Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5FD93E8C7B11F1AECD550FCF1D38B0.roa
File:                     1A5FD93E8C7B11F1AECD550FCF1D38B0.roa (raw, json)
Hash identifier:          PC23A7Wy1UrHX7p3D0+W//iAUpJ6OCQuSR6YU6hgnGQ=
Subject key identifier:   28:A3:B2:00:43:EA:36:79:9D:30:E0:F7:23:EB:A1:10:85:A7:E7:F0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DC04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5FD93E8C7B11F1AECD550FCF1D38B0.roa
Signing time:             Fri 31 Jul 2026 00:59:38 +0000
ROA not before:           Fri 31 Jul 2026 00:00:34 +0000
ROA not after:            Sun 09 Aug 2026 00:00:34 +0000
asID:                     140227
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.20.0/23 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/23 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.24.0/23 maxlen: 24
                          154.86.26.0/23 maxlen: 24
                          154.86.30.0/23 maxlen: 24
                          154.86.30.0/24 maxlen: 24
                          154.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Aug 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121860 (0x1dc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 31 00:00:34 2026 GMT
            Not After : Aug  9 00:00:34 2026 GMT
        Subject: CN=6a6bf37a-e7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:24:77:94:63:ea:bb:bf:5a:38:d4:e8:21:bf:
                    73:28:69:19:f9:0b:a3:a2:39:f1:16:6e:01:23:7a:
                    e0:e6:82:ed:50:cb:32:8e:26:55:c5:4c:01:0e:74:
                    bb:68:69:92:57:02:46:da:58:a5:69:fa:ff:85:9b:
                    31:0f:4e:25:4c:26:5d:92:3c:12:99:00:90:97:6f:
                    74:cc:f2:f9:ed:2f:ce:d9:23:2f:b4:fd:11:09:11:
                    87:80:a2:73:67:03:bb:7d:41:a5:81:6d:46:ef:b8:
                    53:3d:a4:7c:19:73:63:7a:8a:d4:bc:f2:2b:53:db:
                    5a:bc:36:28:4d:63:17:43:68:7e:8e:d9:a2:ad:5b:
                    63:2f:4c:30:9f:77:ff:de:a1:30:12:05:aa:64:b2:
                    f1:47:06:96:3a:d4:b2:3b:7a:31:65:d0:01:30:91:
                    d3:f6:06:a2:72:18:80:df:4e:1b:0f:23:21:63:cb:
                    10:69:dc:7c:fb:f3:36:f9:68:61:58:f1:c7:a6:4c:
                    a6:46:63:d6:ec:40:86:b9:f9:63:68:ef:cb:40:10:
                    01:78:71:41:0f:d4:b3:a0:f6:cb:c6:8b:3e:12:17:
                    1a:2f:8a:6e:8e:77:88:76:05:66:38:81:85:ee:ad:
                    dd:68:ef:33:d6:2e:1b:26:dc:a9:e1:92:f4:63:0e:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:B2:00:43:EA:36:79:9D:30:E0:F7:23:EB:A1:10:85:A7:E7:F0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5FD93E8C7B11F1AECD550FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:0e:1f:a2:6a:44:09:0d:d7:ac:b9:fb:b3:25:19:f9:3f:
         be:d4:23:98:94:57:7e:ff:bc:d7:ab:68:f2:b2:16:95:5f:54:
         86:0a:38:20:61:1c:d3:2b:be:ff:4a:45:1b:1a:bd:0a:77:a9:
         1a:ab:7e:ee:26:5b:0d:de:01:77:5f:03:5b:93:a0:5a:f0:38:
         75:de:89:c5:7e:3c:aa:63:d2:cb:d6:ac:85:a8:fe:e5:b5:3d:
         5d:d7:dc:a4:bf:f8:06:ff:81:f3:c1:b8:99:f4:f7:3a:76:c3:
         e3:90:d4:1f:c2:77:c8:87:91:0e:56:fe:89:a9:16:5f:42:46:
         cb:6a:d1:e6:c8:2a:ff:32:5a:52:67:fa:4b:fa:bd:a2:f6:c1:
         6f:98:9a:b4:d8:b8:cd:ac:b1:e1:7e:2a:c3:da:ef:ba:43:31:
         b0:c2:42:53:af:43:1c:d7:a1:29:50:05:41:fc:9a:6b:7e:e1:
         f1:a0:a6:1b:52:b9:a4:c5:a7:dc:2f:76:82:12:8e:d0:67:5c:
         0e:fa:a6:7d:c9:ae:fb:58:71:5b:e6:2f:41:23:26:d5:78:33:
         12:8b:7e:e0:1b:1a:81:a2:3f:90:0a:9c:26:e5:2e:f2:a7:01:
         31:97:c0:c2:2f:2c:4d:02:64:9e:b8:21:55:cd:4c:44:d1:02:
         57:6c:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client