Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC79E50C923F11F1AFF55FABCE1D38B0.roa
File:                     FC79E50C923F11F1AFF55FABCE1D38B0.roa (raw, json)
Hash identifier:          rAtaiAr5yka093wqumZbRKXLcDR6ZL3oaiWpFs70SIg=
Subject key identifier:   D4:33:2D:2C:9A:DF:41:FE:82:0A:42:39:3C:4F:BF:DD:75:21:3C:DD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC79E50C923F11F1AFF55FABCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 09:11:34 +0000
ROA not before:           Fri 07 Aug 2026 09:11:30 +0000
ROA not after:            Sun 06 Sep 2026 09:11:30 +0000
asID:                     153517
IP address blocks:        154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122213 (0x1dd65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 09:11:30 2026 GMT
            Not After : Sep  6 09:11:30 2026 GMT
        Subject: CN=6a75a146-0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:00:46:94:05:75:63:18:13:79:53:55:39:
                    7d:cd:e6:cf:72:3a:fd:db:ae:b7:47:cf:aa:c4:9f:
                    95:bd:10:9c:99:2a:27:ac:86:32:75:1c:c7:9d:f3:
                    3b:a3:b9:4d:3c:35:88:54:78:4d:be:d9:13:01:ee:
                    56:4a:aa:11:0c:f9:e5:6c:1f:a7:c4:21:06:e4:fe:
                    1d:f1:9f:10:da:d3:34:66:60:9e:66:b4:d1:20:a4:
                    15:b1:33:39:9a:64:4e:ec:cc:03:41:fd:dd:4a:0c:
                    90:fa:fd:bd:38:49:b5:98:5b:5e:e7:70:ad:05:31:
                    8c:0f:08:e3:e8:17:29:81:6a:4e:6d:a0:2e:44:d4:
                    18:77:5a:e3:62:75:a6:15:d2:8b:c7:0e:62:ba:58:
                    31:9e:5e:ae:14:93:4a:ab:f2:47:30:28:70:62:d5:
                    41:1c:01:e1:e3:17:c0:52:f7:41:0b:9d:ca:39:6d:
                    39:14:5d:63:95:f8:61:d5:83:5a:1d:e2:26:1d:b6:
                    85:29:fe:88:39:03:a9:93:4c:7e:ae:99:f8:75:27:
                    2f:00:72:5d:3f:d2:38:fa:17:20:d9:18:98:75:aa:
                    9f:52:f5:d3:02:a6:b7:b8:64:1b:a9:70:79:ba:c1:
                    7b:af:48:cb:75:c3:e5:53:c9:cc:1c:20:92:41:4c:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:2D:2C:9A:DF:41:FE:82:0A:42:39:3C:4F:BF:DD:75:21:3C:DD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC79E50C923F11F1AFF55FABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.21.0-154.86.30.255

    Signature Algorithm: sha256WithRSAEncryption
         73:cd:4f:0f:71:70:74:96:0c:b8:8f:36:26:75:e0:32:fb:15:
         6c:d0:a0:20:3b:3c:79:43:07:58:4e:44:73:03:bb:f9:fe:76:
         ee:55:02:66:54:62:7e:99:81:20:bc:9f:28:18:76:f5:91:b1:
         f7:15:6b:aa:f1:48:fc:6b:0e:39:e2:0d:e6:3e:85:aa:2e:e8:
         80:cf:b2:11:2e:48:9c:c9:5f:f3:5e:41:c4:2a:f7:b7:f7:2b:
         7e:34:8a:a6:30:4f:da:91:57:e9:f6:69:b5:02:a9:85:6e:5a:
         80:60:d8:97:0d:94:a3:e7:c0:f5:e9:b9:2e:5b:7b:35:56:aa:
         90:cd:80:6f:86:4e:c0:f2:65:75:3c:24:3f:7f:2b:e4:dc:db:
         2f:b8:b6:7b:52:89:07:9e:f2:4b:81:dc:5b:f9:e4:24:b2:0c:
         f3:d0:d0:f8:1a:6b:30:4c:a4:57:47:cd:af:92:70:48:c7:87:
         b8:e3:2e:1c:5a:e0:67:0f:07:6b:ad:b0:15:0c:58:7b:f9:f4:
         f0:2a:c4:dc:82:6d:50:6f:23:41:57:24:9b:e3:b1:1d:fa:2e:
         de:5f:c8:c4:2d:39:18:d4:f8:f9:a6:f9:1b:22:e1:53:0b:2e:
         3a:f1:45:39:cd:f7:43:44:3a:78:fa:b9:c9:3c:97:80:cb:9e:
         65:dc:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:09 2026 by rpki-client