Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDAC94F290A911F1891AA30FCF1D38B0.roa
File:                     FDAC94F290A911F1891AA30FCF1D38B0.roa (raw, json)
Hash identifier:          d2bawzJCM9YlTzWMSKvzlTkt29V+Enl8aZBNSAR/Z1Y=
Subject key identifier:   6A:97:C3:72:1B:DF:61:61:A5:B3:F2:42:9E:80:FF:B0:47:42:5F:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DCC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDAC94F290A911F1891AA30FCF1D38B0.roa
Signing time:             Wed 05 Aug 2026 08:45:21 +0000
ROA not before:           Wed 05 Aug 2026 08:45:17 +0000
ROA not after:            Sun 15 Aug 2027 08:45:17 +0000
asID:                     36898
IP address blocks:        154.214.242.0/24 maxlen: 24
                          154.214.243.0/24 maxlen: 24
                          154.214.244.0/24 maxlen: 24
                          154.214.245.0/24 maxlen: 24
                          154.214.246.0/24 maxlen: 24
                          154.214.247.0/24 maxlen: 24
                          154.214.248.0/24 maxlen: 24
                          154.214.249.0/24 maxlen: 24
                          154.214.250.0/24 maxlen: 24
                          154.214.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122055 (0x1dcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  5 08:45:17 2026 GMT
            Not After : Aug 15 08:45:17 2027 GMT
        Subject: CN=6a72f821-f701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:9e:fe:20:36:83:8e:32:4b:ee:4f:6c:4c:
                    e7:78:41:12:3a:0d:dc:6b:72:f1:77:8b:5e:2d:75:
                    bf:12:b3:eb:3b:b7:ad:1a:1e:cf:34:3c:a6:b8:55:
                    c5:9f:2d:69:85:85:60:3f:b9:8b:3b:30:43:e3:63:
                    68:f3:74:53:84:82:73:cb:ef:73:a8:a8:a6:79:52:
                    7a:df:1d:f0:83:14:aa:46:8b:dd:64:fa:cc:c9:1b:
                    d0:b4:ab:ed:a9:59:23:fc:fe:0e:be:5a:ba:b2:78:
                    5a:fb:0d:2d:fe:ea:21:f0:51:45:ea:41:d7:55:99:
                    08:22:da:6d:79:80:f8:bd:5b:7c:69:24:6d:34:08:
                    e5:42:b9:63:ec:64:37:77:84:bc:09:43:4f:8c:b7:
                    3d:d7:57:a4:e4:a9:55:54:c3:a1:35:e8:64:3a:9a:
                    c1:a0:13:c1:35:71:38:6f:7c:f8:c0:64:28:08:03:
                    70:6e:38:14:68:b8:b9:a0:84:0a:34:e7:2e:c4:c0:
                    05:36:e0:44:72:11:55:09:d5:64:53:53:24:4e:e9:
                    e5:70:19:89:f3:f8:89:ab:d2:0c:c7:53:1a:d5:ef:
                    d4:e0:a5:72:7e:e1:d5:4b:77:22:4e:40:0a:f9:75:
                    9d:65:6b:f0:a1:05:3b:1a:33:01:09:af:cd:3c:e6:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:C3:72:1B:DF:61:61:A5:B3:F2:42:9E:80:FF:B0:47:42:5F:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDAC94F290A911F1891AA30FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.214.242.0-154.214.251.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:1d:46:90:a2:2e:8a:67:6b:0e:14:e6:d8:65:81:3f:a4:
         e0:bd:77:bd:a5:41:90:75:aa:1a:c6:6a:7a:7f:73:82:be:52:
         b7:48:30:52:19:50:64:76:0b:f2:b8:62:f1:25:ad:a1:43:95:
         6b:c0:5a:52:81:f3:46:ce:3c:d0:1c:85:6d:1a:43:a6:ee:c3:
         2e:f5:16:cc:f6:98:72:40:80:4b:80:0e:f2:3b:d8:72:85:44:
         96:d8:b1:37:4d:6a:d5:bd:63:f0:78:60:74:66:9b:7c:d5:79:
         0c:d9:29:f6:01:86:b5:1a:2b:f8:bb:8b:4f:69:0b:72:28:8c:
         be:9a:87:40:78:4a:f1:5a:70:89:68:60:1d:aa:35:0d:12:9c:
         04:95:ab:b9:61:80:7d:83:58:1c:25:57:1d:63:a1:a6:65:4c:
         54:dc:f8:f0:83:33:70:1a:c2:94:86:0a:73:bb:16:ff:a6:c5:
         65:75:23:2c:d5:ba:44:d0:83:33:15:5c:6b:22:4f:fb:dd:45:
         06:13:4b:b2:cc:75:5f:f7:04:e1:7d:2c:dc:c3:0f:d8:fc:17:
         56:d0:94:36:ad:94:3e:85:f7:e7:8d:6a:47:56:e6:04:b9:54:
         bb:01:f2:34:52:3c:1a:79:f8:a8:f6:d3:c0:f5:f9:83:4e:47:
         7a:da:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:00 2026 by rpki-client