Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C151F7A39A911F191697916CF1D38B0.roa
File:                     1C151F7A39A911F191697916CF1D38B0.roa (raw, json)
Hash identifier:          1INDidQQK2i0Y73SU6cRq2dYxBaOz4Z8ghLkDpnPbqM=
Subject key identifier:   F4:B9:1C:71:FB:3A:34:3D:D6:9C:6B:9B:2D:B5:FA:B0:B7:9D:19:2A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C5B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C151F7A39A911F191697916CF1D38B0.roa
Signing time:             Thu 16 Apr 2026 15:29:51 +0000
ROA not before:           Thu 16 Apr 2026 15:29:46 +0000
ROA not after:            Thu 30 Apr 2026 15:29:46 +0000
asID:                     9304
IP address blocks:        154.82.134.0/24 maxlen: 24
                          154.82.148.0/24 maxlen: 24
                          154.82.153.0/24 maxlen: 24
                          154.82.158.0/24 maxlen: 24
                          154.82.196.0/24 maxlen: 24
                          154.82.197.0/24 maxlen: 24
                          154.82.198.0/24 maxlen: 24
                          154.82.199.0/24 maxlen: 24
                          154.83.65.0/24 maxlen: 24
                          154.83.67.0/24 maxlen: 24
                          154.89.132.0/24 maxlen: 24
                          154.90.65.0/24 maxlen: 24
                          154.90.67.0/24 maxlen: 24
                          154.90.128.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.136.0/24 maxlen: 24
                          154.90.137.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
                          154.90.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116150 (0x1c5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 16 15:29:46 2026 GMT
            Not After : Apr 30 15:29:46 2026 GMT
        Subject: CN=69e1006f-f61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:ee:4a:98:d3:4f:7e:94:d8:37:8f:e6:02:
                    8f:0d:18:4e:85:16:3b:d6:76:45:b7:9f:7d:73:4f:
                    29:01:81:76:36:cc:24:a0:11:cf:38:22:f7:a4:83:
                    82:b6:c3:33:50:00:de:a5:c2:2f:f2:7e:29:72:8f:
                    df:07:5f:1e:1b:30:62:69:64:98:91:c1:e5:d0:b4:
                    bf:60:5a:30:03:3f:7b:1f:99:f3:ba:0e:4a:26:2e:
                    4f:0b:ba:92:5b:55:9e:86:a6:71:d2:46:67:cc:4d:
                    d2:88:79:4e:7d:31:aa:67:53:6b:da:59:ff:6c:43:
                    be:3f:e2:90:f2:4e:80:1d:f2:df:53:6e:eb:e6:59:
                    37:93:b9:b6:fb:64:dc:41:b7:f6:84:68:06:a5:63:
                    d8:2f:66:96:08:3c:1b:12:69:03:f6:0f:0e:c6:2d:
                    37:dd:05:52:52:ec:5b:c4:6a:94:ed:ef:75:da:83:
                    c0:91:74:f2:2b:ba:16:90:f3:2f:fb:cb:09:7d:ef:
                    2c:0d:f3:54:4f:e1:99:35:39:bb:27:56:be:00:a8:
                    28:23:ee:ac:d8:30:fc:22:a7:d2:9b:01:dd:8f:7f:
                    3d:39:3a:0e:cc:cb:57:98:af:f5:63:f5:83:e3:04:
                    43:ad:e3:10:2d:b4:97:5f:fa:eb:9b:49:9c:46:44:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B9:1C:71:FB:3A:34:3D:D6:9C:6B:9B:2D:B5:FA:B0:B7:9D:19:2A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C151F7A39A911F191697916CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.134.0/24
                  154.82.148.0/24
                  154.82.153.0/24
                  154.82.158.0/24
                  154.82.196.0/22
                  154.83.65.0/24
                  154.83.67.0/24
                  154.89.132.0/24
                  154.90.65.0/24
                  154.90.67.0/24
                  154.90.128.0/24
                  154.90.134.0/24
                  154.90.136.0/23
                  154.90.140.0/24
                  154.90.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:58:09:79:88:0b:0f:f8:d4:6e:f7:7f:48:13:86:23:c0:d1:
         61:b9:c1:f3:bc:bb:97:54:b4:00:c7:54:c0:50:2f:22:81:2c:
         b0:e4:68:00:32:a2:ed:85:28:e2:b2:53:f4:5b:5d:1c:88:06:
         a4:83:8f:5e:e3:81:c1:6f:58:cd:fe:e7:39:85:07:3e:fa:99:
         08:1b:84:8d:af:6d:af:7a:f9:55:e0:a7:f5:e9:b7:ad:b7:c7:
         cf:c5:10:f0:2b:a5:33:e1:8d:e5:a1:3f:d3:4b:4d:0f:56:6f:
         2c:df:8d:96:6c:85:51:06:99:54:05:44:2f:ba:0e:f8:54:44:
         87:fc:40:97:87:0a:d6:c4:18:d1:fb:9e:38:3a:f2:5a:4d:de:
         8a:3a:b7:26:f6:8d:b2:41:73:5f:ac:7b:9a:e9:80:75:78:6b:
         e6:c1:1f:9d:b2:cf:1a:c2:78:f1:28:78:88:70:40:61:c0:f5:
         14:9a:c9:3d:53:af:f7:77:9b:8c:c1:47:ce:a6:d5:75:45:6c:
         3c:c1:62:05:4d:7d:6e:41:c4:dd:19:8b:67:fd:2c:6b:73:f8:
         f1:60:23:3d:1f:8f:37:34:c3:38:60:1d:30:d4:b2:68:05:6a:
         0d:3c:2b:ce:d3:d0:b1:21:b0:91:ab:1c:18:a9:32:71:98:e0:
         4a:2f:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:52 2026 by rpki-client