Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F2862C7B8511F18FD4A6F1CE1D38B0.roa
File:                     57F2862C7B8511F18FD4A6F1CE1D38B0.roa (raw, json)
Hash identifier:          XxfJ80pAKLKKP9PoBvDdAPOxHXG2p3HzFLhMsFAa2/g=
Subject key identifier:   F6:0C:27:04:69:20:71:C8:7E:96:A7:C5:5A:49:7B:BE:B3:C8:7A:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D7CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F2862C7B8511F18FD4A6F1CE1D38B0.roa
Signing time:             Thu 09 Jul 2026 11:00:06 +0000
ROA not before:           Thu 09 Jul 2026 11:00:02 +0000
ROA not after:            Mon 09 Jul 2029 11:00:02 +0000
asID:                     17561
IP address blocks:        154.80.198.0/24 maxlen: 24
                          154.80.199.0/24 maxlen: 24
                          154.80.200.0/24 maxlen: 24
                          154.80.201.0/24 maxlen: 24
                          154.80.202.0/24 maxlen: 24
                          154.80.203.0/24 maxlen: 24
                          154.80.204.0/24 maxlen: 24
                          154.80.205.0/24 maxlen: 24
                          154.80.206.0/24 maxlen: 24
                          154.80.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120778 (0x1d7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul  9 11:00:02 2026 GMT
            Not After : Jul  9 11:00:02 2029 GMT
        Subject: CN=6a4f7f36-c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:81:fb:29:6d:44:af:7a:1f:b8:1f:95:c6:
                    01:da:24:6f:a1:cc:14:3d:2d:52:a9:c5:c1:f4:cf:
                    39:57:fa:12:5f:86:5e:66:46:7c:76:30:75:bb:8a:
                    78:45:80:dc:47:5a:69:0e:03:f7:51:b4:c7:48:93:
                    90:30:a3:cb:76:3a:eb:ce:c7:c1:af:eb:79:e0:f0:
                    b2:02:c5:57:27:2f:82:f9:51:d6:2a:cd:8c:7f:4c:
                    9c:95:40:7b:c3:cc:d1:bd:6c:7d:24:a7:6b:30:f3:
                    ba:86:1d:52:73:67:9b:28:5f:a3:7e:8a:85:d4:00:
                    07:19:bf:38:55:a3:8d:2b:bd:65:a4:76:c9:90:fb:
                    1b:68:c4:44:ad:e3:97:f9:7e:72:36:d2:1d:e7:21:
                    ab:cb:4f:05:fa:1b:5b:92:e2:22:df:f6:82:b9:63:
                    45:a0:70:f0:5f:dd:28:59:cf:6c:84:60:6e:d0:12:
                    fe:55:ac:eb:98:5c:a5:ad:f7:46:46:9f:f6:04:bf:
                    53:37:b6:a5:7a:4c:a7:bb:28:03:14:a9:0f:b0:2d:
                    ea:76:71:c1:5e:fb:66:ff:33:c4:8b:ed:10:1e:65:
                    88:8d:c7:64:63:8a:79:28:5f:bc:30:db:eb:77:d0:
                    0e:ed:0d:49:21:c9:c3:5d:80:5f:57:ac:62:26:7e:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:27:04:69:20:71:C8:7E:96:A7:C5:5A:49:7B:BE:B3:C8:7A:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F2862C7B8511F18FD4A6F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.198.0-154.80.207.255

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:24:f3:a2:f5:dd:a6:93:e4:78:e2:34:f5:09:0a:75:64:
         3e:16:30:c5:b2:7c:5c:22:da:22:85:10:51:0c:c4:ac:c3:44:
         57:99:db:c0:f6:ab:be:cf:21:f1:6c:4a:b9:85:c8:0c:13:65:
         5e:5a:46:33:ed:66:8e:00:11:41:2e:ab:94:7d:e8:07:52:dc:
         97:e5:62:7c:fd:17:4b:b2:05:25:ac:de:70:3f:3c:d3:ce:a5:
         92:67:86:e0:97:87:81:4b:f2:bb:c5:9b:82:5c:5f:41:e7:5a:
         d4:6b:cc:d6:27:db:e3:fd:1d:5b:f5:c2:38:08:69:d0:98:b1:
         90:a0:2c:ee:75:2a:a0:24:73:91:b4:90:1f:f9:e7:c3:ae:17:
         97:bf:e3:13:30:da:5c:c5:86:9e:5a:b4:8e:08:dd:12:f1:51:
         a0:42:75:0d:19:07:20:89:61:23:cc:90:98:34:20:b8:49:83:
         7e:33:d0:e7:73:59:a9:f1:e1:f7:8e:8f:59:04:06:ee:0c:ce:
         d5:c5:13:6c:c3:d0:cb:f1:5a:5e:8b:3e:48:84:68:6d:41:5f:
         89:20:60:da:c6:11:bc:e7:54:23:66:61:fb:2c:2a:a4:1e:6a:
         c2:39:27:24:24:5b:59:0a:95:c8:71:61:94:64:4f:43:60:72:
         8c:cd:aa:3d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdfKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA5MTEwMDAyWhcNMjkwNzA5MTEwMDAyWjAYMRYw
FAYDVQQDEw02YTRmN2YzNi1jNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzY+B+yltRK96H7gflcYB2iRvocwUPS1SqcXB9M85V/oSX4ZeZkZ8djB1
u4p4RYDcR1ppDgP3UbTHSJOQMKPLdjrrzsfBr+t54PCyAsVXJy+C+VHWKs2Mf0yc
lUB7w8zRvWx9JKdrMPO6hh1Sc2ebKF+jfoqF1AAHGb84VaONK71lpHbJkPsbaMRE
reOX+X5yNtId5yGry08F+htbkuIi3/aCuWNFoHDwX90oWc9shGBu0BL+VazrmFyl
rfdGRp/2BL9TN7alekynuygDFKkPsC3qdnHBXvtm/zPEi+0QHmWIjcdkY4p5KF+8
MNvrd9AO7Q1JIcnDXYBfV6xiJn5GGwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPYM
JwRpIHHIfpanxVpJe76zyHo9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0YyODYyQzdCODUxMUYxOEZENEE2RjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUMYDBASaUMAwDQYJ
KoZIhvcNAQELBQADggEBACHqJPOi9d2mk+R44jT1CQp1ZD4WMMWyfFwi2iKFEFEM
xKzDRFeZ28D2q77PIfFsSrmFyAwTZV5aRjPtZo4AEUEuq5R96AdS3JflYnz9F0uy
BSWs3nA/PNPOpZJnhuCXh4FL8rvFm4JcX0HnWtRrzNYn2+P9HVv1wjgIadCYsZCg
LO51KqAkc5G0kB/558OuF5e/4xMw2lzFhp5atI4I3RLxUaBCdQ0ZByCJYSPMkJg0
ILhJg34z0OdzWanx4feOj1kEBu4MztXFE2zD0MvxWl6LPkiEaG1BX4kgYNrGEbzn
VCNmYfssKqQeasI5JyQkW1kKlchxYZRkT0NgcozNqj0=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client