Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F148A308F1511F1B569DBF7CE1D38B0.roa
File:                     3F148A308F1511F1B569DBF7CE1D38B0.roa (raw, json)
Hash identifier:          w63c0pgBb8rnxzF1L4s5MA2n+1XEtJsTe3kcjsKVWEU=
Subject key identifier:   9F:5E:42:BB:B6:A7:1D:63:7C:78:DB:AD:E5:BD:D2:76:6C:6A:08:08
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DC74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F148A308F1511F1B569DBF7CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:28:04 +0000
ROA not before:           Mon 03 Aug 2026 08:28:00 +0000
ROA not after:            Wed 09 Sep 2026 08:28:00 +0000
asID:                     44559
IP address blocks:        154.219.73.0/24 maxlen: 24
                          154.219.74.0/24 maxlen: 24
                          154.219.75.0/24 maxlen: 24
                          154.219.83.0/24 maxlen: 24
                          154.219.84.0/24 maxlen: 24
                          154.219.85.0/24 maxlen: 24
                          154.219.86.0/24 maxlen: 24
                          154.219.87.0/24 maxlen: 24
                          154.219.88.0/24 maxlen: 24
                          154.219.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121972 (0x1dc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  3 08:28:00 2026 GMT
            Not After : Sep  9 08:28:00 2026 GMT
        Subject: CN=6a705114-ba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:12:ed:31:27:33:f7:24:31:f0:43:25:8e:51:
                    3e:ac:10:ed:36:93:d5:98:f6:98:8e:06:c5:0c:06:
                    70:6c:c6:de:1d:16:41:ac:5d:0e:6c:b1:a0:3a:8a:
                    b6:b4:d9:17:fb:bd:c3:94:5e:2b:e9:0f:df:ff:06:
                    3c:77:26:be:3c:65:45:8e:e4:1e:ae:a9:3c:fa:c8:
                    2b:cf:d5:2d:4a:53:0d:66:b8:bf:97:92:fd:4f:dd:
                    26:59:58:9d:37:49:c5:8b:74:93:85:97:db:1d:40:
                    a4:77:89:2e:e8:20:79:84:c5:9f:e9:f5:18:f8:f8:
                    86:3f:04:7d:78:4e:c0:01:62:54:6a:7c:ef:4b:9e:
                    bd:37:3a:8f:4a:31:12:9c:b8:82:f7:40:76:56:e3:
                    86:6d:c5:6f:6f:ae:90:e2:41:e3:4a:34:91:86:93:
                    de:2c:f9:bb:01:57:71:bb:aa:fc:d5:e1:87:7b:99:
                    64:27:6b:9e:fb:7b:d1:b3:7c:f4:44:34:7f:66:3f:
                    2e:6e:de:b0:7a:58:b3:0f:16:8f:ef:99:55:30:b6:
                    fe:81:2a:31:af:4c:fe:09:a6:e6:c2:54:a1:92:29:
                    f3:e1:98:db:19:5c:ad:de:05:74:60:a1:26:e9:0c:
                    94:5f:af:38:c4:7f:b2:98:e7:2e:fd:df:b5:fe:e2:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:42:BB:B6:A7:1D:63:7C:78:DB:AD:E5:BD:D2:76:6C:6A:08:08
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F148A308F1511F1B569DBF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.73.0-154.219.75.255
                  154.219.83.0-154.219.89.255

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:58:a9:91:f4:cb:49:32:e7:09:da:40:b5:9e:d1:9f:d3:
         94:6e:a9:33:78:e7:c4:a7:20:ca:6d:fe:21:54:b7:d8:16:9e:
         83:45:4e:20:21:47:ef:6f:c9:65:68:50:a4:66:70:3f:b3:80:
         32:2f:4c:2d:57:9b:d8:0e:24:09:ca:b2:cc:2f:39:78:8c:69:
         c0:77:1f:c0:74:7f:2f:1c:32:cd:bc:7c:0b:5c:6e:cc:48:39:
         41:b3:d1:14:ae:63:ff:c9:16:2b:4c:d7:64:e0:fa:d8:58:07:
         0e:9a:d2:51:e3:cd:13:dd:0e:d8:da:0d:a4:3a:d3:28:b3:fe:
         99:04:ea:a7:94:8b:2a:87:48:ab:a0:a9:5c:d2:dc:d6:0d:79:
         1c:2a:08:ca:e6:8d:1b:3b:f7:e3:8a:c2:bf:70:2a:53:35:9b:
         06:7f:f5:47:f7:0e:15:c4:89:7c:ce:53:6a:83:59:0e:da:a9:
         77:81:a4:c6:77:28:f4:3f:40:74:65:b1:a7:c4:7e:83:d5:43:
         19:82:51:a1:cb:15:cf:d4:85:9c:e4:aa:b2:43:40:19:b5:e0:
         1c:6a:ea:1d:aa:90:f1:97:b8:82:6b:f6:ba:49:5d:bd:0a:72:
         f2:5f:86:88:38:fc:be:35:b3:01:5d:ff:2c:5c:fc:c5:7d:48:
         32:d6:2d:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:58 2026 by rpki-client