Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379ABACE8C6611F181333913CF1D38B0.roa
File:                     379ABACE8C6611F181333913CF1D38B0.roa (raw, json)
Hash identifier:          WGfZJmppA4J+/Z+ZtJn/ngZY5GQG7PJurFETsI8dHyI=
Subject key identifier:   79:D2:FB:83:00:01:F4:88:86:27:15:C3:A4:66:9D:48:37:88:70:AD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DBFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379ABACE8C6611F181333913CF1D38B0.roa
Signing time:             Thu 30 Jul 2026 22:30:08 +0000
ROA not before:           Thu 30 Jul 2026 22:30:04 +0000
ROA not after:            Thu 05 Aug 2027 22:30:04 +0000
asID:                     209242
IP address blocks:        154.193.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Aug 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121852 (0x1dbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 30 22:30:04 2026 GMT
            Not After : Aug  5 22:30:04 2027 GMT
        Subject: CN=6a6bd06f-3bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:03:19:a2:29:9e:3f:36:02:f0:96:d6:9f:
                    82:dd:07:35:c1:3d:57:6d:92:e0:fd:51:df:b2:6d:
                    1d:ca:88:dd:61:4d:ff:f7:76:77:5c:48:b9:15:26:
                    6d:75:d2:93:cd:dd:2e:fb:61:f8:c7:7e:d5:10:6d:
                    be:7c:11:27:f5:f4:d2:d2:0b:9d:1b:c7:7b:21:03:
                    3e:f9:23:68:38:95:27:d0:91:21:a2:fd:d3:e7:e2:
                    93:9d:1b:d0:c3:4b:34:25:ac:14:88:1d:8b:e4:75:
                    81:fd:73:b8:6a:7a:2d:c3:58:ab:43:3a:46:50:26:
                    52:98:66:34:8c:94:c9:6c:95:19:22:d0:65:2f:8a:
                    78:aa:bc:32:5f:4d:28:a3:20:9c:bd:59:ee:4d:ff:
                    7a:55:98:cd:fe:37:a9:c6:5c:f3:52:26:9b:5d:91:
                    10:46:36:6d:f7:10:5f:b1:bd:85:f1:4c:ed:70:62:
                    21:67:93:52:64:73:30:88:85:1b:cf:e2:8b:19:a7:
                    e5:46:5c:c8:61:9e:52:9e:df:d1:44:54:31:c4:3e:
                    c8:79:cf:b4:62:56:86:ed:f4:51:b3:a1:21:2e:43:
                    a9:de:8e:e6:47:7e:9d:94:91:1a:e1:f8:8c:e9:15:
                    61:93:53:18:c5:74:2b:26:69:0b:80:d6:b4:c9:53:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:FB:83:00:01:F4:88:86:27:15:C3:A4:66:9D:48:37:88:70:AD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/379ABACE8C6611F181333913CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:46:06:fb:8f:60:c5:26:33:9c:04:64:8a:28:cc:68:b5:
         57:d4:40:69:07:f1:44:80:ca:a9:ed:db:e6:f4:55:4c:f5:ec:
         9e:21:db:36:07:7b:11:7b:86:df:c3:a0:b6:6e:1d:f8:81:95:
         3a:6b:45:e2:ab:05:67:1f:43:88:36:b5:05:0e:81:a2:55:d2:
         8e:ea:a9:a4:80:b0:d1:7b:c2:4c:af:13:4c:a0:9a:a1:14:1f:
         2d:7b:0b:64:1b:47:41:67:80:b5:70:11:4a:1e:4c:a2:dd:ca:
         e6:e8:15:1d:14:34:cf:14:94:77:7d:fb:d0:00:98:c7:fc:f1:
         c1:8f:e8:53:5c:d8:05:ac:69:a1:bb:dd:f5:29:3d:f7:02:37:
         92:c8:1e:4a:3d:9c:18:08:a3:79:cb:7f:48:12:a6:a7:5f:5d:
         91:36:d1:f8:e1:62:18:71:31:ff:06:d0:29:43:76:50:ef:6a:
         ae:80:a9:88:1e:b0:51:2c:dd:8b:e1:02:12:dc:99:7a:8c:59:
         92:63:ab:58:d6:a2:a5:13:d2:be:8a:7d:bf:0a:2c:a3:1c:15:
         6a:5b:7a:cf:60:2a:a0:de:0b:e9:de:e3:f6:9a:f8:84:1e:a6:
         d8:99:2a:85:1a:14:fc:26:f8:9b:b5:91:d4:47:b3:3c:00:cb:
         e8:47:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:45:55 2026 by rpki-client