Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107A71F629D211F19D3E0DA5DAE4EC9C.roa
File:                     107A71F629D211F19D3E0DA5DAE4EC9C.roa (raw, json)
Hash identifier:          HKqVBgSWQphGZ2/lMXoctF0F7gAIryFHk0Jo9yJAVNk=
Subject key identifier:   F2:64:07:C7:CD:42:81:60:4B:D6:D8:8A:93:B1:36:FF:B4:91:26:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C128
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107A71F629D211F19D3E0DA5DAE4EC9C.roa
Signing time:             Fri 27 Mar 2026 11:42:43 +0000
ROA not before:           Fri 27 Mar 2026 11:42:37 +0000
ROA not after:            Sun 10 May 2026 11:42:37 +0000
asID:                     395793
IP address blocks:        154.81.50.0/24 maxlen: 24
                          154.82.162.0/23 maxlen: 24
                          154.82.164.0/22 maxlen: 24
                          154.91.152.0/24 maxlen: 24
                          154.91.153.0/24 maxlen: 24
                          154.91.154.0/24 maxlen: 24
                          154.91.155.0/24 maxlen: 24
                          154.91.156.0/24 maxlen: 24
                          154.92.205.0/24 maxlen: 24
                          154.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114984 (0x1c128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 27 11:42:37 2026 GMT
            Not After : May 10 11:42:37 2026 GMT
        Subject: CN=69c66d32-c181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:6e:70:9d:29:74:57:b2:80:db:25:51:e8:
                    b6:f7:f9:79:3f:54:e8:ef:2a:ba:e6:7d:ec:04:f8:
                    b2:ca:98:4f:74:27:ba:00:e4:61:a7:69:32:fd:3f:
                    4b:cb:21:93:eb:58:be:f6:c4:b9:29:2e:14:ae:d6:
                    ca:26:61:5c:34:3e:7b:3a:79:fd:c2:27:96:7f:01:
                    e0:91:e0:20:d6:34:03:89:7a:f5:fc:fa:e2:4f:2c:
                    f0:a0:d8:87:a4:ff:08:24:bb:13:b4:e3:62:21:b1:
                    6e:ba:88:58:40:23:1e:7a:23:84:3f:69:f0:ba:4c:
                    70:c2:73:9e:c6:f3:e7:96:f9:a9:bc:e9:c5:61:39:
                    e6:ca:b0:c8:52:ae:5f:8b:63:5b:b9:fe:b9:18:d8:
                    68:5e:bf:f8:90:36:38:a2:03:ba:b8:71:4e:35:e2:
                    bf:c4:cb:06:30:d9:01:c4:13:07:aa:70:2f:d1:3e:
                    c5:3e:30:90:1f:91:29:0a:1d:1d:72:a8:65:ad:1f:
                    3a:50:e0:b9:c8:ee:67:38:94:53:3d:65:6f:18:be:
                    ac:85:61:86:1c:50:7b:f7:1f:8a:27:77:ac:07:4a:
                    ea:95:60:ea:37:67:3a:66:11:b7:6a:77:11:e8:40:
                    35:e8:15:57:40:55:8e:28:9d:ec:fb:73:d9:f0:31:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:07:C7:CD:42:81:60:4B:D6:D8:8A:93:B1:36:FF:B4:91:26:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107A71F629D211F19D3E0DA5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24
                  154.82.162.0-154.82.167.255
                  154.91.152.0-154.91.156.255
                  154.92.205.0/24
                  154.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:0f:30:7b:c3:8a:08:4e:72:45:b3:e3:88:58:d2:e2:78:
         d9:c4:09:b0:e6:21:19:3b:a6:05:e3:9c:f5:fb:06:98:75:f4:
         ce:38:d5:a7:c1:31:01:89:0f:f0:72:d2:05:10:d9:73:3b:0a:
         d9:3a:2b:3f:41:25:6e:7f:3a:ae:0c:aa:bc:98:14:cd:64:4a:
         99:51:b2:e2:5f:4b:8e:ea:d5:66:e7:b0:2f:0b:ba:0e:2d:58:
         dc:09:00:ce:01:18:3c:f9:c9:df:65:06:c9:4a:73:59:d0:6e:
         8e:67:50:d4:fd:45:d3:d3:01:87:78:a5:ab:2b:bb:cb:d4:da:
         a4:69:cb:7d:e5:87:20:fe:2e:98:9e:78:51:8e:92:5f:b9:9a:
         40:ee:22:7e:d7:2d:92:8f:15:c7:a5:fc:02:ab:42:a0:4a:0c:
         2d:f4:ec:0d:9c:b1:0e:62:1d:78:0b:bf:06:aa:23:8b:94:ea:
         28:e7:cd:7a:34:86:ab:41:6e:dd:1f:bf:de:c3:63:bf:16:b2:
         68:19:0f:98:59:fd:a4:4e:7c:0c:de:45:73:42:19:38:ba:a2:
         34:44:36:ff:eb:5c:c8:70:73:3b:4d:e8:25:36:12:0e:e0:90:
         b6:b0:93:98:7a:c8:f2:40:7b:79:38:37:eb:36:45:f2:a4:5f:
         f9:e9:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:12 2026 by rpki-client