Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413BB1A7B8911F18AAE9F0FCF1D38B0.roa
File:                     C413BB1A7B8911F18AAE9F0FCF1D38B0.roa (raw, json)
Hash identifier:          rI5ymOLwlSj9ogwYmPtiXTBfDaFmxM4O3/snwOz1EY8=
Subject key identifier:   9E:D8:12:1C:F0:12:42:31:48:CB:96:56:80:26:BD:2D:92:DE:77:8C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D7CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413BB1A7B8911F18AAE9F0FCF1D38B0.roa
Signing time:             Thu 09 Jul 2026 11:31:47 +0000
ROA not before:           Thu 09 Jul 2026 11:31:40 +0000
ROA not after:            Sat 01 Aug 2026 11:31:40 +0000
asID:                     63099
IP address blocks:        154.82.134.0/24 maxlen: 24
                          154.82.148.0/24 maxlen: 24
                          154.82.158.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120782 (0x1d7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul  9 11:31:40 2026 GMT
            Not After : Aug  1 11:31:40 2026 GMT
        Subject: CN=6a4f86a3-28dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:91:63:9a:58:55:10:5a:8b:6c:fc:43:23:
                    0b:2d:79:f3:bc:f1:d6:72:67:84:54:92:88:35:bd:
                    c0:e8:1d:c5:87:5c:35:6f:6b:96:fe:6d:59:a5:db:
                    60:0e:e0:2b:a9:ca:c8:be:81:83:3d:46:22:73:1a:
                    3b:f4:73:37:68:a2:fc:bb:37:d6:ca:42:12:0c:87:
                    aa:14:22:f9:91:c9:b0:9a:a3:ae:2f:c2:ab:0c:34:
                    53:25:ed:af:98:dc:af:ce:a1:56:09:84:eb:94:f1:
                    93:dd:44:e5:8c:7f:77:14:a8:01:2a:bc:18:b8:07:
                    54:b4:eb:10:81:df:6f:38:ed:d3:dd:0b:4f:1d:02:
                    dd:52:7f:b0:00:db:08:5a:76:21:49:85:59:e2:de:
                    6d:06:40:e0:d3:3c:29:6f:d6:22:20:78:b7:54:4f:
                    eb:3c:07:59:77:6a:c5:ef:09:f4:3a:7b:1d:0a:d2:
                    88:f5:52:e0:d1:75:34:ca:66:5b:2e:48:d1:0c:5d:
                    f0:8b:8c:4b:7b:fb:f3:58:61:e4:8a:69:a8:4f:38:
                    b5:c0:eb:19:cc:f3:d6:91:28:a9:31:45:c8:cb:dd:
                    c2:04:d5:f6:89:db:15:60:4e:ec:12:d8:ac:59:f4:
                    59:ab:91:53:4d:82:ee:09:34:12:7a:15:b3:34:19:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:12:1C:F0:12:42:31:48:CB:96:56:80:26:BD:2D:92:DE:77:8C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413BB1A7B8911F18AAE9F0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.134.0/24
                  154.82.148.0/24
                  154.82.158.0/24
                  154.90.134.0/24
                  154.90.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:63:a4:5d:dc:78:94:0d:2d:17:f7:22:c3:7b:27:10:45:8b:
         76:54:b7:e0:f9:c6:86:21:d8:72:51:5d:aa:23:22:2b:99:fb:
         0e:37:1c:01:b2:d9:a3:e7:a9:bd:8d:ee:18:62:24:bd:0f:40:
         df:60:29:f6:58:ff:27:cd:e2:69:d2:98:95:36:ad:10:b0:4a:
         2f:bb:09:f1:19:6c:6e:9a:0c:76:ad:bc:35:0a:ec:84:30:d8:
         af:1a:08:da:3a:f4:ae:00:af:15:5a:f2:23:fa:3b:de:82:eb:
         b5:39:01:09:97:cd:36:e6:03:06:d2:a6:99:76:20:50:bc:02:
         6f:5b:d1:c1:a0:04:20:7e:4c:be:20:fb:34:d5:cc:59:79:89:
         09:07:ad:86:cd:5f:53:9d:35:cf:39:b3:01:1c:dd:01:11:1a:
         24:c9:3f:2a:7c:ff:95:58:79:ed:65:d6:b4:7d:51:e1:17:01:
         5c:b3:44:36:23:62:41:a0:b5:14:0a:f9:b2:83:e3:13:6e:18:
         91:fd:8c:cb:aa:03:1d:f7:c8:2d:b3:7a:dc:0f:2c:53:2d:b3:
         e0:ee:29:b4:2a:bc:b0:f5:14:11:6d:18:2d:14:75:f3:05:2a:
         7b:23:e2:e8:cd:b0:d5:5b:60:42:7b:21:4b:b2:a3:33:24:ee:
         86:2c:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:31 2026 by rpki-client