Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A10B5E28F1711F19AD0C407CF1D38B0.roa
File:                     9A10B5E28F1711F19AD0C407CF1D38B0.roa (raw, json)
Hash identifier:          oHIY8x/EB6a5rvDSCCmAGt1AX6ylxVefXEbhLn9oLP4=
Subject key identifier:   33:67:18:78:C8:BC:58:D6:63:28:7E:14:52:E0:49:AA:F0:20:92:4E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DC7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A10B5E28F1711F19AD0C407CF1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:44:56 +0000
ROA not before:           Mon 03 Aug 2026 08:44:52 +0000
ROA not after:            Thu 10 Sep 2026 08:44:52 +0000
asID:                     154177
IP address blocks:        154.90.32.0/23 maxlen: 24
                          154.90.34.0/23 maxlen: 24
                          154.90.36.0/23 maxlen: 24
                          154.90.38.0/23 maxlen: 24
                          154.90.40.0/23 maxlen: 24
                          154.90.42.0/23 maxlen: 24
                          154.90.48.0/23 maxlen: 24
                          154.90.50.0/23 maxlen: 24
                          154.90.54.0/23 maxlen: 24
                          154.90.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121978 (0x1dc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  3 08:44:52 2026 GMT
            Not After : Sep 10 08:44:52 2026 GMT
        Subject: CN=6a705508-6da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:c1:95:a9:54:67:48:13:d6:47:9b:b2:e5:
                    27:e3:6c:32:f3:3d:4d:de:d7:54:5b:a5:38:b1:03:
                    49:79:0c:10:a4:93:7a:71:13:56:ec:1e:b4:d1:b4:
                    ea:98:dc:72:25:75:f8:ba:b9:dc:bf:7d:04:50:97:
                    43:0a:bf:c6:bf:40:fa:23:e1:72:d3:3c:91:f3:35:
                    c5:2b:c7:9c:e1:e6:85:38:f1:8d:6f:3d:ae:17:94:
                    6c:04:e9:dc:61:21:34:65:1b:ee:b3:cc:31:d8:1b:
                    7b:43:9e:57:5d:c2:76:0d:80:d4:64:de:4e:59:5d:
                    81:f8:83:87:10:e5:9e:9d:8d:2a:e7:17:e4:dc:57:
                    94:57:7f:90:40:29:70:8e:11:d7:97:d8:9f:80:24:
                    de:95:63:a2:d1:b9:e7:73:86:41:2e:81:33:69:60:
                    68:3b:69:64:fb:48:7b:52:50:8f:66:f8:97:06:5f:
                    6c:bc:51:25:b0:65:fb:61:0f:1c:4e:3f:6a:7c:36:
                    1a:1b:e9:e3:81:f3:96:c2:bf:1e:38:9e:0f:a2:d0:
                    14:7f:0e:8f:2d:c7:0c:37:82:1a:80:21:d8:7a:10:
                    24:21:86:e3:df:fe:b9:4f:f0:29:91:81:12:18:1f:
                    9c:7d:eb:ed:ac:ca:25:55:61:92:da:96:dd:1d:e9:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:67:18:78:C8:BC:58:D6:63:28:7E:14:52:E0:49:AA:F0:20:92:4E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A10B5E28F1711F19AD0C407CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.32.0-154.90.43.255
                  154.90.48.0/22
                  154.90.54.0/23
                  154.90.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:3a:58:a0:a3:40:83:d9:52:50:5d:f8:31:0a:ad:bc:66:e2:
         ad:54:f6:46:af:25:2c:8a:ef:46:53:91:8b:81:61:4a:06:f9:
         39:c3:c8:9b:27:d2:03:f6:95:d6:94:42:5e:81:ec:34:f5:88:
         09:cc:f9:f9:1e:4f:02:8b:04:c5:26:d1:68:b5:dd:d0:68:8a:
         9e:3c:8b:c1:52:72:41:40:db:de:20:5d:19:4d:91:4e:f8:41:
         7f:ac:62:e8:73:9f:6e:f7:17:62:a9:d7:90:ba:d9:eb:bf:15:
         76:e5:e4:15:31:9b:6c:c2:b9:f6:20:b8:29:17:0d:5f:13:4a:
         a1:4c:8d:00:79:4b:27:bd:1f:5a:b9:a4:1b:e2:96:50:cd:f2:
         35:88:8c:b8:6c:77:59:65:1b:e4:ad:8d:35:ec:99:e1:fb:c9:
         db:82:4d:a3:6c:c8:ad:0c:c5:e4:fb:f0:ec:12:61:bf:68:f3:
         66:1c:30:d7:0e:56:05:46:c8:ca:55:ca:dd:46:27:63:86:ea:
         1f:3a:3e:30:45:d1:ff:4f:b1:41:40:90:f0:42:d3:17:42:62:
         7b:27:d7:b0:95:d2:92:0b:56:cd:f5:83:98:6b:99:46:a8:19:
         49:50:42:ef:7f:e0:f4:72:12:a1:39:03:f7:00:d3:0c:27:83:
         16:e3:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:53 2026 by rpki-client