Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D1397C343311F1B6BA5FD7CE1D38B0.roa
File:                     55D1397C343311F1B6BA5FD7CE1D38B0.roa (raw, json)
Hash identifier:          ZQZYjU8XxtWAV85XF+tM0xjhM2LGObg9bBvC/yz59TM=
Subject key identifier:   DC:EE:4D:64:87:B3:F5:7E:2C:24:71:AB:3E:2E:E9:11:74:E8:60:7D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D1397C343311F1B6BA5FD7CE1D38B0.roa
Signing time:             Thu 09 Apr 2026 16:44:12 +0000
ROA not before:           Thu 09 Apr 2026 16:44:07 +0000
ROA not after:            Mon 09 Apr 2029 16:44:07 +0000
asID:                     17561
IP address blocks:        154.81.100.0/24 maxlen: 24
                          154.81.101.0/24 maxlen: 24
                          154.81.102.0/24 maxlen: 24
                          154.81.103.0/24 maxlen: 24
                          154.81.104.0/24 maxlen: 24
                          154.81.105.0/24 maxlen: 24
                          154.81.106.0/24 maxlen: 24
                          154.81.107.0/24 maxlen: 24
                          154.81.108.0/24 maxlen: 24
                          154.81.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115736 (0x1c418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  9 16:44:07 2026 GMT
            Not After : Apr  9 16:44:07 2029 GMT
        Subject: CN=69d7d75b-0408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1f:e5:91:cc:39:23:a3:51:2d:15:9d:83:45:
                    41:b6:38:f2:e5:aa:18:78:34:d2:46:3e:c1:99:22:
                    2a:02:18:cc:86:c1:8f:1b:1c:4c:72:d1:40:50:99:
                    d5:56:a4:ea:b8:4f:3a:64:5e:67:97:65:4c:7b:b0:
                    64:ff:29:90:3b:ba:4e:84:fd:41:2a:83:44:f9:82:
                    5a:98:29:2f:89:f0:6b:1d:88:e8:e4:24:31:69:5c:
                    3f:33:32:d1:7c:ab:b3:0f:b4:aa:09:c9:33:e6:7d:
                    2c:52:7e:85:00:25:8d:fb:50:72:a2:b4:56:b5:66:
                    13:2d:ed:51:d0:0c:ad:98:10:14:d6:d6:a1:69:00:
                    9c:d3:68:74:e1:10:39:82:51:37:3e:b6:ae:30:b5:
                    c1:e6:e6:1b:c9:50:4e:9b:f7:4e:bf:af:e9:d5:ac:
                    e8:82:c1:30:17:6e:ac:b6:2f:ea:62:6c:b1:9e:58:
                    45:ab:fd:d6:ab:9a:9d:04:44:a2:16:d8:79:1b:4b:
                    54:f7:3e:ca:ef:8a:66:5d:64:ca:a1:1e:e4:28:4c:
                    15:23:3a:1a:df:6d:3a:e1:a1:28:9a:e6:0d:f6:0c:
                    8b:c0:30:30:86:cd:0c:51:82:c0:61:e1:7b:8c:b0:
                    7b:da:56:cc:6a:aa:72:aa:db:15:ef:fa:61:80:10:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:4D:64:87:B3:F5:7E:2C:24:71:AB:3E:2E:E9:11:74:E8:60:7D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D1397C343311F1B6BA5FD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.100.0-154.81.109.255

    Signature Algorithm: sha256WithRSAEncryption
         33:44:f6:70:a0:0a:1d:ee:ab:ec:1d:56:44:01:87:6b:f4:ee:
         b5:7d:ea:5b:25:d0:ca:9b:55:92:5a:39:da:3b:18:51:5c:8d:
         19:ff:95:b0:ac:c2:fb:f0:f6:24:cf:dc:21:d1:df:41:20:a2:
         5b:c8:7a:ae:ba:a2:a7:4e:ff:0b:11:88:a6:b1:04:3c:f4:f3:
         58:d6:65:bc:9e:fd:34:54:f2:ef:8f:59:a5:d8:9d:d7:8a:bd:
         b9:3b:92:90:f0:45:0d:dd:51:67:fa:99:a5:f9:4b:b2:5f:d3:
         ac:83:83:ac:b0:55:d2:fd:9a:e5:b1:1d:b4:f6:63:a1:72:95:
         a8:87:f7:c8:4a:b0:36:24:86:ac:a1:f0:5e:3c:a7:0d:1f:70:
         f6:09:75:9b:03:40:57:94:d9:b7:ae:ff:67:7e:42:dc:e7:3a:
         05:ea:b1:21:f1:ae:e3:22:a1:fd:8b:b0:c6:18:1f:1b:cb:9b:
         ff:f7:05:d8:e1:24:f7:bb:58:43:d8:80:22:bc:29:9c:9b:57:
         85:24:c1:71:25:81:fe:0e:9b:93:f9:7c:90:b7:f6:3b:d7:17:
         cf:f9:0a:39:79:b1:df:34:56:e0:36:53:e8:40:5c:b9:6e:61:
         51:d5:a4:38:8c:9b:17:17:9c:ee:9a:87:eb:88:42:8c:b6:1b:
         8f:ea:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:53 2026 by rpki-client