Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FE8D60948911F19593A408CF1D38B0.roa
File:                     F7FE8D60948911F19593A408CF1D38B0.roa (raw, json)
Hash identifier:          oDxxbLcBvfhSEkRQGe0rk72wqGY0JKPQtzKiwnCRwTY=
Subject key identifier:   59:A1:C4:E5:4C:8E:7F:A3:7F:EA:75:42:27:8F:CD:99:B1:70:55:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FE8D60948911F19593A408CF1D38B0.roa
Signing time:             Mon 10 Aug 2026 07:06:12 +0000
ROA not before:           Mon 10 Aug 2026 07:06:08 +0000
ROA not after:            Thu 17 Sep 2026 07:06:08 +0000
asID:                     22773
IP address blocks:        154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.107.0/24 maxlen: 24
                          154.85.108.0/24 maxlen: 24
                          154.85.109.0/24 maxlen: 24
                          154.85.110.0/24 maxlen: 24
                          154.85.111.0/24 maxlen: 24
                          154.94.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122298 (0x1ddba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 07:06:08 2026 GMT
            Not After : Sep 17 07:06:08 2026 GMT
        Subject: CN=6a797864-aaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:87:ce:03:bb:54:c2:af:02:9e:69:ca:63:
                    bb:e9:db:da:47:1f:6b:cb:1b:51:37:0f:d2:f6:3c:
                    04:d5:08:04:b6:41:cc:ab:39:97:1f:6b:9d:9b:5c:
                    29:15:35:3c:6e:03:4a:e8:dc:a0:b3:dc:ae:6e:bb:
                    af:ce:4d:03:59:0a:a4:59:ec:c2:50:7e:85:9a:3e:
                    08:59:91:bc:a9:6d:23:3b:a6:4d:c2:48:57:22:f4:
                    42:73:85:ca:3b:94:b0:e6:ea:83:fc:4b:43:8f:c9:
                    fa:de:35:99:ae:3b:85:30:dc:cb:ac:9c:b4:37:17:
                    46:53:c7:bf:5b:28:cc:57:d4:6d:81:a2:c7:5e:ce:
                    28:33:7d:b2:e4:dc:d4:57:f0:27:b7:fe:10:26:d2:
                    4b:42:29:be:fc:c2:2c:ca:14:11:2b:15:59:a0:8c:
                    06:07:6c:37:ba:87:4e:17:2f:df:ea:3c:bc:0c:8b:
                    8f:c6:ef:c2:d9:58:fd:5f:76:af:f6:4a:1c:3b:67:
                    e8:c5:3b:05:c3:f3:8c:76:99:a2:61:68:7d:5c:0e:
                    57:e1:82:b6:67:79:6b:25:cf:49:b9:0b:5c:99:4e:
                    98:b4:a3:a6:53:8e:fb:e3:7a:5e:96:41:67:0e:5d:
                    0a:bc:8c:de:23:2f:72:d2:83:31:d8:7c:a4:eb:bd:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A1:C4:E5:4C:8E:7F:A3:7F:EA:75:42:27:8F:CD:99:B1:70:55:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FE8D60948911F19593A408CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.13.0-154.82.15.255
                  154.85.12.0/24
                  154.85.107.0-154.85.111.255
                  154.94.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:82:53:1d:af:a5:69:7b:1a:35:de:4d:b1:b2:23:eb:ae:
         9c:f3:01:7f:54:49:a4:e4:60:f3:ae:a5:67:4c:73:9f:90:01:
         16:58:76:03:c6:16:25:c9:66:2c:e0:a1:fb:59:9e:9b:a0:7e:
         68:6b:2c:6f:ba:81:aa:8a:e4:15:cc:ed:cc:f8:64:73:5a:b5:
         03:ba:70:d3:43:98:ba:f1:20:de:35:cd:03:b6:41:de:ef:8d:
         aa:ae:69:f0:f5:e1:63:59:0a:46:5b:fc:4c:97:06:57:40:37:
         20:09:d9:c2:ab:1b:0a:4a:1f:6f:ce:ea:2d:92:db:8e:b8:f6:
         16:19:d6:d8:fc:6b:0c:fd:75:22:ae:bc:a0:34:fb:b1:bc:d4:
         05:2a:6a:71:12:df:22:1b:7f:fe:45:d5:7c:02:bc:47:e1:54:
         81:9e:57:cd:9e:42:28:69:e6:e4:01:dd:a5:ba:e1:7c:28:b6:
         4e:78:85:53:9e:42:b1:f8:5d:7c:ef:24:de:3b:c7:53:3a:a3:
         79:7a:0c:7d:4b:e9:74:11:76:b5:ad:96:35:ff:6a:23:62:cb:
         3f:4b:8f:74:ae:3a:00:a8:c3:04:c8:6f:6b:92:c0:64:05:58:
         0b:c9:89:26:d8:e8:b1:95:4a:bd:39:cd:79:ed:27:28:71:14:
         72:d0:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:58 2026 by rpki-client