Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53791834920711F195433BC5CE1D38B0.roa
File:                     53791834920711F195433BC5CE1D38B0.roa (raw, json)
Hash identifier:          X4Sk32M61mOzukfEG4Qu3ZHkUNT2Ae7VYJnl0BwU9Qo=
Subject key identifier:   CD:04:C0:2F:49:94:F4:F1:60:D0:6F:16:BB:C9:23:EE:09:4D:7A:D1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53791834920711F195433BC5CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 02:25:59 +0000
ROA not before:           Fri 07 Aug 2026 02:25:54 +0000
ROA not after:            Fri 14 Aug 2026 02:25:54 +0000
asID:                     274916
IP address blocks:        154.88.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122126 (0x1dd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 02:25:54 2026 GMT
            Not After : Aug 14 02:25:54 2026 GMT
        Subject: CN=6a754237-4910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:fc:14:7a:6f:78:62:85:e8:54:73:4c:2b:
                    5a:ba:0c:5f:ce:24:25:a5:e7:db:4f:4a:77:40:49:
                    3b:2c:d2:4a:54:0e:67:b4:f4:6e:83:45:6c:7d:6c:
                    1f:0a:ab:05:58:22:73:d9:89:be:2b:b4:ab:56:5c:
                    8f:65:20:f2:be:76:ef:12:bd:51:b6:b2:70:88:a6:
                    8f:4b:7e:9d:7c:af:f4:64:f8:99:b4:82:26:16:5f:
                    6f:27:f7:dd:2b:f9:4e:4a:73:0e:54:67:27:2a:a0:
                    6d:f0:9e:ce:de:15:98:18:b8:41:4e:1d:4c:6c:0c:
                    7c:2b:5f:43:5f:27:e4:8e:98:4b:98:f3:d1:40:33:
                    e6:09:dd:8f:26:ca:92:e6:f7:75:66:e4:4a:7f:98:
                    fe:8f:49:ac:07:78:93:00:2e:d3:d9:ce:4b:e1:6e:
                    5d:da:47:2f:8e:85:95:f3:71:26:3c:d6:9c:99:a9:
                    08:43:cc:50:3f:2c:ed:00:7b:66:7e:88:7a:6f:8f:
                    e5:bc:14:6f:a5:1c:6e:3f:de:8f:bb:59:e7:df:8e:
                    1d:27:b0:37:1d:a8:8b:d1:29:c8:e1:5a:e3:15:82:
                    4e:e6:0f:be:c5:01:52:84:69:6e:42:a2:34:8c:33:
                    04:d5:d4:08:4b:61:99:54:6c:b5:6f:5c:88:e8:2e:
                    11:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:C0:2F:49:94:F4:F1:60:D0:6F:16:BB:C9:23:EE:09:4D:7A:D1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53791834920711F195433BC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:de:fe:8a:6e:11:c4:71:73:86:28:b9:81:6c:9b:4e:e3:
         8e:15:30:cf:29:f5:28:f9:3a:ac:c7:0f:ac:a7:99:a1:26:e9:
         aa:9a:f9:7c:53:69:23:70:a1:ae:62:97:6e:35:cd:0f:7c:77:
         ec:2c:60:f1:4f:1a:37:ce:b7:0b:3b:e6:90:cd:89:90:4d:b5:
         fb:96:74:51:7f:ae:f1:40:ee:2c:81:9c:aa:dd:9d:35:b5:21:
         36:ac:0b:ee:73:74:64:f5:a7:e2:03:b3:91:0c:97:29:8e:a2:
         b2:09:b1:98:c7:97:1e:ef:b3:6c:14:7b:33:9e:22:50:8a:8a:
         33:0f:7b:61:5f:03:c8:5c:68:67:63:c6:fb:02:44:35:0f:d0:
         5a:5d:f9:e0:78:25:cc:07:69:4d:86:5d:2a:2c:6d:52:c8:ab:
         e6:0f:04:2a:60:ae:fe:67:69:15:c8:88:ce:fc:69:8f:48:0b:
         4d:2a:f7:ae:3e:bd:5a:76:92:7b:1e:d8:4b:86:ce:e7:38:13:
         ee:07:d6:5c:a3:09:d5:af:8d:81:bf:d8:8b:1b:4f:42:ba:60:
         08:78:06:24:40:93:fc:2e:63:f5:69:d1:f4:3d:2e:66:d1:65:
         a5:b7:c5:4c:dc:e8:80:b1:3e:d4:48:60:ed:fc:c4:c7:66:d5:
         07:88:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client