Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEEDFB4842C11F1951167E4CE1D38B0.roa
File:                     ECEEDFB4842C11F1951167E4CE1D38B0.roa (raw, json)
Hash identifier:          sqqh12e+5D853vfEDJ4/9EV+mfzszpbNeKXN1G3wkbg=
Subject key identifier:   43:E8:AD:D2:35:16:5F:A4:CB:58:3B:DC:F2:09:31:4C:0F:88:F5:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DA06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEEDFB4842C11F1951167E4CE1D38B0.roa
Signing time:             Mon 20 Jul 2026 11:19:52 +0000
ROA not before:           Mon 20 Jul 2026 11:19:48 +0000
ROA not after:            Thu 27 Aug 2026 11:19:48 +0000
asID:                     138915
IP address blocks:        154.93.110.0/24 maxlen: 24
                          154.93.111.0/24 maxlen: 24
                          154.93.114.0/24 maxlen: 24
                          154.93.115.0/24 maxlen: 24
                          154.93.116.0/22 maxlen: 24
                          154.93.120.0/24 maxlen: 24
                          154.93.121.0/24 maxlen: 24
                          154.93.122.0/24 maxlen: 24
                          154.93.124.0/23 maxlen: 24
                          154.93.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121350 (0x1da06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 20 11:19:48 2026 GMT
            Not After : Aug 27 11:19:48 2026 GMT
        Subject: CN=6a5e0458-69b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:c9:0b:14:09:0d:09:50:86:b7:cd:c8:67:
                    70:48:3c:c1:47:78:7e:8f:14:06:0d:ff:ca:dd:3d:
                    a6:75:44:74:5c:d1:6c:d8:0e:d7:d4:23:49:a4:ae:
                    e8:45:4d:06:ac:8f:1c:01:0f:86:c5:7d:f2:be:d8:
                    ca:b2:86:98:2e:ca:a9:f3:a5:cb:17:17:9f:30:f7:
                    00:85:9d:f1:ff:b1:45:3a:42:ba:32:8f:75:36:d9:
                    d6:e7:93:f5:ef:37:cd:d5:c0:78:2f:1b:6a:f5:94:
                    8a:2c:3a:d8:e6:66:66:fd:f8:29:18:a7:55:78:eb:
                    f6:00:4c:c5:48:f8:93:47:cb:ac:c5:37:36:27:d2:
                    f7:8e:a0:34:9a:ee:52:26:dd:c0:ba:9f:66:9b:a2:
                    36:ed:71:db:83:0a:19:33:f5:1d:b2:1f:7d:5c:c4:
                    97:79:bc:1b:14:31:06:e1:76:00:98:4a:08:00:e1:
                    a1:9b:33:33:71:7a:c3:4c:cb:31:9f:0e:d8:ea:b1:
                    c7:01:77:f8:b1:1c:5a:47:b9:47:6f:42:1c:7d:8e:
                    e9:46:28:1f:76:50:fd:11:f4:97:32:f5:32:48:8d:
                    5c:07:4a:82:c8:3a:53:1f:54:c1:2c:96:f0:e9:0d:
                    2e:e4:a0:e1:ec:19:8e:86:ac:28:0e:9e:aa:ed:fc:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:AD:D2:35:16:5F:A4:CB:58:3B:DC:F2:09:31:4C:0F:88:F5:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEEDFB4842C11F1951167E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.110.0/23
                  154.93.114.0-154.93.122.255
                  154.93.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:e9:a0:ab:b2:24:62:7a:d4:28:a3:6a:0a:db:ca:20:90:ba:
         31:5e:91:80:c3:68:5a:d9:59:48:a7:71:52:8a:6e:22:c2:4e:
         bd:a2:2a:bf:2d:81:ad:9a:63:b8:d6:79:df:ea:46:75:09:12:
         95:d1:8e:d2:ff:6c:3e:e3:23:f9:12:b5:78:0d:6f:43:80:58:
         2b:52:19:19:74:28:8e:07:89:06:33:f5:09:59:49:ef:45:ee:
         3f:1c:4e:47:a1:69:db:7a:86:1c:3a:d4:66:28:32:b0:57:d7:
         04:36:65:6c:e7:45:34:6c:c1:c3:59:aa:f9:92:3b:d0:19:f0:
         0c:31:8a:93:3e:3d:b2:9a:3d:3f:3d:32:82:f1:cb:13:4c:8b:
         ee:cb:c5:8d:e5:12:d2:1a:9c:26:79:9e:9d:ce:33:e9:d7:ab:
         6d:86:89:e0:66:48:e2:32:d3:7d:be:54:32:11:8e:e7:4a:81:
         4e:9b:43:19:70:d5:79:05:b7:16:a2:68:b0:49:98:9c:9f:73:
         0f:0d:97:81:0a:43:2e:6f:0a:6e:dd:42:74:7b:42:ca:29:90:
         ba:aa:61:83:67:1d:2b:1e:12:dd:fb:b4:c9:e5:90:e9:32:50:
         c7:7b:c0:97:96:e9:0c:fa:6a:b6:60:22:2c:e0:7b:ed:4a:b1:
         b3:a3:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:50 2026 by rpki-client