Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C07C40A30D111F1AB4490A8DAE4EC9C.roa
File:                     6C07C40A30D111F1AB4490A8DAE4EC9C.roa (raw, json)
Hash identifier:          pVG1pjaPd9q9JfOsHN4rv5RipoZze5s+aassyXtRtFM=
Subject key identifier:   BD:96:1A:1B:CD:2C:78:89:34:64:E4:28:0C:BC:CE:DC:D6:8A:4D:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C302
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C07C40A30D111F1AB4490A8DAE4EC9C.roa
Signing time:             Sun 05 Apr 2026 09:25:45 +0000
ROA not before:           Sun 05 Apr 2026 09:25:40 +0000
ROA not after:            Fri 08 May 2026 09:25:40 +0000
asID:                     45194
IP address blocks:        154.84.210.0/24 maxlen: 24
                          154.84.211.0/24 maxlen: 24
                          154.84.212.0/24 maxlen: 24
                          154.84.225.0/24 maxlen: 24
                          154.84.226.0/24 maxlen: 24
                          154.84.227.0/24 maxlen: 24
                          154.84.228.0/24 maxlen: 24
                          154.84.229.0/24 maxlen: 24
                          154.84.230.0/24 maxlen: 24
                          154.84.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 16:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115458 (0x1c302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  5 09:25:40 2026 GMT
            Not After : May  8 09:25:40 2026 GMT
        Subject: CN=69d22a99-8122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:f5:b3:d6:c9:19:59:95:9a:b1:13:e4:bc:
                    ce:9c:4b:ad:ef:2f:6d:50:c7:7a:cd:70:93:e7:72:
                    2d:15:e2:b5:07:2f:e4:27:25:da:e8:37:dc:de:68:
                    28:eb:e5:b5:a2:0a:37:1d:dc:c3:fd:58:0c:54:e9:
                    f0:59:3b:1c:99:e8:0e:1f:f5:ed:85:9e:dc:8a:8f:
                    6a:d4:37:fa:20:10:e9:db:12:84:eb:ed:98:56:64:
                    bc:e4:46:fa:0c:57:ab:e7:51:96:ff:da:72:1d:84:
                    97:11:c3:f4:55:4f:9f:61:0e:4b:03:54:dd:25:9e:
                    59:3d:1b:10:b6:28:a5:ea:7e:ee:e6:91:14:fe:5a:
                    6f:41:dd:5b:d3:8f:40:82:0d:ce:d6:68:f0:12:87:
                    2d:9f:49:d7:da:3d:6d:66:70:25:4d:20:56:4c:d9:
                    31:20:71:e3:71:82:18:32:8e:74:91:fd:3f:33:8a:
                    1e:02:e0:53:87:31:b4:76:66:f5:30:86:a0:41:0e:
                    f2:50:04:fc:72:55:d9:0a:a2:92:0a:66:a4:88:f3:
                    68:6b:a0:3c:14:8c:05:a7:7e:a9:85:d4:f3:fe:d6:
                    5c:80:aa:77:88:97:8e:71:8b:8e:d0:70:2c:30:db:
                    b4:c1:55:13:76:5d:65:54:2e:ad:96:0b:e4:22:cd:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:1A:1B:CD:2C:78:89:34:64:E4:28:0C:BC:CE:DC:D6:8A:4D:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C07C40A30D111F1AB4490A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.210.0-154.84.212.255
                  154.84.225.0-154.84.231.255

    Signature Algorithm: sha256WithRSAEncryption
         46:57:77:5b:32:a1:94:7e:ff:77:e2:22:3a:2b:ee:4f:f6:c5:
         fc:bb:60:ee:df:94:29:03:0d:69:52:a8:c3:13:9f:98:f6:32:
         14:e9:a6:30:e1:e4:c9:b0:78:55:d9:36:9f:05:ad:97:26:f2:
         d7:2d:de:06:2a:4d:96:73:aa:b9:54:fd:fc:25:2c:e4:cc:58:
         84:33:e6:8e:23:8e:18:92:65:f0:6b:7c:10:83:68:19:ba:55:
         5b:bf:e2:73:9c:de:f0:42:08:29:c3:a2:91:c0:79:aa:4b:f9:
         ad:37:06:1f:17:9f:3c:2c:c6:5f:84:c2:14:4f:d5:31:c0:2b:
         3f:f3:a2:1b:bc:f9:4f:e2:cb:47:3d:6b:d0:c7:e8:3f:8b:bf:
         16:37:2b:a8:b6:37:1e:72:94:1c:95:d2:87:e6:d9:d0:bf:7e:
         ba:10:39:5d:f1:09:ad:31:75:11:05:fc:49:17:68:8d:f6:b3:
         2f:e9:67:a8:2e:28:64:e4:c1:aa:7d:25:2c:20:97:f4:a5:79:
         8a:7a:b4:5b:71:77:5f:6c:07:0d:c9:68:64:47:1a:eb:74:70:
         42:6a:af:09:ec:fa:a6:a0:bb:65:7e:db:53:75:59:1c:b5:73:
         5e:24:a4:80:da:93:72:53:00:58:88:18:2e:52:51:24:a6:c3:
         d3:76:49:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:28 2026 by rpki-client