Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713F507E8BE311F193034E03CF1D38B0.roa
File:                     713F507E8BE311F193034E03CF1D38B0.roa (raw, json)
Hash identifier:          YktAGPBNiYHnvUOGsWQvKGWTLTh/jsIEX12bNfFxMDM=
Subject key identifier:   ED:0B:17:81:C4:5B:32:42:7A:B1:7A:4B:22:7A:6B:7F:94:91:48:18
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DBDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713F507E8BE311F193034E03CF1D38B0.roa
Signing time:             Thu 30 Jul 2026 06:54:00 +0000
ROA not before:           Thu 30 Jul 2026 06:53:56 +0000
ROA not after:            Sun 09 Aug 2026 06:53:56 +0000
asID:                     153517
IP address blocks:        154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Aug 2026 06:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121820 (0x1dbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 30 06:53:56 2026 GMT
            Not After : Aug  9 06:53:56 2026 GMT
        Subject: CN=6a6af508-9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:6d:af:b1:db:8c:1a:65:f3:2c:b2:36:80:
                    32:40:c1:40:f4:13:d3:12:bc:37:bc:09:d9:52:5d:
                    a2:31:41:be:17:27:f4:ee:68:be:22:56:36:77:bd:
                    df:2d:5d:09:33:7f:4c:3e:19:3e:77:6b:d1:1b:a5:
                    15:75:f8:62:2a:9f:6e:bc:70:7b:71:c7:28:20:86:
                    fe:a0:bb:63:34:0d:cb:05:ab:48:ae:7e:cc:c8:fe:
                    34:10:08:dc:f5:fc:cb:cf:86:69:47:1d:6e:bd:a2:
                    a5:ae:a8:ba:46:d4:2b:0f:ad:6d:8e:31:00:f4:1e:
                    46:a5:29:b6:50:23:fe:11:9f:a3:2a:f5:61:fc:ad:
                    a2:78:fb:7b:78:39:07:76:53:bf:a9:69:a1:5d:54:
                    2b:22:25:d8:d3:01:c1:cf:d2:69:7b:40:34:dc:79:
                    1d:54:56:73:5a:c2:cd:6c:36:f2:ed:a1:8f:be:7f:
                    a3:93:00:06:9a:8c:8d:dc:ba:01:7b:a4:72:bf:a8:
                    92:b0:09:5b:f6:ec:ad:3c:a4:40:b4:fc:85:f7:da:
                    02:a6:17:d0:02:72:c4:ff:4a:08:32:25:dd:56:71:
                    9d:44:b9:d2:76:5f:3e:25:bc:16:6a:6c:60:df:9b:
                    89:69:65:e2:7a:4d:64:c7:ad:34:d9:21:24:75:3d:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:17:81:C4:5B:32:42:7A:B1:7A:4B:22:7A:6B:7F:94:91:48:18
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713F507E8BE311F193034E03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.21.0-154.86.30.255

    Signature Algorithm: sha256WithRSAEncryption
         69:74:27:17:42:62:a0:89:2e:08:79:79:45:a5:8c:f2:70:32:
         68:d6:36:85:21:02:db:a9:54:f9:98:09:47:d8:a4:a3:81:49:
         81:8e:e0:4a:7e:20:ac:9f:77:b6:f3:7e:c1:e6:5c:52:00:62:
         f8:2f:ae:15:29:29:9a:74:62:32:57:3b:90:2b:c6:99:6c:3e:
         e0:e4:70:bd:ac:a4:1e:b3:7e:98:ad:11:f1:03:4d:3c:af:e7:
         b3:8b:d0:f0:cb:ef:f4:79:5b:4d:93:80:17:a0:c8:10:50:44:
         19:76:e2:85:42:d4:1a:63:90:51:56:25:8c:32:31:cf:24:20:
         de:53:56:96:ed:f1:7b:0e:9a:a6:40:e1:ec:de:d6:2b:95:b5:
         0a:31:8a:01:d2:e1:09:40:34:f6:32:e8:2e:d3:1d:82:0a:70:
         22:6b:b8:25:bf:13:5e:b1:60:a6:d6:75:b0:48:b8:16:4f:e9:
         28:a5:52:b4:1c:8d:12:d8:63:2c:b8:68:4d:f7:36:dd:71:27:
         e1:0f:e9:12:08:00:8e:1e:0a:41:00:96:7f:c4:66:90:61:74:
         00:78:10:2c:9c:cc:c9:d5:2d:57:ae:36:74:54:c0:d9:29:fd:
         ae:a2:b2:9e:c6:a0:ec:32:74:5c:ec:ac:35:90:a3:1e:66:a2:
         5d:a0:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:09:02 2026 by rpki-client