Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D807BC545B4311F1BD08E0E7CE1D38B0.roa
File:                     D807BC545B4311F1BD08E0E7CE1D38B0.roa (raw, json)
Hash identifier:          1Us3lMAum153I5ndVx/PrSxPgdh4o+KRHMyX8dus75k=
Subject key identifier:   95:3E:B4:70:89:1E:7F:D1:35:48:87:25:57:07:B1:96:CA:FF:B4:1C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D06B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D807BC545B4311F1BD08E0E7CE1D38B0.roa
Signing time:             Fri 29 May 2026 09:50:37 +0000
ROA not before:           Fri 29 May 2026 09:50:33 +0000
ROA not after:            Thu 02 Jul 2026 09:50:33 +0000
asID:                     214238
IP address blocks:        154.81.193.0/24 maxlen: 24
                          154.81.194.0/24 maxlen: 24
                          154.81.196.0/24 maxlen: 24
                          154.81.197.0/24 maxlen: 24
                          154.81.198.0/24 maxlen: 24
                          154.81.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 15:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118891 (0x1d06b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 09:50:33 2026 GMT
            Not After : Jul  2 09:50:33 2026 GMT
        Subject: CN=6a19616d-c12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:f1:f2:5f:9d:b3:52:a0:4f:20:54:32:be:
                    fa:10:42:19:a4:d7:1f:30:cb:28:9f:06:1e:50:3a:
                    e5:9e:f5:ea:ad:c9:2c:0f:0c:62:70:27:6d:fb:44:
                    17:07:94:3f:62:c3:46:c8:e1:55:01:86:2f:54:e7:
                    75:bf:16:de:c3:81:e2:9d:3d:30:ad:9f:19:ff:cd:
                    ce:c2:de:b1:ba:6d:31:ea:7f:c7:5d:96:59:52:8f:
                    67:59:4c:3a:59:3a:fe:bc:97:1a:e7:4c:c2:b3:ad:
                    49:b5:c8:4b:14:b3:30:78:c0:9e:6c:ed:26:5c:e3:
                    ba:56:24:25:c8:92:03:56:9a:9a:ff:a1:e6:5b:d4:
                    89:7a:ff:7a:27:85:56:02:84:88:ec:7d:1e:1c:94:
                    64:42:8f:c5:79:e5:a8:a4:6f:1c:dc:33:bb:59:f3:
                    a3:1e:d0:46:25:02:73:48:b8:9b:0d:6c:b1:29:90:
                    23:9c:46:5e:c2:0f:bc:44:a4:d5:9a:05:1e:23:6f:
                    85:4d:5c:27:af:92:5f:56:b8:d7:aa:13:1c:f5:38:
                    cc:8f:37:e4:8d:8f:25:c7:d3:72:51:e9:8d:44:5e:
                    c0:86:57:44:2e:7f:b5:aa:36:11:d6:92:8f:ab:5f:
                    cc:97:a1:f0:d4:43:58:fd:d6:c4:c0:1d:5d:82:c6:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3E:B4:70:89:1E:7F:D1:35:48:87:25:57:07:B1:96:CA:FF:B4:1C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D807BC545B4311F1BD08E0E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.193.0-154.81.194.255
                  154.81.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:2a:36:d3:65:d7:21:81:ff:aa:9d:5d:13:df:37:f9:d6:
         34:c5:d4:5d:b5:ff:eb:94:b5:c4:14:ae:eb:4d:30:c8:dc:b5:
         e1:7c:54:24:e5:58:11:e3:43:ae:5d:1f:09:82:32:0a:7f:8c:
         94:0f:03:9f:1a:c4:39:12:b9:f2:56:09:0a:a9:91:08:d3:7a:
         b6:b7:e5:b4:fa:13:6f:e4:81:00:e5:2b:c4:1a:bc:aa:44:0a:
         0a:c3:8a:3e:e7:f4:d9:43:16:5e:1a:c5:13:db:fd:38:47:24:
         a5:18:72:95:d6:7d:b2:10:f7:a6:56:e6:ca:62:4b:79:dd:a3:
         66:35:0f:40:0e:6a:3a:00:26:36:83:31:09:d4:5e:62:3d:71:
         db:bc:29:f1:b0:47:eb:73:66:e6:2d:38:cf:bc:15:78:f4:a0:
         12:bb:04:73:bc:10:e0:1d:46:80:9e:3f:10:29:dd:59:7f:91:
         2f:db:b1:8f:f8:b9:2c:e6:b4:03:64:58:d2:7b:29:10:bf:03:
         90:17:50:28:63:a6:6b:34:4a:2b:4d:6a:46:78:94:d3:59:15:
         3a:f7:55:eb:40:4a:a6:2d:d9:f8:61:cd:66:bd:f9:e6:2b:b4:
         64:37:5f:f5:3e:c2:da:ed:75:7a:ae:7a:7b:4e:5b:90:af:de:
         b8:ab:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:35 2026 by rpki-client