Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69ADA79C63D511F18DE49402CF1D38B0.roa
File:                     69ADA79C63D511F18DE49402CF1D38B0.roa (raw, json)
Hash identifier:          NUh1j6rwiG3JacGlWCiPKEuPez2livgeWm9E53FUdoc=
Subject key identifier:   33:A2:DD:8F:DC:8F:14:51:CA:79:0A:A1:78:F3:83:1D:6B:A1:15:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69ADA79C63D511F18DE49402CF1D38B0.roa
Signing time:             Tue 09 Jun 2026 07:32:48 +0000
ROA not before:           Tue 09 Jun 2026 07:32:43 +0000
ROA not after:            Fri 17 Jul 2026 07:32:43 +0000
asID:                     209242
IP address blocks:        154.197.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119369 (0x1d249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  9 07:32:43 2026 GMT
            Not After : Jul 17 07:32:43 2026 GMT
        Subject: CN=6a27c1a0-f0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:0c:a8:55:4b:98:82:95:7c:9c:8f:08:92:
                    2a:56:33:37:a6:a1:da:8a:07:03:b8:bc:43:7e:7e:
                    62:16:d0:21:50:2b:9b:10:f3:83:28:d7:97:f7:22:
                    90:0a:9c:ec:cb:11:7e:3b:cc:b7:81:0d:ea:38:d0:
                    25:4f:ec:64:a0:04:87:a4:ff:d3:5b:3b:16:73:1e:
                    1d:b7:55:d8:ca:8a:1c:2d:f7:ee:df:fa:98:30:9b:
                    10:3f:5a:a4:7a:e6:22:a0:8a:b6:b9:19:7d:da:bc:
                    a5:db:ee:8f:a4:a8:4e:7e:9c:60:4b:53:33:ca:70:
                    93:f4:ad:d1:a2:9b:b5:2f:de:f6:69:e1:59:1d:be:
                    fe:5e:04:26:1a:35:7a:e6:71:2d:40:d7:06:b4:b2:
                    e8:b1:16:31:3e:e7:4a:af:a3:04:29:3e:25:55:0c:
                    6b:df:ca:02:fe:bb:7e:3c:12:a9:21:5e:be:4d:15:
                    87:20:49:3c:4a:4f:5b:dc:23:62:a9:50:ee:9e:42:
                    1c:b4:26:f4:f1:b4:1e:ea:5e:a6:b9:51:ba:6e:ab:
                    03:62:7f:69:87:61:32:e2:ef:fa:ae:9f:96:cf:1b:
                    8a:5d:48:da:05:d4:ae:16:95:23:ad:2e:3a:9d:29:
                    3e:ab:2a:c8:f4:bc:85:42:17:52:35:2a:19:51:f2:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A2:DD:8F:DC:8F:14:51:CA:79:0A:A1:78:F3:83:1D:6B:A1:15:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69ADA79C63D511F18DE49402CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:64:fa:21:d1:0f:9d:17:35:46:eb:7d:0a:d8:ae:4e:c1:
         c5:64:a6:36:19:f7:41:4d:50:91:bc:e4:72:f4:9d:75:8e:14:
         f8:0c:0d:27:b2:32:94:89:79:09:41:3b:46:2b:e8:24:3e:7f:
         12:1a:11:4c:f8:84:ae:dd:31:e8:fd:b5:e0:53:69:ba:1f:6c:
         5d:57:88:64:7c:be:b5:15:f2:bb:1e:32:b6:e5:26:30:46:e7:
         20:15:81:7a:a6:30:0d:0a:3c:91:5e:a0:a5:ee:71:3a:6c:60:
         02:a8:3e:53:25:c4:68:e7:ff:1a:3c:51:b7:34:8d:c2:f1:d0:
         be:29:ef:af:1e:4e:e8:6b:26:68:c3:4a:37:53:10:0a:b5:84:
         3c:01:96:3c:2b:8a:d9:93:09:1a:c2:8f:f2:e2:e6:21:91:a4:
         b8:db:33:ee:ad:bd:0a:36:69:c1:e6:48:8d:a1:7c:fb:8d:8a:
         2a:37:a1:be:10:34:65:4c:38:cb:c9:58:32:ae:f4:b5:ab:e3:
         80:a1:2e:55:5d:32:50:3f:4f:81:e5:bf:64:12:f9:45:8e:64:
         cf:8a:50:80:04:ae:58:b1:28:4d:6b:81:71:79:f4:99:c5:6e:
         c8:cc:bb:1c:6a:ea:2f:c8:c5:80:c6:b0:d5:85:60:b8:13:70:
         c2:32:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:42:07 2026 by rpki-client