Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E746808B1811F1B33223B1CE1D38B0.roa
File:                     E2E746808B1811F1B33223B1CE1D38B0.roa (raw, json)
Hash identifier:          B+ToRx3LkJucZ6inmfxL+M8p8fh+QIuJopnrp9mWy9Q=
Subject key identifier:   E1:D8:FF:F8:B5:D0:EC:25:0E:F9:1F:9F:C3:7D:C5:BC:4D:D8:E8:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DBA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E746808B1811F1B33223B1CE1D38B0.roa
Signing time:             Wed 29 Jul 2026 06:44:03 +0000
ROA not before:           Wed 29 Jul 2026 06:43:59 +0000
ROA not after:            Tue 01 Sep 2026 06:43:59 +0000
asID:                     44559
IP address blocks:        154.198.37.0/24 maxlen: 24
                          154.198.38.0/24 maxlen: 24
                          154.198.39.0/24 maxlen: 24
                          154.203.206.0/24 maxlen: 24
                          154.203.207.0/24 maxlen: 24
                          154.203.212.0/24 maxlen: 24
                          154.203.213.0/24 maxlen: 24
                          154.203.214.0/24 maxlen: 24
                          154.203.215.0/24 maxlen: 24
                          154.203.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121769 (0x1dba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 29 06:43:59 2026 GMT
            Not After : Sep  1 06:43:59 2026 GMT
        Subject: CN=6a69a133-d119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:81:2e:2f:a2:20:59:ac:c2:77:7d:cf:8a:
                    ed:29:b7:77:93:ef:9a:68:fa:21:86:6d:02:8d:65:
                    72:1c:3f:76:79:50:7b:7a:4d:f6:a4:6a:16:fb:6a:
                    fb:6e:dc:59:20:a2:80:8c:d7:d9:60:af:cd:a7:a5:
                    00:24:5d:4a:e2:28:71:b8:f3:dd:46:4e:30:ed:63:
                    39:b3:b0:94:8e:6c:50:62:3c:51:15:6e:94:69:70:
                    a5:b5:0d:b4:6c:74:af:b6:b7:28:7e:ae:19:cb:d0:
                    3d:82:40:f5:51:a6:2b:c6:05:e0:c5:44:10:51:30:
                    a7:41:3f:e2:02:fa:28:e7:3e:9b:0f:08:66:85:b0:
                    e2:d8:25:50:4b:e4:6d:2e:c5:da:9f:d6:10:c5:3e:
                    df:ca:8e:1d:07:75:09:62:28:ec:fc:c3:a8:b7:da:
                    aa:71:ce:d1:df:1f:7b:2e:c8:dc:84:f0:15:c2:b5:
                    47:2c:ed:28:9e:c5:4b:7b:1c:a7:93:27:65:31:63:
                    51:1e:bf:ed:d4:db:5d:b6:ec:03:8d:95:42:8d:9d:
                    8c:63:3f:1f:06:df:f5:4e:ad:ed:93:58:50:f1:d2:
                    c2:5b:8d:50:33:6c:96:d0:ed:de:94:91:a7:d0:87:
                    0d:e2:74:3c:0b:1e:5f:f1:51:7d:74:42:4a:e0:09:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D8:FF:F8:B5:D0:EC:25:0E:F9:1F:9F:C3:7D:C5:BC:4D:D8:E8:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E746808B1811F1B33223B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.37.0-154.198.39.255
                  154.203.206.0/23
                  154.203.212.0/22
                  154.203.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:d3:c0:cb:50:cf:a9:a5:3e:52:5e:fe:13:45:3e:80:c6:
         b7:3e:7d:20:f4:97:4b:18:e6:c9:93:0e:21:d1:97:3c:24:49:
         1e:50:da:5f:52:a3:72:1e:0d:08:62:cc:cd:7a:f6:22:82:09:
         c2:59:b2:b2:be:bd:46:52:94:47:00:e2:b0:e5:c2:e3:13:8f:
         4d:d6:be:74:fa:86:d1:5a:84:a9:e4:0c:12:e4:d4:e2:33:d3:
         d2:f7:96:28:b0:79:91:e3:b2:5b:90:4b:10:d6:52:69:26:00:
         75:2d:f1:6d:7e:fd:9a:8d:c2:14:19:93:10:1c:4a:7f:5f:76:
         8b:e5:ae:88:f4:c7:fa:ae:d4:0e:0e:7e:76:77:3e:84:eb:27:
         5f:a9:4c:88:25:67:b4:2f:97:0f:1c:7f:dc:ef:98:6f:4f:65:
         c8:81:08:b0:f5:f6:93:df:5f:71:66:55:1d:2c:05:bc:65:02:
         8e:e4:ea:37:9c:7e:bc:28:e5:b0:d8:9e:f7:4a:ff:73:be:ba:
         fc:c6:2d:af:48:f1:ee:32:93:01:cc:f6:1b:74:05:94:0d:90:
         24:88:0b:1a:c4:02:58:1f:81:eb:a1:86:d3:67:00:39:78:ca:
         91:a6:e8:14:31:62:3a:bb:2e:29:19:92:0d:75:8e:57:55:54:
         43:c8:3a:5e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAdupMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI5MDY0MzU5WhcNMjYwOTAxMDY0MzU5WjAYMRYw
FAYDVQQDEw02YTY5YTEzMy1kMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5AmBLi+iIFmswnd9z4rtKbd3k++aaPohhm0CjWVyHD92eVB7ek32pGoW
+2r7btxZIKKAjNfZYK/Np6UAJF1K4ihxuPPdRk4w7WM5s7CUjmxQYjxRFW6UaXCl
tQ20bHSvtrcofq4Zy9A9gkD1UaYrxgXgxUQQUTCnQT/iAvoo5z6bDwhmhbDi2CVQ
S+RtLsXan9YQxT7fyo4dB3UJYijs/MOot9qqcc7R3x97LsjchPAVwrVHLO0onsVL
exynkydlMWNRHr/t1NtdtuwDjZVCjZ2MYz8fBt/1Tq3tk1hQ8dLCW41QM2yW0O3e
lJGn0IcN4nQ8Cx5f8VF9dEJK4AlyYQIDAQABo4ICvzCCArswHQYDVR0OBBYEFOHY
//i10OwlDvkfn8N9xbxN2OhTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMkU3NDY4MDhCMTgxMUYxQjMzMjIzQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACaxiUDBAOaxiADBAGa
y84DBAKay9QDBACay9kwDQYJKoZIhvcNAQELBQADggEBAIRa08DLUM+ppT5SXv4T
RT6Axrc+fSD0l0sY5smTDiHRlzwkSR5Q2l9So3IeDQhizM169iKCCcJZsrK+vUZS
lEcA4rDlwuMTj03WvnT6htFahKnkDBLk1OIz09L3liiweZHjsluQSxDWUmkmAHUt
8W1+/ZqNwhQZkxAcSn9fdovlroj0x/qu1A4OfnZ3PoTrJ1+pTIglZ7Qvlw8cf9zv
mG9PZciBCLD19pPfX3FmVR0sBbxlAo7k6jecfrwo5bDYnvdK/3O+uvzGLa9I8e4y
kwHM9ht0BZQNkCSICxrEAlgfgeuhhtNnADl4ypGm6BQxYjq7LikZkg11jldVVEPI
Ol4=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:50 2026 by rpki-client