Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC54B48F0A11F19E6C94BACE1D38B0.roa
File:                     AFEC54B48F0A11F19E6C94BACE1D38B0.roa (raw, json)
Hash identifier:          roY5CNsKZhYii+5gUNDB2yxS9iiSQnTy+fMsTLx8sSY=
Subject key identifier:   C4:94:3F:3D:50:F9:08:0C:E3:66:7A:81:32:C6:FD:06:BC:67:42:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DC5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC54B48F0A11F19E6C94BACE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:12:29 +0000
ROA not before:           Mon 03 Aug 2026 07:12:25 +0000
ROA not after:            Wed 09 Sep 2026 07:12:25 +0000
asID:                     202656
IP address blocks:        154.210.237.0/24 maxlen: 24
                          154.219.64.0/24 maxlen: 24
                          154.219.65.0/24 maxlen: 24
                          154.219.66.0/24 maxlen: 24
                          154.219.67.0/24 maxlen: 24
                          154.219.68.0/24 maxlen: 24
                          154.219.69.0/24 maxlen: 24
                          154.219.70.0/24 maxlen: 24
                          154.219.76.0/24 maxlen: 24
                          154.219.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121950 (0x1dc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  3 07:12:25 2026 GMT
            Not After : Sep  9 07:12:25 2026 GMT
        Subject: CN=6a703f5d-59a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:9d:94:c2:33:7a:36:1b:fe:d1:9a:e2:77:
                    be:47:a6:e7:48:c5:b0:29:a7:a4:6a:0e:c0:f1:c1:
                    f9:04:d8:a4:25:d7:3a:a1:aa:d4:5e:e1:e6:42:cd:
                    09:bf:8e:fa:33:d3:89:07:2a:b3:b3:8a:32:84:ea:
                    4e:d1:44:1b:12:e8:4b:e6:92:87:7d:7f:40:28:b5:
                    3e:e9:34:63:85:2d:57:da:3f:6e:33:d8:0e:31:00:
                    1a:4d:f0:ef:41:cf:3c:90:ec:14:ca:2f:1c:a4:de:
                    ec:6e:80:a6:70:de:f3:e8:44:d5:bd:d3:12:9c:41:
                    24:c8:1f:ff:c9:2f:ae:9a:c9:74:37:bf:99:64:12:
                    fa:b9:30:10:11:1a:3c:dc:a8:72:15:7a:5c:1c:33:
                    0d:c1:ce:56:8c:e3:ee:bc:35:8c:e6:d6:61:bb:5a:
                    47:ef:ab:83:13:f4:ba:b2:69:9f:6f:0c:21:20:e9:
                    a9:19:98:a0:81:b8:fc:d5:2f:a9:fd:54:19:8f:2a:
                    25:24:c9:c2:d7:b6:ba:44:f3:64:ee:78:15:48:19:
                    a3:cb:77:10:96:6e:38:b1:7b:6d:61:88:9d:96:94:
                    4f:19:77:5d:c7:3b:b9:ea:c2:bd:af:ca:11:0b:a7:
                    96:bf:dc:14:d2:05:3d:08:c5:05:24:b9:21:83:1e:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:3F:3D:50:F9:08:0C:E3:66:7A:81:32:C6:FD:06:BC:67:42:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC54B48F0A11F19E6C94BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.237.0/24
                  154.219.64.0-154.219.70.255
                  154.219.76.0/24
                  154.219.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:5c:eb:8f:bb:6a:87:2a:d7:0a:64:24:4b:be:2f:12:4d:
         fa:02:e5:27:7d:d9:07:af:dd:4e:8c:e5:13:ab:c3:13:4d:05:
         fb:9c:e6:cd:b1:d6:ae:62:04:35:98:b9:80:48:9c:e6:8b:1e:
         e9:37:8a:29:31:30:86:49:6e:83:ab:5a:73:0e:13:78:04:a3:
         f0:38:2a:65:35:35:ff:52:18:24:cd:04:49:59:dc:ee:7c:c9:
         8d:88:df:a6:fc:6a:47:d0:02:cf:eb:e3:a0:dc:9f:6e:fa:8f:
         02:62:f6:12:5a:5f:8c:6b:12:83:a6:00:66:58:b1:a7:4b:57:
         0d:eb:62:0c:b4:0f:00:81:72:60:9f:cd:41:df:96:61:54:88:
         17:aa:78:d5:81:a1:c2:8b:e2:b1:f0:5a:2b:25:f9:b0:df:d9:
         70:e2:f5:30:86:ca:ea:a9:3c:3b:64:16:f1:7e:d2:2b:30:8e:
         73:21:1f:d0:3d:40:68:88:86:c0:77:64:0e:c0:55:ac:2f:41:
         6c:09:2e:9a:18:7a:f8:60:0c:ee:db:82:2d:d3:7d:59:09:b8:
         d4:6a:fd:75:b7:06:3a:6e:7d:65:d9:4d:2e:ca:c0:2e:32:33:
         53:db:0e:76:6d:6e:70:e4:b3:b9:08:7f:04:86:c5:67:35:d2:
         31:c1:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:46 2026 by rpki-client