Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D45A9F0342511F18D38BB02CF1D38B0.roa
File:                     3D45A9F0342511F18D38BB02CF1D38B0.roa (raw, json)
Hash identifier:          59c31aIsjlqyzzto+43ftnj81bfE9KDnvImuMf8rdaE=
Subject key identifier:   ED:C8:FE:04:4B:C7:A5:21:DD:58:4C:99:16:81:C6:ED:F6:13:4A:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C412
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D45A9F0342511F18D38BB02CF1D38B0.roa
Signing time:             Thu 09 Apr 2026 15:03:17 +0000
ROA not before:           Thu 09 Apr 2026 15:03:12 +0000
ROA not after:            Mon 09 Apr 2029 15:03:12 +0000
asID:                     17561
IP address blocks:        154.81.70.0/24 maxlen: 24
                          154.81.71.0/24 maxlen: 24
                          154.81.72.0/24 maxlen: 24
                          154.81.73.0/24 maxlen: 24
                          154.81.74.0/24 maxlen: 24
                          154.81.75.0/24 maxlen: 24
                          154.81.76.0/24 maxlen: 24
                          154.81.77.0/24 maxlen: 24
                          154.81.78.0/24 maxlen: 24
                          154.81.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 15:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115730 (0x1c412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  9 15:03:12 2026 GMT
            Not After : Apr  9 15:03:12 2029 GMT
        Subject: CN=69d7bfb5-b0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:66:93:d4:dd:e1:fc:7b:ae:82:73:ec:40:ac:
                    fc:c3:0c:3d:f5:eb:94:04:31:f4:45:fc:2d:42:77:
                    96:77:45:cc:ce:51:66:ae:a0:f7:52:89:41:9c:c6:
                    ea:b8:bc:df:ff:fc:6e:84:7e:f5:70:f8:28:c0:8f:
                    54:fc:7b:9e:6a:25:ea:49:88:d9:e4:64:ed:01:54:
                    87:6e:85:82:23:20:bb:c5:78:ec:07:d6:8a:be:ab:
                    dd:0c:ed:c2:00:ff:4e:62:57:c2:45:ad:2b:0f:9c:
                    c0:b6:a0:f3:4d:cb:45:24:b3:0b:00:16:d6:92:d5:
                    8a:6f:da:1d:f8:c1:8d:bb:22:bc:1f:37:03:14:27:
                    74:19:25:fc:ce:17:7e:17:18:56:d8:87:96:6b:b3:
                    b1:7c:05:9f:bc:4a:fe:ed:95:03:0b:31:f3:09:a1:
                    92:1e:7c:fc:93:da:4f:e8:fa:2c:48:b6:46:0d:1c:
                    bc:03:04:f6:28:66:10:ae:7e:62:66:fd:c8:f0:65:
                    2c:62:b1:fb:3c:25:70:e9:ec:38:8d:4d:d3:19:a5:
                    92:1b:7f:01:b0:94:38:94:59:67:25:8d:e4:60:8e:
                    41:fd:19:61:80:70:18:15:5d:42:80:99:dd:df:e3:
                    72:d3:bf:37:d7:d3:ea:67:0c:29:f9:95:b1:b6:71:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:FE:04:4B:C7:A5:21:DD:58:4C:99:16:81:C6:ED:F6:13:4A:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D45A9F0342511F18D38BB02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.70.0-154.81.79.255

    Signature Algorithm: sha256WithRSAEncryption
         18:54:34:78:59:b3:5e:b5:02:94:9f:76:37:f6:d9:f6:7c:bd:
         4d:53:55:23:3a:2c:f9:3f:7a:2e:b2:1e:e6:3b:d3:fc:52:09:
         e1:d8:cf:20:fb:38:66:e0:50:c2:a8:a4:0d:f4:00:73:a1:6d:
         c5:cd:46:72:d0:aa:51:d6:19:d4:fa:f9:06:7b:55:47:a9:9f:
         b0:24:4b:78:fd:2d:78:7b:da:ba:f7:90:f6:a3:61:08:20:af:
         36:c3:17:18:3f:49:64:ee:a2:ac:e3:31:ea:d9:3f:84:6a:f9:
         50:2e:20:f7:7d:94:4b:3a:e5:09:3e:d3:87:07:13:60:31:7d:
         c0:b4:15:2b:f5:40:90:94:e4:62:02:ca:a4:bb:b1:0e:ce:6b:
         2c:6a:68:5a:e3:ee:71:c3:0b:6f:d3:7b:45:d4:1b:5c:b7:0b:
         86:d4:11:68:aa:f0:e2:72:a4:0f:0a:fb:9e:8b:2d:f4:f4:e4:
         15:91:ae:01:ee:f6:0b:ad:db:fb:62:54:fc:fc:b4:37:e5:af:
         e3:9b:a3:32:ee:f7:28:16:12:12:07:2e:86:53:c6:06:1b:6e:
         e6:1f:09:1b:95:3d:c6:c7:8a:9a:47:78:49:c4:0f:b5:77:d4:
         92:85:59:a9:35:c6:12:05:11:4a:a5:da:7e:f3:53:88:a0:69:
         82:0c:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:38 2026 by rpki-client