Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A35CDA4619411F18BA421CACE1D38B0.roa
File:                     1A35CDA4619411F18BA421CACE1D38B0.roa (raw, json)
Hash identifier:          cu84JaoFcXSj6Fvjs22xzPNiSICCQj6t5hbdEzNIEGw=
Subject key identifier:   E6:74:8C:A1:00:EE:93:2B:06:16:31:AA:22:EE:0C:70:91:E4:CB:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D222
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A35CDA4619411F18BA421CACE1D38B0.roa
Signing time:             Sat 06 Jun 2026 10:40:15 +0000
ROA not before:           Sat 06 Jun 2026 10:40:10 +0000
ROA not after:            Sun 12 Jul 2026 10:40:10 +0000
asID:                     60117
IP address blocks:        154.82.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119330 (0x1d222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  6 10:40:10 2026 GMT
            Not After : Jul 12 10:40:10 2026 GMT
        Subject: CN=6a23f90f-7bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:d0:bf:b8:7e:0d:c4:13:96:27:01:62:43:
                    de:78:7d:20:7a:e8:28:08:51:1d:eb:da:de:14:89:
                    55:59:9f:1f:5a:e9:a4:6c:90:4b:18:ef:90:cf:8a:
                    ad:da:8d:ef:e8:81:57:aa:a6:d1:50:68:24:81:96:
                    e2:44:77:fe:5d:e3:69:bd:3b:6a:16:4f:c8:3c:3e:
                    ce:8a:f2:4f:01:7d:2d:8c:2b:60:6b:15:d2:b6:57:
                    99:f3:5f:95:ae:cb:28:81:dd:16:20:35:9c:74:12:
                    6e:5f:ed:6e:a4:26:21:96:9b:8a:49:75:fe:76:19:
                    24:e4:b5:8a:31:d4:e6:c1:85:92:e9:c1:4c:e0:2b:
                    bc:19:7b:57:0b:b0:90:98:f2:12:b5:75:2a:33:9c:
                    b8:b1:54:3b:74:d8:26:61:d5:45:0b:3f:17:28:13:
                    2c:61:8f:fa:d5:ab:c4:2e:63:d6:f5:5b:bb:e9:71:
                    38:0f:f7:f2:9f:0b:1b:fc:88:1d:b1:86:24:4c:89:
                    d5:99:29:bf:04:1d:80:f2:a5:31:ab:53:6a:e4:0b:
                    d8:b7:83:a2:67:a0:8d:63:38:56:4e:35:a0:6c:17:
                    a8:83:2d:a9:81:b1:45:74:1f:ca:33:5a:93:91:a9:
                    b3:ec:7e:06:f1:e0:f8:43:49:ff:cb:ac:69:f0:03:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:8C:A1:00:EE:93:2B:06:16:31:AA:22:EE:0C:70:91:E4:CB:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A35CDA4619411F18BA421CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e3:d8:3a:f4:4c:98:5f:39:28:ab:d2:38:3a:de:71:04:77:
         d0:a9:22:5e:d1:a9:25:a5:74:a5:6e:9b:30:9e:88:49:b3:55:
         5d:42:34:f9:3b:a3:75:1d:85:b0:ce:48:e5:84:85:aa:73:79:
         ec:29:07:35:01:a4:a8:c2:bc:69:47:30:dd:f8:04:05:4f:7f:
         9e:ce:0f:87:ec:7e:28:38:3a:eb:a4:62:c8:67:76:dc:c0:2a:
         42:30:e0:56:67:50:f0:93:af:68:45:c8:28:42:a9:8e:e2:59:
         c2:1d:3d:9d:6c:60:c5:f4:0f:13:aa:27:f0:1a:8b:fd:1e:31:
         09:07:0e:fc:69:92:e4:a1:56:3c:f3:b1:27:e3:ba:b8:87:f7:
         a3:77:32:e9:1b:ef:94:4d:11:bd:01:35:7c:5f:c8:50:b1:cd:
         dc:44:de:35:13:5f:c6:ad:13:24:81:f4:15:c7:c7:c3:0b:29:
         21:0d:7d:a4:4c:b8:11:4a:a2:22:cb:20:f7:1c:fc:0a:94:0d:
         01:d7:27:7c:14:97:5f:72:0a:f9:6a:f0:ef:03:0f:21:26:cc:
         87:7d:0d:db:03:81:f7:8c:76:1f:54:7f:57:a1:86:4a:82:1f:
         71:68:5b:e1:29:52:b9:6a:59:03:1b:40:01:f5:c1:de:50:01:
         75:4b:bc:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdIiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MTA0MDEwWhcNMjYwNzEyMTA0MDEwWjAYMRYw
FAYDVQQDEw02YTIzZjkwZi03YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArJfQv7h+DcQTlicBYkPeeH0geugoCFEd69reFIlVWZ8fWumkbJBLGO+Q
z4qt2o3v6IFXqqbRUGgkgZbiRHf+XeNpvTtqFk/IPD7OivJPAX0tjCtgaxXStleZ
81+Vrssogd0WIDWcdBJuX+1upCYhlpuKSXX+dhkk5LWKMdTmwYWS6cFM4Cu8GXtX
C7CQmPIStXUqM5y4sVQ7dNgmYdVFCz8XKBMsYY/61avELmPW9Vu76XE4D/fynwsb
/IgdsYYkTInVmSm/BB2A8qUxq1Nq5AvYt4OiZ6CNYzhWTjWgbBeogy2pgbFFdB/K
M1qTkamz7H4G8eD4Q0n/y6xp8ANndQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOZ0
jKEA7pMrBhYxqiLuDHCR5Mt+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQTM1Q0RBNDYxOTQxMUYxOEJBNDIxQ0FDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlIZMA0GCSqGSIb3DQEB
CwUAA4IBAQCh49g69EyYXzkoq9I4Ot5xBHfQqSJe0aklpXSlbpswnohJs1VdQjT5
O6N1HYWwzkjlhIWqc3nsKQc1AaSowrxpRzDd+AQFT3+ezg+H7H4oODrrpGLIZ3bc
wCpCMOBWZ1Dwk69oRcgoQqmO4lnCHT2dbGDF9A8TqifwGov9HjEJBw78aZLkoVY8
87En47q4h/ejdzLpG++UTRG9ATV8X8hQsc3cRN41E1/GrRMkgfQVx8fDCykhDX2k
TLgRSqIiyyD3HPwKlA0B1yd8FJdfcgr5avDvAw8hJsyHfQ3bA4H3jHYfVH9XoYZK
gh9xaFvhKVK5alkDG0AB9cHeUAF1S7zP
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:54 2026 by rpki-client