Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73C0922923511F1A6B460EDCE1D38B0.roa
File:                     E73C0922923511F1A6B460EDCE1D38B0.roa (raw, json)
Hash identifier:          qLaCvasAD5CkJjsDHow9UJpZY2eULE11E92jo7f+POg=
Subject key identifier:   56:9E:C1:1F:10:D7:44:1B:94:5B:21:C9:D7:B0:B3:96:5B:9B:D5:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73C0922923511F1A6B460EDCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:59:24 +0000
ROA not before:           Fri 07 Aug 2026 07:59:20 +0000
ROA not after:            Sun 13 Sep 2026 07:59:20 +0000
asID:                     137897
IP address blocks:        154.92.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122178 (0x1dd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 07:59:20 2026 GMT
            Not After : Sep 13 07:59:20 2026 GMT
        Subject: CN=6a75905c-7d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:ab:50:26:5e:87:e6:02:54:62:73:5a:39:
                    0f:0f:52:ff:6d:69:6f:33:85:bf:63:00:e4:92:f7:
                    18:8c:db:ad:9b:83:52:cc:9c:2f:1e:c9:82:70:52:
                    4c:ad:b8:21:9a:2b:68:5c:0d:dd:d7:1a:20:7b:9f:
                    3c:5f:1f:ae:91:8a:ee:d2:90:b1:27:bc:59:a6:2d:
                    7e:c6:d6:1d:22:49:b1:a7:94:74:46:99:1b:8e:dc:
                    7b:10:29:d6:ba:97:41:2c:08:ec:11:b2:26:01:3d:
                    8f:57:e7:d8:35:cf:1e:d9:5c:63:d5:ee:70:85:95:
                    51:0f:d6:d1:91:39:95:b1:7c:1b:07:84:3c:12:67:
                    8c:5b:54:56:e2:e7:8e:a7:5c:15:24:19:6c:c5:38:
                    a8:19:ca:46:7d:dd:4b:5f:d6:22:b4:5c:7f:08:01:
                    c8:89:e3:49:e1:76:ec:43:53:f6:71:17:cd:d9:dd:
                    56:47:53:4a:29:61:5a:b8:43:dd:04:8a:66:fd:50:
                    6b:d0:c0:b2:f4:69:3c:35:26:8b:0a:8c:5b:62:67:
                    47:3b:06:7a:2f:88:a6:06:93:33:b8:b9:d7:40:cd:
                    66:b0:22:ea:e2:62:d3:18:ac:8f:4d:f9:4e:7a:08:
                    2c:b2:bb:78:75:17:ed:f8:fd:1f:39:9d:3b:e9:9d:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:C1:1F:10:D7:44:1B:94:5B:21:C9:D7:B0:B3:96:5B:9B:D5:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73C0922923511F1A6B460EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:68:80:39:fe:4c:e6:df:cf:c8:58:61:00:f6:c6:0a:42:
         de:1c:2d:2c:e4:3c:fe:0e:37:3b:00:04:40:97:dc:d4:06:24:
         36:a8:a3:c2:56:b0:96:b0:07:07:b1:f7:0f:9b:2e:3f:a0:76:
         26:b5:10:08:18:b8:84:9c:d3:98:ae:58:5c:56:e3:0c:85:65:
         ce:45:89:0d:78:f7:b2:cb:d5:90:7a:21:ae:15:2e:84:de:54:
         82:98:0e:b9:6f:ed:43:de:5b:8b:37:e0:72:6d:c8:13:1e:ae:
         c9:9c:c5:93:ab:e5:e9:d9:cb:6b:1b:82:a4:e1:0e:3c:a2:98:
         40:7e:c5:da:44:66:e2:9a:26:19:a1:c1:0d:cb:50:24:f4:c7:
         ae:a5:88:ad:12:31:bd:f2:01:6d:9b:0a:01:4a:b0:7a:7b:33:
         8b:df:04:38:3b:41:28:ce:ee:54:d7:d4:a7:8d:2a:b1:4b:4c:
         76:b2:ce:5d:2d:b3:75:ba:45:f6:c0:ee:44:d1:8b:16:9a:2f:
         59:c2:fc:f7:1f:a6:13:af:cb:c8:ef:21:90:6b:52:73:51:a1:
         41:64:ab:8e:2d:c4:8d:4a:e1:1c:2c:cb:e0:c9:f5:7f:e1:bc:
         3d:72:bc:a4:b2:6f:3d:5e:ef:d9:cc:12:ce:dd:2a:ae:53:1e:
         e9:e9:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:11 2026 by rpki-client