Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92BCB506C5D11F180DA3BCECE1D38B0.roa
File:                     C92BCB506C5D11F180DA3BCECE1D38B0.roa (raw, json)
Hash identifier:          ZQxfx3gx2n3dO5mqJMEVla8eNqSXTDcmjpqC+Vrj/s0=
Subject key identifier:   0A:B8:89:DE:79:D2:3F:EB:2A:E1:63:BA:71:D9:66:86:C7:F4:75:5B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D3F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92BCB506C5D11F180DA3BCECE1D38B0.roa
Signing time:             Sat 20 Jun 2026 04:09:09 +0000
ROA not before:           Sat 20 Jun 2026 04:09:03 +0000
ROA not after:            Sun 19 Jul 2026 04:09:03 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Jun 2026 14:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119795 (0x1d3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 20 04:09:03 2026 GMT
            Not After : Jul 19 04:09:03 2026 GMT
        Subject: CN=6a361265-a208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:40:ff:26:75:be:96:e3:f0:ab:f3:f1:c1:
                    43:61:39:a9:6b:03:2e:19:ac:5b:b0:4a:14:2b:b0:
                    0c:27:85:57:28:3d:51:ed:98:20:fb:e9:a2:c3:b3:
                    1c:21:fa:2e:d8:52:72:9f:03:ee:76:42:be:ec:b0:
                    77:09:75:6d:23:c1:64:6e:95:ae:18:e6:19:0a:cf:
                    9d:cd:0d:e8:e3:e0:0c:23:4e:09:9b:9f:3a:0f:f3:
                    51:d5:28:5a:b2:e4:55:e7:7a:5d:8d:64:c7:39:71:
                    ca:d1:cd:3d:a8:a8:db:68:6d:2a:98:e1:55:89:7a:
                    a9:c8:ee:57:d0:c4:95:24:71:e1:f6:3d:f3:7d:4b:
                    4d:8d:00:37:92:76:56:f2:4f:09:2d:51:bf:60:7f:
                    06:f1:d1:94:5d:09:f5:04:83:2d:94:3c:38:72:18:
                    10:ec:5a:28:23:11:d0:28:dc:de:ad:b5:4a:e0:89:
                    9f:00:5e:0e:45:ac:74:a8:1c:50:41:2b:15:9a:c9:
                    6a:3d:9d:4a:22:b8:f7:44:e0:cf:bc:23:79:59:b5:
                    81:27:02:0f:a5:b2:46:14:c7:59:82:3b:ee:d1:46:
                    87:a4:f0:c2:4b:bf:f0:53:86:01:ce:cf:ba:ba:70:
                    26:7e:4a:e9:f5:bb:b4:9a:de:c4:dc:c2:05:48:a6:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:89:DE:79:D2:3F:EB:2A:E1:63:BA:71:D9:66:86:C7:F4:75:5B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92BCB506C5D11F180DA3BCECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         d5:c2:af:eb:2a:f7:51:7c:f3:08:0f:ba:60:19:42:58:d5:14:
         e5:03:0f:14:af:3b:91:13:4f:8e:a0:f0:a3:36:44:a0:2e:06:
         4d:29:28:ce:1e:cb:16:ce:ae:5c:89:25:da:ab:03:ef:fb:d2:
         fe:61:03:7a:e7:2a:93:27:80:a0:70:58:12:da:d5:67:6a:7b:
         85:6f:ee:97:ee:b5:15:4e:44:4b:ac:18:54:fb:ba:49:36:a6:
         84:0b:12:45:26:1a:6e:a5:9b:a3:27:e9:12:83:c1:e7:c5:3d:
         df:a1:ca:52:43:de:e6:c7:c2:e0:07:90:a3:20:f2:4e:20:01:
         03:a8:4b:ec:f5:6f:26:fe:dd:4f:f2:5f:48:0d:92:84:25:d5:
         16:33:2c:9a:92:99:bc:f0:34:da:8a:10:1f:60:ef:a2:31:04:
         bf:6a:9b:b9:af:89:98:7c:83:27:d4:c3:92:95:70:0b:18:fa:
         78:71:d9:7d:30:d9:a7:2c:00:85:d3:60:71:02:6f:82:b2:ae:
         0e:fe:6f:ce:95:31:e6:da:d2:f3:99:67:0d:1a:78:5f:44:c4:
         1c:78:25:28:f9:fa:33:04:1a:3b:35:9b:01:2c:46:45:ba:a1:
         ff:39:3b:2d:2f:62:6b:9d:c4:b7:e6:e4:39:16:62:ea:95:9b:
         5c:7d:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:37 2026 by rpki-client