Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD6B7FA0AA311F1931161E4DAE4EC9C.roa
File:                     0DD6B7FA0AA311F1931161E4DAE4EC9C.roa (raw, json)
Hash identifier:          GfifNeb5eevcSumZB90Mqjp84noQ4ey4w9ngeE/NS98=
Subject key identifier:   42:FD:6C:79:83:4A:9E:F2:D9:F1:C3:F1:30:A8:2F:A9:4C:F5:A0:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B9A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD6B7FA0AA311F1931161E4DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 19:18:06 +0000
ROA not before:           Sun 15 Feb 2026 19:18:01 +0000
ROA not after:            Sun 01 Mar 2026 19:18:01 +0000
asID:                     9304
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Mar 2026 19:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113056 (0x1b9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 19:18:01 2026 GMT
            Not After : Mar  1 19:18:01 2026 GMT
        Subject: CN=69921bed-11fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:cd:ab:5b:e1:4b:16:67:12:09:e5:7b:93:
                    a1:a8:14:b3:75:cf:85:f2:9f:bc:b2:9c:95:66:dd:
                    61:92:8f:04:51:c1:88:4d:09:6c:35:10:0d:b1:5f:
                    b1:70:76:71:91:21:c8:07:0e:1a:af:e4:a5:16:90:
                    9b:08:3d:bf:7f:59:a7:5f:0d:b5:19:93:b7:35:bf:
                    e1:55:74:6c:46:28:08:9c:08:27:4a:89:3d:8f:9f:
                    1d:36:58:21:c1:c4:cc:f9:0a:52:fb:8d:f0:e2:e4:
                    b1:22:ab:5e:c7:7a:64:8a:76:36:04:29:ac:5e:bb:
                    38:a0:d1:95:fe:6a:7f:a8:ae:cc:fb:ae:67:b8:5f:
                    35:8b:91:f4:1d:bc:3a:86:0a:4c:3c:d4:6c:4c:a8:
                    49:8a:28:8d:ba:a1:b7:60:e4:98:2b:7c:20:fd:cf:
                    6e:e4:06:0f:20:36:89:a4:cc:92:c4:f4:24:e6:8a:
                    28:4d:d8:d4:c3:03:c4:a7:9b:99:83:0f:ea:cf:67:
                    dc:61:1e:0e:55:21:47:91:03:0c:d9:84:bd:60:32:
                    ba:1c:8a:18:66:83:dd:f6:11:31:9c:87:19:d0:10:
                    72:b8:26:8f:c5:b4:fe:5a:f9:e9:e6:06:4d:e6:be:
                    2d:4a:e9:55:1d:2b:b1:70:29:78:39:1f:d1:bf:a1:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:6C:79:83:4A:9E:F2:D9:F1:C3:F1:30:A8:2F:A9:4C:F5:A0:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD6B7FA0AA311F1931161E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0/22
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:15:f8:5d:89:9c:95:92:f4:37:e1:8e:c0:e9:11:e8:c8:f4:
         1c:ef:7e:32:45:39:e3:8d:fd:0a:ad:2a:65:ed:8f:dc:f8:d1:
         f7:3e:1c:5c:38:3c:2a:9b:30:89:a8:32:47:66:91:5a:af:98:
         42:60:7e:f1:75:33:2e:a0:c1:65:49:29:1a:05:a3:0b:41:b2:
         24:76:cd:cd:2c:a6:81:22:e0:1e:aa:37:9c:3e:20:27:7a:4f:
         b7:8c:c6:f0:1d:f3:c3:5a:bf:06:83:4f:3c:e8:3a:a3:e7:bb:
         32:0f:fd:bc:3c:ae:75:d7:d7:d8:46:70:01:21:14:4a:7a:28:
         25:a6:1b:87:7d:55:e8:e8:c3:45:c3:53:0a:0c:0f:cd:71:68:
         09:77:37:cd:e7:b5:5e:16:09:e8:31:f5:61:ad:f3:a7:d6:01:
         96:58:88:d5:7b:51:ba:d6:10:62:8d:2d:9d:63:2a:4a:fb:c4:
         b5:5c:bf:61:3e:63:2b:07:e2:4f:c1:cb:cd:76:7e:62:ac:61:
         93:a8:8f:10:08:b0:cd:09:08:24:3b:64:b1:46:73:bc:57:5b:
         5f:44:28:43:e7:c3:b4:ff:05:79:1d:31:5d:b1:f3:26:c2:dd:
         11:56:74:f1:af:26:b4:30:29:0a:2c:c5:48:20:07:ba:e0:93:
         51:0b:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:22 2026 by rpki-client