Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187B7B8C5BCA11F188D2F107CF1D38B0.roa
File:                     187B7B8C5BCA11F188D2F107CF1D38B0.roa (raw, json)
Hash identifier:          UQzo1il5xCfh1I7RobVWUntjbHpxWPvHZI0xGuN7d5o=
Subject key identifier:   AF:77:EB:C6:68:47:32:A8:B1:48:71:4B:3D:BF:EE:30:F9:51:07:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D0CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187B7B8C5BCA11F188D2F107CF1D38B0.roa
Signing time:             Sat 30 May 2026 01:51:38 +0000
ROA not before:           Sat 30 May 2026 01:51:33 +0000
ROA not after:            Wed 01 Jul 2026 01:51:33 +0000
asID:                     62240
IP address blocks:        154.195.6.0/24 maxlen: 24
                          154.195.159.0/24 maxlen: 24
                          154.195.160.0/24 maxlen: 24
                          154.195.161.0/24 maxlen: 24
                          154.195.162.0/24 maxlen: 24
                          154.195.163.0/24 maxlen: 24
                          154.195.164.0/24 maxlen: 24
                          154.195.165.0/24 maxlen: 24
                          154.195.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118988 (0x1d0cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 01:51:33 2026 GMT
            Not After : Jul  1 01:51:33 2026 GMT
        Subject: CN=6a1a42aa-4881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:37:61:d2:f0:50:06:bc:b7:ec:07:d1:d4:
                    54:a7:77:57:71:fb:3e:6b:ea:50:3f:63:66:70:97:
                    28:5f:9a:0a:ef:07:8e:33:80:73:fa:d6:20:c2:b8:
                    e5:95:a0:89:91:97:df:56:ef:7d:b8:25:75:49:bd:
                    02:60:0c:16:ba:f6:df:28:70:2d:17:45:fe:bc:d2:
                    2d:dc:c0:fa:1f:09:c9:82:29:ad:20:47:3d:9c:b3:
                    e1:e6:15:1a:f0:66:87:ff:cc:3d:48:5c:04:12:57:
                    71:b0:ea:6e:4c:1e:c5:95:c6:c3:41:f6:4c:de:e1:
                    a1:fc:36:d0:c6:7a:95:eb:ee:d0:03:09:c6:84:b7:
                    e7:65:5c:b7:7f:ef:3c:9b:45:73:c3:9c:83:6d:0e:
                    c9:2f:2b:a7:1a:3e:4b:a5:ad:5e:73:3a:61:84:2f:
                    fe:69:07:e6:63:c3:14:b9:82:a4:e8:ff:9e:ea:98:
                    2d:73:97:b8:5c:e9:f2:4b:cb:6a:75:fe:a3:d5:3f:
                    ee:10:1c:e3:38:df:9a:75:c5:fd:fa:ec:80:51:59:
                    8f:db:4d:cb:4e:12:15:7a:4c:60:17:8c:36:99:b3:
                    00:3c:4b:a5:74:5c:10:bb:3d:3d:2a:c5:5e:31:5c:
                    cc:07:94:d4:b7:44:ae:fe:c1:c4:70:19:3b:00:f5:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:EB:C6:68:47:32:A8:B1:48:71:4B:3D:BF:EE:30:F9:51:07:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187B7B8C5BCA11F188D2F107CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.6.0/24
                  154.195.159.0-154.195.166.255

    Signature Algorithm: sha256WithRSAEncryption
         26:84:8a:f8:8c:82:be:b1:35:d5:3f:e3:50:d2:54:2d:d3:3c:
         7c:d0:5d:5c:e0:89:f0:2c:b6:e5:06:08:97:c6:86:46:02:ea:
         84:5a:a1:99:01:48:89:65:ca:5a:a7:ec:85:bb:4f:aa:e0:38:
         fb:9e:1c:15:6b:16:ed:37:ac:9d:6a:d0:cc:5a:eb:d3:bf:d5:
         b2:6b:ab:f3:a4:a8:12:ca:c7:11:e2:3a:7e:2a:e1:93:6f:53:
         0e:c4:fb:3c:69:7d:0e:2f:c9:da:6d:aa:03:f4:bf:72:5d:70:
         4e:42:94:ff:ed:44:cc:ab:e5:b7:09:9c:01:35:3b:95:20:60:
         19:0d:51:e2:61:a2:e5:9c:a2:7a:fc:2a:86:c2:b5:58:42:58:
         13:a3:41:f6:73:80:3a:6a:5c:91:70:50:20:25:c4:3c:f6:c8:
         03:cf:b0:86:21:a5:48:94:1d:fe:8c:d9:fe:80:5f:94:ae:d0:
         b9:84:85:16:0e:83:4d:7d:ec:83:14:3f:00:2f:86:b3:1f:57:
         fb:4b:bd:ae:55:bc:12:ea:85:a9:f1:ee:03:e3:01:80:cb:8f:
         58:4d:51:e2:4e:4a:e7:22:dc:b1:34:8b:bb:b9:da:7f:1c:7f:
         cb:f2:0a:26:f8:ef:2d:a7:7d:14:97:67:ad:43:2f:fe:ca:a4:
         df:54:1b:3c
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdDMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTMwMDE1MTMzWhcNMjYwNzAxMDE1MTMzWjAYMRYw
FAYDVQQDEw02YTFhNDJhYS00ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1483YdLwUAa8t+wH0dRUp3dXcfs+a+pQP2NmcJcoX5oK7weOM4Bz+tYg
wrjllaCJkZffVu99uCV1Sb0CYAwWuvbfKHAtF0X+vNIt3MD6HwnJgimtIEc9nLPh
5hUa8GaH/8w9SFwEEldxsOpuTB7FlcbDQfZM3uGh/DbQxnqV6+7QAwnGhLfnZVy3
f+88m0Vzw5yDbQ7JLyunGj5Lpa1eczphhC/+aQfmY8MUuYKk6P+e6pgtc5e4XOny
S8tqdf6j1T/uEBzjON+adcX9+uyAUVmP203LThIVekxgF4w2mbMAPEuldFwQuz09
KsVeMVzMB5TUt0Su/sHEcBk7APXliwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFK93
68ZoRzKosUhxSz2/7jD5UQeqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xODdCN0I4QzVCQ0ExMUYxODhEMkYxMDdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsMGMAwDBACaw58DBACa
w6YwDQYJKoZIhvcNAQELBQADggEBACaEiviMgr6xNdU/41DSVC3TPHzQXVzgifAs
tuUGCJfGhkYC6oRaoZkBSIllylqn7IW7T6rgOPueHBVrFu03rJ1q0Mxa69O/1bJr
q/OkqBLKxxHiOn4q4ZNvUw7E+zxpfQ4vydptqgP0v3JdcE5ClP/tRMyr5bcJnAE1
O5UgYBkNUeJhouWconr8KobCtVhCWBOjQfZzgDpqXJFwUCAlxDz2yAPPsIYhpUiU
Hf6M2f6AX5Su0LmEhRYOg0197IMUPwAvhrMfV/tLva5VvBLqhanx7gPjAYDLj1hN
UeJOSuci3LE0i7u52n8cf8vyCib47y2nfRSXZ61DL/7KpN9UGzw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:00 2026 by rpki-client