Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130DC830E11F1852E5B09CF1D38B0.roa
File:                     EE6130DC830E11F1852E5B09CF1D38B0.roa (raw, json)
Hash identifier:          pBkW3mqwTtlyC8ALL6+5ZP+z+qI0frE0aV+B66vVKb4=
Subject key identifier:   03:92:92:4B:54:FD:09:8C:93:5E:C6:1C:63:6C:13:67:81:1C:58:E1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D98D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130DC830E11F1852E5B09CF1D38B0.roa
Signing time:             Sun 19 Jul 2026 01:12:38 +0000
ROA not before:           Sun 19 Jul 2026 01:12:34 +0000
ROA not after:            Sun 26 Jul 2026 01:12:34 +0000
asID:                     17497
IP address blocks:        154.196.135.0/24 maxlen: 24
                          154.196.140.0/23 maxlen: 24
                          154.196.140.0/24 maxlen: 24
                          154.196.164.0/22 maxlen: 24
                          154.196.164.0/23 maxlen: 24
                          154.196.164.0/24 maxlen: 24
                          154.196.216.0/21 maxlen: 24
                          154.196.216.0/22 maxlen: 24
                          154.196.216.0/23 maxlen: 24
                          154.196.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121229 (0x1d98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 19 01:12:34 2026 GMT
            Not After : Jul 26 01:12:34 2026 GMT
        Subject: CN=6a5c2486-e392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:eb:d1:7c:4f:98:9d:d1:d2:52:7a:6a:b5:
                    94:74:60:19:be:79:03:0d:88:44:e7:28:19:96:08:
                    b3:46:3f:cf:28:58:7b:90:fa:cd:c3:80:9e:d1:d4:
                    57:7f:f6:9e:8c:2d:35:1e:7e:71:03:18:05:e7:6e:
                    27:74:6f:a6:97:a7:cf:e7:d3:1f:39:58:8e:3f:54:
                    ed:3e:21:69:e2:63:a8:47:b4:16:97:c1:61:7b:7f:
                    8a:e3:18:8d:c9:62:3e:40:17:ae:9f:16:d2:f6:26:
                    12:8c:e1:66:e6:ef:ea:a1:21:6d:0c:68:98:79:5f:
                    b0:6f:5b:e8:2b:17:8e:45:d9:e9:8a:bf:bb:68:2c:
                    20:9e:bf:01:98:49:b8:e5:43:9b:61:b5:33:07:22:
                    ce:65:14:3a:57:f9:e8:7a:29:3d:f1:b7:b1:44:e2:
                    db:58:e1:50:57:55:76:1b:24:e4:e8:d9:89:be:16:
                    c5:1f:ff:a9:cc:eb:cc:15:60:96:08:e6:f6:fd:73:
                    88:0f:a9:24:76:5b:a3:9a:9d:05:98:c0:81:bd:c2:
                    48:ea:d1:e2:71:3b:06:79:02:79:1e:13:23:c7:86:
                    58:9f:8f:ec:3c:e7:67:10:76:3d:83:d4:67:b9:0d:
                    61:bb:f9:2e:e0:4d:1f:60:c4:d7:54:8b:b7:30:bd:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:92:4B:54:FD:09:8C:93:5E:C6:1C:63:6C:13:67:81:1C:58:E1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130DC830E11F1852E5B09CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.135.0/24
                  154.196.140.0/23
                  154.196.164.0/22
                  154.196.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d5:53:5c:cb:e4:85:63:f2:e4:3b:4b:c9:9d:ac:90:5e:22:03:
         9e:d8:ec:18:4f:7b:2b:66:1d:34:65:e3:3a:62:20:ae:6f:38:
         01:c2:24:5f:55:9d:fc:ea:62:ed:75:ad:25:52:01:03:6e:04:
         0d:6e:2f:83:1d:18:21:be:73:9a:29:af:f0:84:58:6d:9c:26:
         04:88:70:6b:69:0c:70:f7:3c:f8:43:ff:95:99:e2:a5:66:1d:
         c5:82:5e:e9:de:7a:44:b3:08:42:c8:99:10:60:f2:d9:34:ea:
         75:ad:53:6d:e0:f5:2c:b5:19:7b:c6:92:1d:ef:9f:0a:97:ae:
         e6:e0:2a:76:21:9d:97:c1:18:31:46:d6:f0:26:e8:e5:2e:49:
         bc:30:e1:44:2e:69:3e:a2:c3:11:d2:c7:cf:8c:95:e5:23:bb:
         8f:aa:32:b7:5f:31:2f:4b:ab:38:25:4c:35:9c:22:8d:b9:dc:
         b7:73:28:d4:bc:a6:30:b5:5d:ff:17:d4:26:7e:2b:0c:ac:99:
         b3:b5:4d:4c:85:97:26:f5:7a:65:8a:02:70:61:5e:66:71:59:
         c4:86:66:5d:fb:23:70:d9:ed:77:b0:58:5e:d8:99:2c:ec:61:
         57:5e:c7:0a:df:23:43:66:8e:26:1f:9e:1c:99:eb:1e:16:c9:
         24:79:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:54 2026 by rpki-client