Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87222068948C11F1A4D7DA17CF1D38B0.roa
File:                     87222068948C11F1A4D7DA17CF1D38B0.roa (raw, json)
Hash identifier:          Un6Rzk8Bn2h8rY9r+Gth+U2Uq+QLmXjFJ9qVmH9E61E=
Subject key identifier:   A7:7B:D8:6C:58:B2:96:38:F1:B7:BD:4A:50:5D:E5:64:EB:0A:B7:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87222068948C11F1A4D7DA17CF1D38B0.roa
Signing time:             Mon 10 Aug 2026 07:24:31 +0000
ROA not before:           Mon 10 Aug 2026 07:24:27 +0000
ROA not after:            Thu 17 Sep 2026 07:24:27 +0000
asID:                     22773
IP address blocks:        154.90.14.0/24 maxlen: 24
                          154.90.15.0/24 maxlen: 24
                          154.90.16.0/24 maxlen: 24
                          154.90.17.0/24 maxlen: 24
                          154.90.19.0/24 maxlen: 24
                          154.90.20.0/24 maxlen: 24
                          154.90.21.0/24 maxlen: 24
                          154.90.22.0/24 maxlen: 24
                          154.90.23.0/24 maxlen: 24
                          154.90.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122306 (0x1ddc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 07:24:27 2026 GMT
            Not After : Sep 17 07:24:27 2026 GMT
        Subject: CN=6a797caf-3856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:e5:ae:25:60:2d:97:1f:27:05:c2:34:a2:
                    b1:24:76:5a:09:f7:6d:a3:2e:6c:1b:12:a7:ae:80:
                    d3:54:8a:83:8a:be:50:31:16:3d:05:40:df:7a:2e:
                    8e:fd:5f:a7:1e:02:1b:6e:c6:74:46:5e:01:b4:a0:
                    d0:56:55:db:08:05:bc:2d:c6:6c:2e:c3:6a:9f:d8:
                    5d:7b:80:69:ad:33:94:59:e4:c7:d9:f3:32:f4:7b:
                    cc:a6:47:fc:f0:fa:a8:40:a9:2e:1f:c3:dc:06:61:
                    ea:d0:53:0d:30:86:d0:47:ee:8b:c6:25:07:e5:a4:
                    0a:ce:22:47:6f:ad:16:1b:e9:83:e9:17:ad:76:8e:
                    49:d8:7a:c7:ae:86:8d:3e:29:a4:56:15:bf:7f:a8:
                    33:e9:88:01:fc:fa:a2:51:ce:da:01:22:fb:2b:1c:
                    51:44:e4:dc:c2:90:40:5f:09:0a:67:96:f9:fd:0c:
                    77:27:36:e9:61:7d:20:8e:bf:a3:44:0e:bf:af:9f:
                    78:84:6b:2b:5d:95:3d:c4:c9:32:4f:5c:51:60:ca:
                    95:f8:f7:9e:96:93:eb:8c:0f:54:40:f4:75:2b:4c:
                    5b:55:c7:b5:40:9a:ec:83:fd:59:7b:de:0c:6b:91:
                    52:fd:73:73:25:31:16:f8:a7:f1:48:4f:df:ce:33:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:D8:6C:58:B2:96:38:F1:B7:BD:4A:50:5D:E5:64:EB:0A:B7:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87222068948C11F1A4D7DA17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.14.0-154.90.17.255
                  154.90.19.0-154.90.24.255

    Signature Algorithm: sha256WithRSAEncryption
         c4:56:d7:55:95:e1:ef:bf:aa:0c:1f:b0:9f:96:e2:7f:a8:f1:
         84:46:12:17:1e:86:b6:ac:27:68:bb:57:8e:8b:8e:54:66:cb:
         af:3f:0d:15:a3:18:24:62:5e:0f:9c:96:2c:cf:8d:f5:00:fd:
         12:be:75:f9:a3:14:a6:4e:ae:78:b2:b0:98:54:24:30:f4:b5:
         02:2c:a6:4c:4f:92:c6:8e:83:de:e5:9c:3b:0d:97:98:6f:48:
         5d:e0:4a:26:2f:8e:fe:d0:4f:0f:66:39:e9:37:98:fd:61:bd:
         86:d2:8c:0f:8e:11:cb:c3:9d:a2:26:4f:d9:69:1d:bf:19:30:
         b9:31:d6:16:74:84:aa:7a:2c:d4:cf:1f:c6:f7:84:8b:c3:4c:
         68:ee:8a:ef:4d:af:48:06:6b:b7:d2:da:e5:5b:a6:ff:db:97:
         38:dd:f6:62:84:70:d2:dc:5c:19:26:f8:64:1b:e2:1d:eb:4c:
         47:fb:21:c9:66:1e:ef:4f:d4:31:45:94:ff:f1:2c:95:48:ea:
         24:78:b5:3b:86:56:dd:64:e1:96:0a:8d:c4:24:8f:9f:cd:d2:
         b9:63:e8:23:ed:cc:8b:61:5f:5c:d2:32:f8:ef:ee:e0:58:9e:
         f5:c7:11:0b:46:fd:f0:ca:25:29:2b:f1:47:5d:87:07:fa:16:
         da:15:46:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:28 2026 by rpki-client