Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62B4A37612E711F18FDDC5BFDAE4EC9C.roa
File:                     62B4A37612E711F18FDDC5BFDAE4EC9C.roa (raw, json)
Hash identifier:          KA1gF5P3ax8ZMOSILUi2x4fXHEq+FWlI5+AUkglp2CY=
Subject key identifier:   55:65:05:DE:45:40:7A:9F:73:7E:D3:D8:70:3B:53:80:92:4C:79:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01BBED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62B4A37612E711F18FDDC5BFDAE4EC9C.roa
Signing time:             Thu 26 Feb 2026 07:47:23 +0000
ROA not before:           Thu 26 Feb 2026 07:47:18 +0000
ROA not after:            Thu 26 Mar 2026 07:47:18 +0000
asID:                     9304
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113645 (0x1bbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 26 07:47:18 2026 GMT
            Not After : Mar 26 07:47:18 2026 GMT
        Subject: CN=699ffa8b-a684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:99:42:fb:e9:86:bf:18:ef:c2:ca:6c:ff:
                    9a:7a:4c:79:ec:29:0c:c2:c1:f5:14:1a:87:7d:9b:
                    0a:bc:d8:52:e1:f7:cf:1b:53:93:90:21:49:a5:49:
                    af:e4:20:c1:78:76:89:f5:36:29:ce:b8:04:95:13:
                    19:25:42:41:2c:1b:d5:5f:57:8a:6d:4e:49:cb:ba:
                    4a:08:76:3a:f7:8c:a6:9d:16:72:fc:23:86:8a:c0:
                    c7:2d:cf:c2:29:f6:da:ca:fd:e3:45:53:e2:c5:f8:
                    83:93:bb:9a:95:6e:23:16:2c:d2:54:ec:a5:98:d3:
                    39:4d:12:f6:a6:08:48:0c:7b:8e:7e:4d:33:92:84:
                    66:7b:2e:9f:97:05:bf:c4:90:c5:ae:43:ea:2d:73:
                    12:1f:d7:73:53:65:16:da:04:c0:53:17:9d:42:b0:
                    cf:08:55:a4:d5:a9:f4:40:22:87:f8:67:f9:ca:c0:
                    be:35:79:0d:ba:06:5a:57:25:ab:b1:06:11:fa:f1:
                    59:15:bc:4f:1b:d3:af:6e:c3:0c:a7:18:23:e6:7c:
                    5f:3c:63:b1:4e:db:e9:89:1f:93:f7:ea:d6:d0:b3:
                    1a:e2:3b:18:b5:b7:1c:88:40:f3:6e:65:9c:2f:3e:
                    b4:a7:46:16:09:6c:92:29:a3:46:bf:bf:b6:59:65:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:05:DE:45:40:7A:9F:73:7E:D3:D8:70:3B:53:80:92:4C:79:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62B4A37612E711F18FDDC5BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0/22
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:09:81:b6:70:d2:64:b1:fe:a9:61:be:01:b5:ac:be:c9:
         20:9b:ca:bd:a1:b4:f3:08:9e:b7:23:8c:0b:cc:03:33:20:9f:
         5a:e3:26:6d:09:c0:88:76:a9:10:61:42:10:e7:20:bb:2f:ed:
         49:57:b3:10:36:5c:79:5e:bf:48:5d:a1:29:b3:7d:b8:a2:a2:
         b2:d1:3c:73:67:21:2a:78:36:bb:0c:9c:0b:26:5b:cb:05:ff:
         40:0d:85:b1:60:49:35:92:a3:fc:a0:fa:26:e8:25:73:13:7f:
         98:14:e4:87:e1:93:09:5d:80:0a:01:fa:30:5a:a4:d5:db:4f:
         8c:54:31:c5:a9:00:1b:92:e0:8a:82:72:df:ea:4f:6b:b4:84:
         00:ad:bd:31:19:a4:ee:d7:82:b2:10:7e:68:af:f2:c7:4f:99:
         ac:0b:3f:48:28:38:dc:57:9c:75:56:04:69:91:23:f5:07:ba:
         ac:4f:48:1e:c6:42:e2:71:2c:cf:14:fb:92:22:ad:78:02:b7:
         1e:4b:34:ac:37:2f:66:bc:dc:db:49:83:06:9f:49:73:0d:f1:
         ae:be:dc:60:8e:2e:cc:03:d5:2e:38:82:1b:8b:99:c0:ab:13:
         d1:46:ce:0c:9c:3f:5f:36:4a:fe:52:52:42:07:48:87:92:e2:
         c9:b3:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:24 2026 by rpki-client