Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205F77A28F0C11F1993CC3C2CE1D38B0.roa
File:                     205F77A28F0C11F1993CC3C2CE1D38B0.roa (raw, json)
Hash identifier:          AUVbRAr3qPjBaz/BTosUFf2Q3hU21NM97kkJacRiYDQ=
Subject key identifier:   80:D6:59:B9:A4:9D:D0:41:5F:45:29:94:6B:08:22:84:9F:29:DC:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DC64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205F77A28F0C11F1993CC3C2CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:22:47 +0000
ROA not before:           Mon 03 Aug 2026 07:22:43 +0000
ROA not after:            Wed 09 Sep 2026 07:22:43 +0000
asID:                     8254
IP address blocks:        154.219.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121956 (0x1dc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  3 07:22:43 2026 GMT
            Not After : Sep  9 07:22:43 2026 GMT
        Subject: CN=6a7041c7-8b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:4e:f5:e0:96:01:37:0e:18:83:79:b5:9f:
                    de:dc:92:16:8a:8e:f6:e6:e9:22:57:c7:71:9b:b9:
                    61:ab:a3:03:bb:0e:25:19:50:0c:7f:64:a0:09:bf:
                    19:de:ba:d8:7b:81:28:fc:e4:e8:91:11:93:fc:31:
                    b5:19:7d:7d:66:1a:2d:90:bc:3d:36:a6:f5:a9:b7:
                    43:64:56:dc:fb:91:7f:74:62:bc:89:73:57:ce:d0:
                    38:ca:08:65:15:bc:95:08:c4:fc:c9:e6:db:81:03:
                    ea:75:7c:de:02:3f:2c:2c:7c:3f:96:5b:10:21:ae:
                    24:25:6a:fa:d3:6d:19:04:4b:8d:df:b3:eb:fd:91:
                    a1:04:0c:4d:61:51:a3:f4:06:95:84:10:00:f2:c4:
                    63:82:1a:f1:d2:de:f7:dd:7f:05:8d:60:5e:ca:23:
                    02:9a:cc:dc:bd:e0:5f:66:b1:60:7e:7c:be:8c:87:
                    54:d2:1c:99:78:98:4f:b9:1c:5c:11:5d:e8:76:b8:
                    62:a9:9c:49:b4:74:43:56:c6:a8:bb:ea:c6:f9:6b:
                    13:53:35:60:8a:7e:b1:41:5d:d9:e8:84:76:34:7e:
                    0a:ba:7c:0f:36:7c:12:ca:75:eb:ee:d2:8c:6b:0b:
                    af:11:31:a8:c8:ad:a8:87:6f:9f:5f:b7:bf:ee:5b:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:59:B9:A4:9D:D0:41:5F:45:29:94:6B:08:22:84:9F:29:DC:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205F77A28F0C11F1993CC3C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:fb:76:eb:1a:ad:63:bf:95:9a:9e:42:43:8f:97:e3:1d:
         87:74:b1:20:44:09:f7:5d:16:99:c2:6f:8a:0d:b5:a9:33:dd:
         4a:db:a2:7f:4e:3c:17:77:57:57:dc:ea:aa:b9:63:37:49:28:
         d5:ed:ec:82:7f:c6:15:22:a4:93:f2:75:e9:06:be:6e:bc:fb:
         e7:8a:f6:d8:06:19:0f:11:0a:1f:93:e3:9c:39:4d:f6:cd:31:
         de:22:c1:e1:23:92:48:89:37:73:bb:13:1f:23:c6:83:0d:ff:
         b1:e6:68:ce:45:87:60:df:1a:ff:c0:91:e6:9b:37:79:1e:df:
         e2:89:be:1f:c8:b6:7d:24:de:2b:d8:23:e7:e4:bf:e4:54:50:
         a8:7e:42:79:42:d3:fe:5c:75:bb:37:8a:62:f7:c7:77:7d:cf:
         da:61:4f:d3:08:82:72:14:14:61:5d:19:14:d9:1e:ac:76:84:
         65:54:c2:8e:1b:27:ec:7f:9b:3d:e6:46:e1:98:7e:2b:d2:33:
         4b:01:fb:71:02:dc:1c:5e:c1:a9:81:ab:bc:c9:10:61:1c:c5:
         bc:ac:3b:4a:35:a1:5a:da:70:a9:75:b2:bb:5e:8b:a2:95:d7:
         7b:ae:3c:0c:1c:c2:da:3c:67:e0:d0:1c:ec:9e:af:a9:0e:b5:
         ed:b7:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:43 2026 by rpki-client