Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7195277661D911F191C39AE4CE1D38B0.roa
File:                     7195277661D911F191C39AE4CE1D38B0.roa (raw, json)
Hash identifier:          5eUcLZlEbgil+1UegI3hhHNJxODib3TVaW6GiLQEXc8=
Subject key identifier:   B7:9B:DC:1A:4A:65:4F:F6:01:84:6D:15:F1:AC:DC:6E:3F:85:44:76
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0996
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7195277661D911F191C39AE4CE1D38B0.roa
Signing time:             Sat 06 Jun 2026 18:56:37 +0000
ROA not before:           Sat 06 Jun 2026 18:56:32 +0000
ROA not after:            Tue 30 Jun 2026 18:56:32 +0000
asID:                     22724
IP address blocks:        102.177.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454 (0x996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jun  6 18:56:32 2026 GMT
            Not After : Jun 30 18:56:32 2026 GMT
        Subject: CN=6a246d65-1667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:14:7f:34:d1:c2:5e:51:70:f2:c9:15:59:
                    9d:dd:b4:c2:0f:f0:80:04:e3:16:3c:91:01:6b:ba:
                    8b:49:1a:49:d3:ac:91:b6:ab:a3:55:04:b8:a7:a1:
                    39:5e:4d:22:40:72:e5:c6:4d:96:be:49:7f:27:27:
                    86:db:f7:4f:a8:91:50:9d:c7:f6:fd:f7:89:44:7e:
                    2d:b3:6e:30:ac:b3:f4:9f:83:59:ec:fc:88:11:9e:
                    11:b2:1a:0f:97:8d:79:84:6c:2a:35:5e:a2:34:4d:
                    e9:e0:6b:4f:24:42:2b:07:75:4d:29:cc:0d:80:a6:
                    d9:a5:3c:48:ec:93:cf:b1:44:8c:7c:ff:ab:8b:6e:
                    57:90:4c:27:06:c8:2a:ad:af:b7:c3:b1:95:72:76:
                    9e:75:e6:53:a5:a9:a8:dc:8f:13:f2:3d:fb:c6:9a:
                    ac:b4:9d:20:55:2e:e6:c2:42:56:1a:18:8e:d2:d6:
                    e7:39:0c:ba:dd:bd:97:a4:cd:08:dd:ac:c0:49:60:
                    b3:b5:e9:75:c5:f7:00:20:6f:62:d8:ba:6a:7e:35:
                    60:a5:fe:e7:3a:46:6c:7c:1f:48:2b:ed:02:c7:e4:
                    db:0b:12:71:1d:8b:75:f5:76:2e:2e:78:fb:d6:55:
                    43:60:cc:26:12:77:be:2e:46:e6:7e:d7:88:d1:0a:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:DC:1A:4A:65:4F:F6:01:84:6D:15:F1:AC:DC:6E:3F:85:44:76
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7195277661D911F191C39AE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:b8:50:25:84:73:c5:71:91:5e:97:f5:d2:1d:4b:45:87:
         0b:51:c4:95:c2:53:0f:b9:0f:2a:9f:bd:97:5f:ec:82:9b:5c:
         62:06:50:f2:3a:4a:f7:6b:f9:f5:74:0f:0e:5f:59:49:ca:f9:
         1a:12:59:13:97:94:7b:a4:fc:e2:26:f5:c6:db:6f:b4:7e:fe:
         98:e5:93:c7:d1:2c:77:45:7d:25:60:f8:be:46:bb:14:12:c4:
         59:54:3c:f8:90:d5:f2:3e:18:2b:33:bd:2d:8a:30:49:7b:74:
         7f:14:04:6e:87:07:2b:1a:55:8f:f0:78:d5:a8:86:37:a3:13:
         01:36:64:ab:be:50:27:23:62:25:bb:a4:69:3f:53:3c:c9:d9:
         2d:28:d2:fe:e3:fc:74:e2:03:57:22:0b:f3:6c:53:2e:ef:5b:
         5f:94:1b:8f:4d:10:5b:a5:33:1a:0d:f4:89:10:4c:ae:fb:09:
         bf:2a:02:83:2e:d7:fe:2d:d3:92:29:68:cb:6e:11:40:8d:44:
         a9:54:3a:7c:97:f8:4e:0d:b5:60:ac:2b:00:bd:58:df:01:10:
         18:85:45:02:63:01:11:f5:be:c8:b6:69:b7:72:9d:6b:ca:0d:
         3b:47:04:16:bb:27:0d:13:e1:e0:ca:57:67:0e:44:d6:8f:db:
         71:93:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:48 2026 by rpki-client