Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110FEEC922811F185C5001DCF1D38B0.roa
File:                     A110FEEC922811F185C5001DCF1D38B0.roa (raw, json)
Hash identifier:          iQKQaFY3cidbjbAthjPMlwaHbicge5gkD/8dnJj85dM=
Subject key identifier:   DC:E3:23:CE:FE:61:9C:E7:C7:1B:B2:0D:9D:BD:2E:9E:8F:8A:B8:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110FEEC922811F185C5001DCF1D38B0.roa
Signing time:             Fri 07 Aug 2026 06:24:23 +0000
ROA not before:           Fri 07 Aug 2026 06:24:18 +0000
ROA not after:            Sat 05 Sep 2026 06:24:18 +0000
asID:                     274964
IP address blocks:        154.88.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122133 (0x1dd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 06:24:18 2026 GMT
            Not After : Sep  5 06:24:18 2026 GMT
        Subject: CN=6a757a17-5c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:f9:d0:68:44:f8:f1:bf:0d:16:6a:85:84:
                    74:71:f6:30:59:aa:89:55:0c:4a:9d:0e:8f:dc:95:
                    b5:b5:20:4c:a9:63:cf:0b:f4:12:1b:1c:a0:67:98:
                    a4:bd:9e:87:0e:0b:d3:02:c5:bb:c6:e1:5d:03:55:
                    b3:a8:63:6d:cc:45:5f:e7:af:81:63:b4:ac:6c:b1:
                    af:af:13:ec:a5:85:f3:1a:14:36:48:e8:cc:73:c9:
                    f6:a3:1c:cc:39:16:ce:fc:16:be:48:94:30:09:ff:
                    d3:6e:0b:11:f2:d8:36:f6:a9:8b:30:f7:cb:ee:82:
                    5b:b0:fd:b3:fa:2a:6e:cc:f1:6b:76:0d:ec:5a:45:
                    1c:59:97:27:e3:4f:37:32:28:16:11:e6:e0:58:2f:
                    96:bf:85:df:cb:71:1e:42:d0:d5:f1:34:e0:d7:94:
                    be:aa:80:50:3b:87:ab:94:93:fc:38:12:81:9d:a8:
                    30:29:65:59:15:3a:b9:71:38:77:48:d8:fe:00:20:
                    80:d7:b5:bf:b5:6c:e1:04:21:2e:63:66:52:8a:ee:
                    57:4b:f7:c3:63:f0:80:13:a3:4a:63:cb:58:8f:75:
                    d0:f7:2b:e5:ba:71:b4:93:76:15:ea:dd:62:d5:99:
                    ec:da:17:55:87:fe:e8:d7:b5:5f:11:d9:8a:d4:a2:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:23:CE:FE:61:9C:E7:C7:1B:B2:0D:9D:BD:2E:9E:8F:8A:B8:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110FEEC922811F185C5001DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:ce:01:e9:7f:8a:80:98:1c:6e:99:c0:cb:af:64:b1:df:
         03:b8:06:be:8b:8e:f1:62:43:a9:f4:d7:8a:6e:40:78:45:c0:
         25:70:a8:a7:46:8f:b7:8e:a7:0d:64:38:c6:5a:30:a7:94:55:
         61:99:13:83:e9:a3:2f:41:6b:f0:f5:2f:cd:25:a7:81:96:8e:
         ea:14:69:3f:db:f5:19:06:0b:65:69:67:10:55:e4:9c:36:d2:
         45:33:f8:ea:7b:66:ec:0e:f3:1b:02:2b:4f:98:c4:4d:a6:1f:
         82:62:5d:87:13:e4:2d:af:2f:39:c2:0c:ad:4c:b9:8f:2b:1f:
         af:fd:82:67:ee:be:a6:1e:09:34:4d:60:26:e7:5a:b1:d9:e4:
         6b:be:ea:4f:e9:8b:99:71:c6:10:66:14:3d:bd:26:a0:3c:ff:
         53:3d:6c:a2:98:f7:1a:1a:98:60:f4:b8:bc:65:85:ca:95:58:
         d7:22:00:0e:ee:b8:25:df:84:2d:1c:57:af:9e:a2:67:fb:1d:
         ae:bd:62:91:ae:b2:eb:34:e0:f6:74:99:4c:39:8b:2e:59:74:
         81:f1:48:1a:66:29:d2:dc:ef:48:31:62:f6:bf:16:ae:bf:46:
         55:e8:e2:a1:47:0b:cd:db:72:cb:70:cb:66:c3:55:3f:a8:fd:
         a5:65:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:28 2026 by rpki-client