Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766697E8721011F1A119B9BECE1D38B0.roa
File:                     766697E8721011F1A119B9BECE1D38B0.roa (raw, json)
Hash identifier:          Nu20qCZPZEF5RopkGwyPuH7adcfZwRrsdDVO1jYhO/w=
Subject key identifier:   06:D2:60:20:C1:A8:41:8A:25:4E:C3:36:3B:95:CA:1B:56:27:2C:5E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D594
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766697E8721011F1A119B9BECE1D38B0.roa
Signing time:             Sat 27 Jun 2026 10:10:46 +0000
ROA not before:           Sat 27 Jun 2026 10:10:41 +0000
ROA not after:            Thu 30 Jul 2026 10:10:41 +0000
asID:                     32043
IP address blocks:        154.195.8.0/24 maxlen: 24
                          154.195.9.0/24 maxlen: 24
                          154.195.10.0/24 maxlen: 24
                          154.195.11.0/24 maxlen: 24
                          154.195.12.0/24 maxlen: 24
                          154.195.13.0/24 maxlen: 24
                          154.195.14.0/23 maxlen: 24
                          154.200.8.0/22 maxlen: 24
                          154.200.12.0/22 maxlen: 24
                          154.200.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120212 (0x1d594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 27 10:10:41 2026 GMT
            Not After : Jul 30 10:10:41 2026 GMT
        Subject: CN=6a3fa1a6-be57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:be:c5:e2:cb:f9:c4:7d:ce:5c:5d:ca:6c:
                    bc:40:a3:85:9f:7a:b7:06:48:d1:ab:1c:31:c1:c6:
                    c9:5a:48:f5:3a:3a:85:e0:02:53:7c:b4:c0:7b:f3:
                    d3:0e:4e:1a:9f:85:f2:01:6b:67:c2:95:58:56:80:
                    46:66:54:5c:c1:aa:d8:3b:3a:aa:6b:17:a9:0f:41:
                    0c:1c:05:8f:bb:fe:d8:b5:ce:07:91:0f:b7:68:01:
                    bc:11:e6:bd:13:70:cf:19:06:34:6b:60:8d:6b:25:
                    04:99:d7:87:16:67:ba:8f:41:da:ec:18:79:4a:f4:
                    5f:13:85:09:08:38:c4:ea:81:e0:76:d3:11:b5:56:
                    37:bb:c8:9e:c4:04:c2:5c:09:4c:62:11:f0:be:be:
                    70:24:f2:d0:8a:5d:69:51:48:9d:bf:d5:19:39:7a:
                    65:59:6c:4b:8c:4e:2a:d2:a0:82:4a:fe:cb:3a:31:
                    1e:f2:2e:71:71:b6:f2:53:b8:cc:62:55:c4:dc:88:
                    17:3a:83:5e:97:4f:6e:5b:a1:4e:31:ac:21:ba:b3:
                    ef:a0:33:18:d6:04:8f:83:53:b7:51:30:c9:27:7e:
                    ea:22:69:fd:0d:d6:81:f4:dc:c3:ee:f2:c5:e9:f8:
                    ac:e0:d7:01:2c:a9:eb:ed:89:f2:50:6f:10:b3:71:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:60:20:C1:A8:41:8A:25:4E:C3:36:3B:95:CA:1B:56:27:2C:5E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766697E8721011F1A119B9BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.8.0/21
                  154.200.8.0-154.200.17.255

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:d5:fa:13:87:90:e2:df:20:9b:7e:db:d5:d5:41:74:45:
         30:1d:f7:87:10:2b:71:47:20:11:0c:58:a0:28:7b:0b:58:90:
         96:30:d2:3a:7f:ee:fe:f4:d1:34:2d:f8:5c:41:9c:ad:e7:e3:
         05:03:29:ce:e6:ee:b0:b9:2b:18:0e:8d:ff:4a:a0:9c:85:0f:
         ac:05:ff:a9:34:74:2f:4d:4b:0d:7e:af:4a:d3:10:04:81:6d:
         09:7f:83:4d:c7:8c:33:d7:4f:97:f2:0d:1c:f3:03:c5:6b:d6:
         45:b2:b7:6b:72:bb:45:39:3f:87:c2:90:31:64:d4:08:fd:dc:
         c2:a7:7b:76:4b:65:e4:7c:73:b8:28:c8:80:c3:cf:dc:d5:19:
         e9:1e:a6:e6:4e:09:2e:4c:c1:c9:7d:d3:97:b6:ef:da:fa:7b:
         48:26:5b:14:87:60:59:c7:c5:0b:aa:59:5d:b1:bb:d3:2d:d8:
         d5:5d:c4:d0:cd:3d:5b:77:1f:d0:08:14:d9:9c:f4:19:1c:49:
         b9:84:d7:45:1d:02:33:01:2e:ff:49:4a:ff:f0:5b:dc:16:57:
         20:2d:3a:1d:81:3c:3a:c8:aa:1f:92:c8:d7:f4:8c:28:94:3d:
         5c:1e:ba:4d:39:80:d0:62:6f:ce:e7:34:60:9a:81:e1:4d:ab:
         98:a7:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:57:42 2026 by rpki-client