Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01247330909F11F1923308CECE1D38B0.roa
File:                     01247330909F11F1923308CECE1D38B0.roa (raw, json)
Hash identifier:          s6OR1jqCnYHVXocb9heSUJP1UReJL3IsAPVvxFWsV3E=
Subject key identifier:   67:56:C1:E1:CC:7D:BB:9F:6C:7B:17:D4:E2:68:DF:EA:5C:2A:80:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DCB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01247330909F11F1923308CECE1D38B0.roa
Signing time:             Wed 05 Aug 2026 07:26:42 +0000
ROA not before:           Wed 05 Aug 2026 07:26:38 +0000
ROA not after:            Wed 16 Sep 2026 07:26:38 +0000
asID:                     272854
IP address blocks:        154.194.13.0/24 maxlen: 24
                          154.194.14.0/24 maxlen: 24
                          154.194.54.0/24 maxlen: 24
                          154.197.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122039 (0x1dcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  5 07:26:38 2026 GMT
            Not After : Sep 16 07:26:38 2026 GMT
        Subject: CN=6a72e5b2-0519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:7d:56:4f:49:2b:0c:e9:94:58:2e:7e:ee:
                    b6:b3:96:f2:37:04:5f:4c:2d:50:80:d9:54:5f:34:
                    6a:2e:9d:bc:ed:e3:a9:08:d6:83:ce:9a:ef:2a:9b:
                    80:95:c5:b2:63:db:fc:37:42:38:89:b8:40:ba:9d:
                    97:8a:5c:33:54:c6:05:d9:b0:92:d1:f4:1c:ce:a2:
                    cb:34:4e:51:9a:10:66:02:01:aa:d3:66:9a:17:bf:
                    07:ed:f7:4f:57:ae:df:14:c1:21:d5:c6:d9:b6:91:
                    f4:3b:4c:58:e3:d9:f7:fd:fb:2e:70:b7:cd:eb:96:
                    86:6a:1f:02:a4:aa:f0:7b:b5:63:18:5b:84:18:d7:
                    1f:2b:5a:9a:bf:dd:3d:d8:34:39:eb:55:6e:53:a5:
                    fc:4c:85:bc:2b:06:cc:4d:73:ff:c3:68:ce:75:50:
                    25:48:10:cf:86:24:2a:07:f2:be:32:f5:3c:83:ff:
                    ea:05:f7:13:eb:e6:bb:5f:27:f1:ee:00:ab:97:9c:
                    63:e1:e0:69:4f:41:1a:02:d4:a3:4e:7f:9f:fc:e3:
                    c1:c8:af:eb:05:39:0f:98:d7:2f:c9:5c:cb:dc:93:
                    cb:aa:a5:a2:fb:f7:88:5a:0f:5e:51:ba:07:c2:a4:
                    66:b1:ab:17:8e:28:d3:55:d8:d1:fe:3a:2b:bc:90:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:C1:E1:CC:7D:BB:9F:6C:7B:17:D4:E2:68:DF:EA:5C:2A:80:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01247330909F11F1923308CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.13.0-154.194.14.255
                  154.194.54.0/24
                  154.197.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:98:cc:38:d3:e6:33:62:07:d2:c2:88:da:ef:92:96:1f:5e:
         1c:ab:e2:0e:f5:56:89:d7:46:5b:86:0d:21:89:7a:72:6d:d1:
         17:0e:08:b4:38:ba:ce:2a:8d:85:1e:57:ea:5b:a2:8d:da:fb:
         ca:dd:ab:61:34:02:59:da:82:12:e3:f5:2d:c7:bb:40:56:ba:
         e5:25:c3:3c:33:9c:c8:74:fc:e0:36:94:3b:4a:6d:36:9d:ea:
         5c:0c:04:c3:3b:3b:64:15:80:e9:01:9a:c0:ef:9c:a7:68:a3:
         18:63:6d:c3:61:e6:42:8a:75:4f:9e:4e:b1:2a:4a:8f:ac:18:
         6f:0b:2c:85:66:a3:7a:8a:fa:7e:70:cb:21:c3:6f:4f:61:18:
         78:fd:60:01:dd:8f:5f:d2:93:d9:1e:bc:e9:b0:4c:35:35:dc:
         72:5c:c2:02:f3:ff:ff:66:92:f8:88:10:9a:da:7e:9e:81:fe:
         c8:30:8a:a9:b5:eb:88:3d:7b:44:ef:39:26:a4:18:40:b3:aa:
         1a:81:32:de:b3:6d:3a:b2:83:78:41:fe:c9:d5:b6:ed:2c:f7:
         e0:c7:e8:af:f8:bf:12:ec:c6:c6:ed:fc:c8:d2:18:e9:f2:93:
         e2:93:bc:c0:07:8f:96:43:71:01:4d:2e:b3:b4:5f:2f:77:4b:
         5f:d1:ce:88
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdy3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDcyNjM4WhcNMjYwOTE2MDcyNjM4WjAYMRYw
FAYDVQQDEw02YTcyZTViMi0wNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsoZ9Vk9JKwzplFgufu62s5byNwRfTC1QgNlUXzRqLp287eOpCNaDzprv
KpuAlcWyY9v8N0I4ibhAup2XilwzVMYF2bCS0fQczqLLNE5RmhBmAgGq02aaF78H
7fdPV67fFMEh1cbZtpH0O0xY49n3/fsucLfN65aGah8CpKrwe7VjGFuEGNcfK1qa
v9092DQ561VuU6X8TIW8KwbMTXP/w2jOdVAlSBDPhiQqB/K+MvU8g//qBfcT6+a7
Xyfx7gCrl5xj4eBpT0EaAtSjTn+f/OPByK/rBTkPmNcvyVzL3JPLqqWi+/eIWg9e
UboHwqRmsasXjijTVdjR/jorvJAliwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGdW
weHMfbufbHsX1OJo3+pcKoC+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTI0NzMzMDkwOUYxMUYxOTIzMzA4Q0VDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACawg0DBACawg4DBACa
wjYDBACaxQEwDQYJKoZIhvcNAQELBQADggEBAFWYzDjT5jNiB9LCiNrvkpYfXhyr
4g71VonXRluGDSGJenJt0RcOCLQ4us4qjYUeV+pboo3a+8rdq2E0AlnaghLj9S3H
u0BWuuUlwzwznMh0/OA2lDtKbTad6lwMBMM7O2QVgOkBmsDvnKdooxhjbcNh5kKK
dU+eTrEqSo+sGG8LLIVmo3qK+n5wyyHDb09hGHj9YAHdj1/Sk9kevOmwTDU13HJc
wgLz//9mkviIEJrafp6B/sgwiqm164g9e0TvOSakGECzqhqBMt6zbTqyg3hB/snV
tu0s9+DH6K/4vxLsxsbt/MjSGOnyk+KTvMAHj5ZDcQFNLrO0Xy93S1/Rzog=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:41 2026 by rpki-client