:
         43:56:4b:45:e2:ac:bc:ad:84:2f:f2:95:88:72:8a:cc:e8:8b:
         4a:be:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:38 2026 by rpki-client