Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BCE773E7E0011F187228D0ACF1D38B0.roa
File:                     9BCE773E7E0011F187228D0ACF1D38B0.roa (raw, json)
Hash identifier:          ZMhqVsEmLgxiovNplB5jU4S3t13ZfmuRCtA6Gm+wVZU=
Subject key identifier:   F2:F0:F6:79:91:7F:DD:99:00:DA:00:28:4A:1D:02:8C:10:DB:60:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D88B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BCE773E7E0011F187228D0ACF1D38B0.roa
Signing time:             Sun 12 Jul 2026 14:47:31 +0000
ROA not before:           Sun 12 Jul 2026 14:47:26 +0000
ROA not after:            Thu 13 Aug 2026 14:47:26 +0000
asID:                     9304
IP address blocks:        154.92.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120971 (0x1d88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 12 14:47:26 2026 GMT
            Not After : Aug 13 14:47:26 2026 GMT
        Subject: CN=6a53a903-0983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:e5:22:96:ca:69:49:29:8b:1e:b3:89:97:
                    91:ba:b2:8a:be:6f:51:4f:82:84:f8:69:f2:b2:0e:
                    5a:fb:ee:81:1e:45:db:37:bf:a2:78:5a:0d:1d:49:
                    01:1f:f7:06:68:9e:3a:05:05:22:b9:48:67:26:d0:
                    ee:82:36:9c:00:a6:97:7a:9d:89:bd:40:0b:90:6c:
                    77:3b:c3:da:23:7b:b8:dc:16:4d:c7:13:9f:14:e4:
                    c2:13:0d:cc:ff:ee:5e:4b:af:d2:35:a3:e5:18:36:
                    04:ba:2d:4c:24:aa:94:36:d9:70:ce:91:97:ee:8c:
                    b4:cc:37:df:ce:5f:87:90:e1:a3:8e:28:69:d8:20:
                    10:c3:1f:e0:b6:0f:47:d8:36:ba:83:90:ed:be:ea:
                    52:97:61:03:b3:0f:ad:23:df:8a:83:60:d7:77:cb:
                    7d:83:fa:c7:9f:dc:12:dd:b7:99:a2:32:89:b4:82:
                    61:87:da:e9:7c:57:00:47:e1:45:2f:92:74:e1:94:
                    3e:b7:18:1d:11:da:32:3f:84:87:68:c5:b5:19:c4:
                    13:ef:d3:24:4b:b7:b7:1b:20:59:83:b2:61:c0:1a:
                    ac:cb:ba:cd:83:fd:6c:36:9e:4a:66:7d:f8:a3:38:
                    0e:ae:c4:b9:97:3b:b4:74:a7:c2:75:93:e7:e6:45:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:F6:79:91:7F:DD:99:00:DA:00:28:4A:1D:02:8C:10:DB:60:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BCE773E7E0011F187228D0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:41:46:7c:31:f1:fb:78:d8:f6:89:30:73:04:0a:d2:04:01:
         55:52:c5:a7:3b:b6:cf:82:9b:19:50:f5:91:77:06:b2:40:3b:
         7b:39:81:5e:13:a9:b3:31:b0:e9:ec:a0:52:76:0a:bc:13:70:
         69:16:27:f2:51:92:b7:87:e9:a0:52:8f:3b:1b:ef:1b:aa:f6:
         ad:03:99:d3:b5:d8:18:0e:7f:2e:7e:0b:52:86:6c:7a:e0:e1:
         46:f2:db:67:31:14:a3:97:fa:00:a6:75:02:9e:13:9b:00:93:
         67:46:e5:71:f8:c5:12:2b:35:04:41:ed:41:cb:35:46:4e:6c:
         9f:eb:d9:fa:5e:cb:0a:05:d4:ae:b6:0e:ff:f0:03:4c:8f:bc:
         99:37:0f:0d:36:d6:0a:9b:49:20:8a:f5:d3:79:8e:87:c2:2c:
         6f:5b:4c:f5:eb:77:63:0a:72:97:2a:a4:45:82:7a:51:47:3d:
         1f:8e:60:38:22:69:28:53:27:da:58:c9:24:9e:bb:f4:26:c0:
         c5:83:27:b1:eb:32:b5:ca:77:9d:22:0b:5a:ea:4b:50:c9:5a:
         80:ba:49:ec:42:f8:1b:85:68:2c:98:e2:52:b1:d9:b2:c3:e0:
         3a:19:36:8c:3a:72:f6:6e:df:39:f8:28:4f:09:43:86:bc:dc:
         fc:25:a2:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdiLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEyMTQ0NzI2WhcNMjYwODEzMTQ0NzI2WjAYMRYw
FAYDVQQDEw02YTUzYTkwMy0wOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArw3lIpbKaUkpix6ziZeRurKKvm9RT4KE+Gnysg5a++6BHkXbN7+ieFoN
HUkBH/cGaJ46BQUiuUhnJtDugjacAKaXep2JvUALkGx3O8PaI3u43BZNxxOfFOTC
Ew3M/+5eS6/SNaPlGDYEui1MJKqUNtlwzpGX7oy0zDffzl+HkOGjjihp2CAQwx/g
tg9H2Da6g5DtvupSl2EDsw+tI9+Kg2DXd8t9g/rHn9wS3beZojKJtIJhh9rpfFcA
R+FFL5J04ZQ+txgdEdoyP4SHaMW1GcQT79MkS7e3GyBZg7JhwBqsy7rNg/1sNp5K
Zn34ozgOrsS5lzu0dKfCdZPn5kUyKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPLw
9nmRf92ZANoAKEodAowQ22AhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QkNFNzczRTdFMDAxMUYxODcyMjhEMEFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwKMA0GCSqGSIb3DQEB
CwUAA4IBAQASQUZ8MfH7eNj2iTBzBArSBAFVUsWnO7bPgpsZUPWRdwayQDt7OYFe
E6mzMbDp7KBSdgq8E3BpFifyUZK3h+mgUo87G+8bqvatA5nTtdgYDn8ufgtShmx6
4OFG8ttnMRSjl/oApnUCnhObAJNnRuVx+MUSKzUEQe1ByzVGTmyf69n6XssKBdSu
tg7/8ANMj7yZNw8NNtYKm0kgivXTeY6HwixvW0z163djCnKXKqRFgnpRRz0fjmA4
ImkoUyfaWMkknrv0JsDFgyex6zK1ynedIgta6ktQyVqAuknsQvgbhWgsmOJSsdmy
w+A6GTaMOnL2bt85+ChPCUOGvNz8JaIF
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client