Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69348E0A922B11F1BDBA0AAFCE1D38B0.roa
File:                     69348E0A922B11F1BDBA0AAFCE1D38B0.roa (raw, json)
Hash identifier:          enx0XHQoEE56jpKS/ROZFfI08dzV9Zh5AXOplJ6XudY=
Subject key identifier:   9E:1E:9E:91:6E:3D:70:80:E4:92:FC:89:6F:85:D3:62:F8:2C:9C:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69348E0A922B11F1BDBA0AAFCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 06:44:18 +0000
ROA not before:           Fri 07 Aug 2026 06:44:13 +0000
ROA not after:            Sat 05 Sep 2026 06:44:13 +0000
asID:                     272011
IP address blocks:        154.88.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122147 (0x1dd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 06:44:13 2026 GMT
            Not After : Sep  5 06:44:13 2026 GMT
        Subject: CN=6a757ec1-2855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:dc:81:af:12:67:88:f8:03:71:fa:ee:36:
                    7e:66:ff:7e:ad:40:d3:06:87:7b:41:52:41:c2:85:
                    30:65:ac:46:66:0f:46:ae:48:02:0a:48:8b:4b:5b:
                    bb:5f:2e:42:58:42:7e:e4:61:89:54:d9:09:09:ce:
                    c6:6b:9a:89:ea:43:32:16:ac:a4:bc:ec:6d:f6:c7:
                    a0:84:97:15:71:8d:bc:fa:9d:fb:a1:ca:ce:a0:94:
                    5f:9f:8a:bc:75:6c:f1:f7:d4:09:92:cf:ef:f8:67:
                    5d:63:fe:b5:7f:a3:55:6c:55:18:63:16:1e:0b:1f:
                    b8:0c:52:26:19:67:87:cd:b3:2a:c6:a8:41:4c:04:
                    7b:ab:e6:7c:d1:8e:3e:e4:ee:e6:f4:04:b7:14:71:
                    68:2e:40:11:ad:61:87:02:d2:e6:3a:e4:5a:f7:55:
                    b2:e0:65:1c:50:d6:c1:f8:75:bf:14:e8:51:15:6d:
                    08:5d:28:fe:86:b3:4e:2c:37:f1:b4:d9:bf:8c:32:
                    79:4a:db:22:28:60:42:0e:b5:81:b3:79:ba:bb:c9:
                    da:f2:43:3f:17:55:b5:27:59:cd:de:18:86:d3:06:
                    aa:8f:5e:28:7a:3a:16:5c:ce:62:b0:14:d5:98:9f:
                    cf:d2:f8:58:7d:42:7f:9d:27:56:22:c9:9b:d9:ee:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:9E:91:6E:3D:70:80:E4:92:FC:89:6F:85:D3:62:F8:2C:9C:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69348E0A922B11F1BDBA0AAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:6d:73:dd:57:64:9b:c4:f3:15:71:01:9c:3c:2c:f8:19:
         11:fe:ad:c9:fa:d7:24:07:b6:27:c9:86:41:7a:fc:39:b8:e4:
         3f:cc:b6:27:20:85:19:c9:c3:a9:e8:9b:33:a7:d9:98:aa:27:
         4b:a3:05:64:5d:61:3b:21:25:e3:ce:6c:76:28:43:23:71:44:
         55:d9:f3:91:23:d4:4f:36:0d:57:9c:05:89:91:a1:64:b2:04:
         61:d5:95:93:2e:13:51:f6:0e:7f:e3:0d:b5:2d:77:bd:de:fa:
         dd:54:8b:3a:37:fe:74:64:1c:73:18:9d:17:25:18:ea:e2:ac:
         69:51:1c:94:b3:31:84:74:c1:6d:99:17:35:79:4f:0d:bd:43:
         fa:18:8d:fd:c8:43:5d:82:00:2e:24:30:66:f2:20:1c:38:95:
         c8:27:d5:c0:ec:7f:7d:8f:bc:d9:5a:a9:74:1f:d1:0b:aa:3a:
         31:14:c6:42:3c:1c:ef:54:3e:c2:d4:e1:39:0a:e8:f2:3b:35:
         e1:c6:08:4e:7d:23:87:fd:f7:94:f3:26:2a:0d:d4:b8:b4:23:
         b5:87:92:12:6b:88:3b:98:70:1a:a5:1a:d0:a1:01:64:4f:b1:
         a5:2b:9a:b2:0f:12:d0:b9:bb:9a:85:95:91:8b:d5:e8:4c:6a:
         da:c5:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:46 2026 by rpki-client