Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7512BEB455DF11F1A0A0BC16CF1D38B0.roa
File:                     7512BEB455DF11F1A0A0BC16CF1D38B0.roa (raw, json)
Hash identifier:          s5Y0Ln7fD2FXfAlBSKxJ1YHLLZkvFmhmSgISro/TV3s=
Subject key identifier:   F1:60:CC:29:09:44:BA:A1:15:5F:C2:F3:DC:6D:1B:8E:9D:7C:3A:06
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CE0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7512BEB455DF11F1A0A0BC16CF1D38B0.roa
Signing time:             Fri 22 May 2026 13:09:26 +0000
ROA not before:           Fri 22 May 2026 13:09:21 +0000
ROA not after:            Fri 19 Jun 2026 13:09:21 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118286 (0x1ce0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 22 13:09:21 2026 GMT
            Not After : Jun 19 13:09:21 2026 GMT
        Subject: CN=6a105586-fd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:db:89:bb:34:f3:7a:e8:17:dc:60:78:37:
                    38:09:68:d7:17:11:f6:a0:6f:83:55:f1:2c:ad:d1:
                    c7:61:af:dc:93:19:f6:08:b4:21:3f:58:f5:fc:b6:
                    34:60:1f:4d:26:bf:11:af:b2:03:15:fc:f7:75:d5:
                    ea:56:9b:0c:c7:59:c9:27:43:19:cd:af:f9:ef:e3:
                    ed:dd:36:d7:a0:ef:f8:5c:27:02:30:1d:d3:aa:e9:
                    f5:59:4a:1a:b6:78:4c:8d:d1:a7:d2:b0:67:d5:51:
                    1f:8b:2b:2a:7f:d1:4d:15:5a:6b:16:1e:1f:fc:1c:
                    df:dd:60:0a:42:9d:cb:10:d3:62:dc:cd:e2:57:9a:
                    35:8b:ef:56:45:1a:6b:69:51:b5:7d:de:91:47:92:
                    86:b8:af:c1:17:4d:f7:e7:d4:a0:e3:83:01:ae:e0:
                    b1:3b:db:1e:7e:35:e1:68:e0:7f:98:85:9b:95:42:
                    e3:bf:43:45:d9:13:b6:22:fa:f5:7d:12:8d:1f:6d:
                    ce:eb:ea:48:91:57:87:48:ce:51:7b:03:b9:f2:47:
                    bb:0c:64:65:6d:33:63:80:a1:f8:a1:67:58:8c:f6:
                    98:b7:30:fa:42:f6:1b:80:e9:e8:48:ab:a5:57:4f:
                    8b:0f:ea:20:ff:18:90:f8:15:a8:37:f0:37:b0:1e:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:60:CC:29:09:44:BA:A1:15:5F:C2:F3:DC:6D:1B:8E:9D:7C:3A:06
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7512BEB455DF11F1A0A0BC16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:81:f3:ec:b7:40:ef:f7:80:03:6a:d5:0a:61:35:6c:39:
         ca:de:7b:86:c8:c9:3b:96:c8:a0:c2:1c:56:ce:73:b2:80:c2:
         95:4d:86:a8:f9:02:c9:fd:0f:20:b8:a0:94:58:42:ae:fe:d9:
         49:cd:da:7d:6b:5b:7d:6b:35:d3:b7:8a:7d:18:2a:9a:c4:11:
         8d:8c:58:a1:84:15:ff:75:13:f7:e6:e3:90:79:ad:0b:dc:a2:
         d7:a5:df:ba:29:6e:a5:ab:68:37:68:0c:97:1a:7f:b7:7e:c9:
         09:d4:37:47:f9:bc:e4:a9:be:1f:9a:4c:85:4b:a1:6c:6d:7a:
         22:70:06:20:5b:bd:41:c7:71:28:58:1f:92:0b:17:f0:1d:cb:
         8e:30:63:da:e3:53:f9:ac:c0:f1:c1:7a:77:4b:c6:7a:fb:ce:
         bc:f8:d8:18:02:a1:36:dc:1c:76:dc:73:d6:79:1d:51:62:d2:
         93:05:54:af:a0:ec:01:7d:a6:d6:0a:8c:32:46:34:6f:8b:a1:
         0e:68:05:1f:32:d7:87:2b:e0:54:de:62:3c:6c:d5:02:60:8a:
         cb:d9:7b:50:34:8f:ae:25:fd:00:7f:f1:32:14:a6:06:03:e9:
         42:76:0d:3a:a3:36:75:3b:f8:80:96:37:00:b9:b9:16:70:1b:
         d8:7c:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:32 2026 by rpki-client