Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9794692692811F1B88651C9CE1D38B0.roa
File:                     C9794692692811F1B88651C9CE1D38B0.roa (raw, json)
Hash identifier:          3c6tUpVVj+z+gXHwYC9ivaW1L/0elivb6UbE5ysS93U=
Subject key identifier:   BD:7B:5D:B2:C3:A5:66:8F:AE:55:BF:C6:1A:14:56:EF:AE:1F:CA:E6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D302
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9794692692811F1B88651C9CE1D38B0.roa
Signing time:             Tue 16 Jun 2026 02:12:13 +0000
ROA not before:           Tue 16 Jun 2026 02:12:08 +0000
ROA not after:            Sun 19 Jul 2026 02:12:08 +0000
asID:                     11404
IP address blocks:        154.83.160.0/20 maxlen: 24
                          154.89.240.0/20 maxlen: 24
                          154.90.80.0/20 maxlen: 24
                          154.90.96.0/19 maxlen: 24
                          154.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Jun 2026 14:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119554 (0x1d302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 16 02:12:08 2026 GMT
            Not After : Jul 19 02:12:08 2026 GMT
        Subject: CN=6a30b0fd-3551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:b5:0a:a3:2c:1e:7a:66:33:d9:44:02:1c:
                    c9:61:94:11:25:a6:c8:df:3f:0b:a8:61:71:48:e5:
                    80:9d:dc:e5:bd:dd:ad:72:66:fc:88:25:1f:5a:99:
                    26:90:31:d2:50:9a:12:30:ff:81:9f:d7:8f:77:80:
                    a2:10:e9:78:7d:34:b9:11:1f:32:a6:ba:9c:6f:5b:
                    e3:e5:9a:ea:b6:e7:17:42:b4:f8:a8:7b:24:43:36:
                    32:10:9c:07:be:1b:c3:92:54:5f:ce:03:5c:8b:31:
                    71:5e:ae:20:34:a7:f7:b2:2f:88:61:01:6c:be:28:
                    10:30:83:12:01:f5:de:a3:da:8e:7c:e8:6d:a2:bf:
                    13:b2:89:b2:da:39:a7:e8:16:14:d6:fb:cb:ed:96:
                    45:df:f2:f4:a3:0c:ba:9c:66:12:13:02:ac:f3:08:
                    b7:31:d4:47:f5:3a:c2:39:ae:1d:c7:dc:93:16:70:
                    15:ae:8b:83:4c:25:0d:84:0c:09:77:16:45:93:db:
                    43:85:22:f2:bb:dd:f9:d3:97:62:3e:2b:78:5f:8e:
                    7e:3e:87:c0:04:c7:66:54:43:4b:cf:02:f2:99:a2:
                    5c:b0:91:8a:ac:d5:dd:2b:21:97:10:38:80:5f:29:
                    0e:8d:de:5e:8a:86:45:be:4b:14:10:38:52:05:7e:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:5D:B2:C3:A5:66:8F:AE:55:BF:C6:1A:14:56:EF:AE:1F:CA:E6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9794692692811F1B88651C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.160.0/20
                  154.89.240.0/20
                  154.90.80.0-154.90.127.255
                  154.92.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:74:fc:66:3c:d8:a4:1f:43:4e:30:f8:e4:1f:4a:28:99:
         61:d3:db:a0:46:34:c4:73:56:c7:2a:2f:d9:cf:ad:b5:6a:d8:
         bb:99:4c:20:23:9a:e5:c5:08:53:16:5d:1b:91:fa:c6:b2:62:
         77:d9:bc:d6:bf:9d:b5:1a:a0:46:a2:34:b5:63:44:8d:24:fc:
         aa:8d:3d:9c:89:bd:e2:d5:32:35:09:0d:db:a3:94:28:65:1d:
         d4:cb:ea:3a:18:64:95:e0:22:c6:a5:3d:d0:1c:77:6b:9d:18:
         49:4c:32:9a:7d:8f:ad:d9:45:b2:43:e3:d4:b0:36:21:fa:8a:
         0d:62:4c:67:14:8d:eb:8d:21:8a:20:1c:d3:99:ff:79:da:09:
         53:63:10:f1:81:71:b2:fb:e8:3d:be:97:e8:ed:03:bd:d1:73:
         7b:3f:48:1d:5f:9f:de:54:df:de:ed:2b:be:b9:24:03:1a:00:
         37:7b:35:e3:1b:3f:1c:63:28:6d:b8:7f:6e:1f:f4:26:10:5a:
         ad:35:b0:25:22:f4:9e:28:7b:6e:84:9e:67:a2:84:70:ae:79:
         20:56:93:d0:4d:89:3e:03:53:c9:75:25:fb:cb:34:aa:56:d4:
         e3:2c:5b:76:6f:ce:66:63:c2:96:43:3b:f1:d1:3f:72:63:79:
         eb:eb:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:29 2026 by rpki-client