Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374B75C67B6E11F1AAA754E8CE1D38B0.roa
File:                     374B75C67B6E11F1AAA754E8CE1D38B0.roa (raw, json)
Hash identifier:          qz9fh1fTCRXoFuwerQMcLnZfb5yLiOtEdu6i+QCL4W0=
Subject key identifier:   7A:61:76:76:86:0A:E0:C0:DD:A5:6D:4A:C5:22:4D:FB:72:6F:DF:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D7B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374B75C67B6E11F1AAA754E8CE1D38B0.roa
Signing time:             Thu 09 Jul 2026 08:14:33 +0000
ROA not before:           Thu 09 Jul 2026 08:14:29 +0000
ROA not after:            Mon 09 Jul 2029 08:14:29 +0000
asID:                     17561
IP address blocks:        154.80.148.0/24 maxlen: 24
                          154.80.149.0/24 maxlen: 24
                          154.80.150.0/24 maxlen: 24
                          154.80.151.0/24 maxlen: 24
                          154.80.152.0/24 maxlen: 24
                          154.80.153.0/24 maxlen: 24
                          154.80.154.0/24 maxlen: 24
                          154.80.155.0/24 maxlen: 24
                          154.80.156.0/24 maxlen: 24
                          154.80.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120753 (0x1d7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul  9 08:14:29 2026 GMT
            Not After : Jul  9 08:14:29 2029 GMT
        Subject: CN=6a4f5869-7afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:1d:29:f3:13:07:48:87:50:0f:c0:f8:7a:
                    de:75:45:03:57:19:3a:14:08:9a:3c:c1:d5:1c:d5:
                    4e:bb:30:33:4e:1b:bb:5a:11:3b:e7:fe:8e:0a:fd:
                    35:10:fa:98:bb:a5:e0:bd:f4:97:1c:ae:38:9e:b9:
                    7c:a4:d7:bc:d3:2f:a2:b7:e0:ea:00:06:1b:eb:9b:
                    1c:5b:e9:1a:77:fe:1a:93:a9:5d:ed:3f:8a:d2:73:
                    df:d7:aa:0f:13:e8:30:dd:d8:30:44:bc:b8:62:1a:
                    7d:d0:34:20:db:8d:a2:d2:b7:19:66:1d:2d:8f:d0:
                    71:f2:79:aa:9c:eb:cf:13:45:04:b6:12:7a:93:b9:
                    68:2e:c5:b4:c2:8f:c5:c6:22:ec:f3:83:e9:0c:75:
                    bf:19:2f:46:a7:16:c3:ba:b5:de:3e:86:2a:ed:32:
                    2f:82:a7:ee:d9:62:fb:53:8f:4c:63:4c:a3:80:9d:
                    d2:ed:e6:54:ac:d6:7d:9e:50:af:18:e2:f7:3d:aa:
                    c3:4d:06:b3:18:1a:e6:13:d3:9b:3e:e7:c7:bc:12:
                    36:f4:37:1e:2e:32:2c:4e:ca:4e:03:44:e8:ee:04:
                    e9:a4:5d:8d:5c:13:da:05:b3:82:f6:95:fe:2c:95:
                    68:15:fb:f0:36:7c:cc:6e:df:bc:86:d5:eb:93:69:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:76:76:86:0A:E0:C0:DD:A5:6D:4A:C5:22:4D:FB:72:6F:DF:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374B75C67B6E11F1AAA754E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.148.0-154.80.157.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:7d:c4:16:88:6a:b3:ad:4e:3c:d1:07:c9:70:d7:02:37:
         51:88:0e:59:90:01:bb:e0:1f:9a:89:f3:2a:90:7b:fc:13:a5:
         30:8d:8c:40:34:c7:d1:4a:19:6a:48:fd:2a:4a:59:79:35:74:
         a9:4f:ae:fd:f8:19:15:da:a5:be:98:de:cc:2e:f9:e5:3c:6c:
         87:3d:d3:59:96:1c:9a:53:d5:7f:ab:68:63:0c:67:26:f5:c9:
         bb:13:1f:55:ed:5f:e8:26:07:64:c5:70:1f:0e:f9:ed:31:c3:
         62:81:b4:28:e3:65:aa:09:d0:82:b6:d9:0c:77:45:81:cf:63:
         2d:4a:aa:7c:cf:8a:ec:f8:d7:7b:63:91:be:35:eb:2c:8c:62:
         ef:34:77:41:53:6e:36:68:ca:6e:da:db:b0:17:61:af:4a:02:
         54:18:06:a0:1e:4f:ce:45:b2:a8:28:ab:8e:bf:7e:43:e5:28:
         14:48:e2:3e:5e:7b:ed:e8:36:c3:f6:d7:75:e2:56:0c:91:52:
         aa:d7:9a:ba:39:34:5c:9a:3e:6e:bb:b9:66:a8:54:81:ca:1f:
         f2:8e:af:7f:04:2e:85:e8:98:ef:71:00:ff:a5:84:d7:1f:79:
         90:2f:33:e2:89:87:fb:d7:a1:bc:41:ff:d6:06:e9:7e:cb:2d:
         03:72:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:21 2026 by rpki-client