Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E69286C5B3611F19A824317CF1D38B0.roa
File:                     6E69286C5B3611F19A824317CF1D38B0.roa (raw, json)
Hash identifier:          M9Ejn8tvnlwFHVWwdw5jFaj87k5L6Nssh1JyeRsdEOI=
Subject key identifier:   F3:12:CC:C6:22:80:E6:B7:13:2E:39:AD:F7:D5:D3:9E:AC:B6:FE:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D046
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E69286C5B3611F19A824317CF1D38B0.roa
Signing time:             Fri 29 May 2026 08:14:37 +0000
ROA not before:           Fri 29 May 2026 08:14:32 +0000
ROA not after:            Wed 01 Jul 2026 08:14:32 +0000
asID:                     62240
IP address blocks:        154.194.80.0/24 maxlen: 24
                          154.195.26.0/24 maxlen: 24
                          154.195.27.0/24 maxlen: 24
                          154.195.107.0/24 maxlen: 24
                          154.195.186.0/24 maxlen: 24
                          154.195.187.0/24 maxlen: 24
                          154.196.36.0/24 maxlen: 24
                          154.196.40.0/24 maxlen: 24
                          154.196.41.0/24 maxlen: 24
                          154.196.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118854 (0x1d046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 08:14:32 2026 GMT
            Not After : Jul  1 08:14:32 2026 GMT
        Subject: CN=6a194aed-75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:b8:16:c3:9d:45:95:71:9e:bd:38:7f:44:
                    da:2b:d8:3c:48:3a:06:b5:1c:d5:f8:1a:fe:4b:6a:
                    e8:d1:d6:7e:d5:22:18:49:97:f0:68:e3:dd:0a:2b:
                    ae:34:79:47:4c:31:bc:05:eb:67:07:ed:f5:1b:21:
                    5f:b0:8c:29:40:7a:e7:bb:a0:d3:4d:98:4f:34:45:
                    9c:09:4e:aa:24:b7:03:61:8b:1a:2c:e8:09:84:fe:
                    49:58:b1:be:89:fb:07:b9:8e:95:58:36:65:45:45:
                    b5:f2:9e:d7:04:e3:e0:18:60:1f:90:29:5f:b2:8e:
                    a8:3d:16:27:0e:07:e6:c6:76:8d:59:31:c5:29:20:
                    a9:df:bc:9d:28:2a:70:e3:d5:5e:f5:2f:b9:c8:59:
                    e9:58:a8:96:0b:04:3b:7c:22:da:3c:45:a8:3f:d2:
                    26:c5:ce:dd:a9:e4:ba:38:af:95:f8:32:88:0e:f2:
                    81:6c:19:97:12:c4:b1:7d:33:31:b5:30:46:ac:df:
                    66:2c:98:14:e1:8c:c4:00:9a:50:43:12:2a:ed:00:
                    09:90:14:57:08:96:c0:da:73:90:43:2b:34:97:1e:
                    19:f5:c8:1e:18:cf:ce:91:84:39:2e:f3:5a:9b:5f:
                    11:3e:90:32:db:f8:6c:53:98:9e:dd:75:bf:db:e3:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:CC:C6:22:80:E6:B7:13:2E:39:AD:F7:D5:D3:9E:AC:B6:FE:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E69286C5B3611F19A824317CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.80.0/24
                  154.195.26.0/23
                  154.195.107.0/24
                  154.195.186.0/23
                  154.196.36.0/24
                  154.196.40.0-154.196.42.255

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:16:d9:1e:29:d2:1e:3f:7a:e4:f0:ae:73:7f:bb:f3:91:
         7a:3d:2d:b3:40:0a:ac:fb:27:66:ce:ec:33:f0:97:75:d4:64:
         21:4a:87:6f:f4:8e:26:b9:3c:86:3e:32:61:8d:f1:63:3a:20:
         f9:d5:43:79:5b:39:5f:ca:da:c5:08:7e:12:f8:25:15:75:30:
         29:3a:45:c5:85:3e:83:d7:5e:98:5b:f6:5c:95:2d:fd:f0:c1:
         b4:49:b4:6c:48:12:99:fc:d1:44:3d:90:8d:12:b7:61:21:ba:
         9b:7a:c3:ad:76:6d:a9:cf:dc:95:72:a3:66:86:5c:80:74:40:
         ff:45:4b:ee:e5:43:3b:36:51:b3:09:07:c6:f8:91:77:5f:a7:
         09:88:7a:df:ee:cb:ca:da:56:26:7f:ec:ca:a4:9f:d1:e7:7c:
         b5:59:45:c0:3b:35:2e:26:a3:3a:55:2b:6c:48:66:f8:31:e5:
         d5:7a:d7:49:80:66:97:16:5d:78:7e:87:99:4e:36:45:7d:a4:
         0d:e9:fe:44:8a:b3:38:11:aa:64:a4:41:4f:a8:66:18:08:dd:
         3d:cb:0b:de:35:ca:c8:c0:0f:fc:2f:98:23:d7:91:ac:0f:81:
         1b:65:50:56:88:98:94:85:3e:1b:05:85:39:e0:a7:6d:4e:9a:
         bb:3b:98:0d
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAdBGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDgxNDMyWhcNMjYwNzAxMDgxNDMyWjAYMRYw
FAYDVQQDEw02YTE5NGFlZC03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA59q4FsOdRZVxnr04f0TaK9g8SDoGtRzV+Br+S2ro0dZ+1SIYSZfwaOPd
CiuuNHlHTDG8BetnB+31GyFfsIwpQHrnu6DTTZhPNEWcCU6qJLcDYYsaLOgJhP5J
WLG+ifsHuY6VWDZlRUW18p7XBOPgGGAfkClfso6oPRYnDgfmxnaNWTHFKSCp37yd
KCpw49Ve9S+5yFnpWKiWCwQ7fCLaPEWoP9Imxc7dqeS6OK+V+DKIDvKBbBmXEsSx
fTMxtTBGrN9mLJgU4YzEAJpQQxIq7QAJkBRXCJbA2nOQQys0lx4Z9cgeGM/OkYQ5
LvNam18RPpAy2/hsU5ie3XW/2+MNyQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFPMS
zMYigOa3Ey45rffV056stv7tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RTY5Mjg2QzVCMzYxMUYxOUE4MjQzMTdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmsJQAwQBmsMaAwQAmsNr
AwQBmsO6AwQAmsQkMAwDBAOaxCgDBACaxCowDQYJKoZIhvcNAQELBQADggEBAL7K
FtkeKdIeP3rk8K5zf7vzkXo9LbNACqz7J2bO7DPwl3XUZCFKh2/0jia5PIY+MmGN
8WM6IPnVQ3lbOV/K2sUIfhL4JRV1MCk6RcWFPoPXXphb9lyVLf3wwbRJtGxIEpn8
0UQ9kI0St2Ehupt6w612banP3JVyo2aGXIB0QP9FS+7lQzs2UbMJB8b4kXdfpwmI
et/uy8raViZ/7Mqkn9HnfLVZRcA7NS4mozpVK2xIZvgx5dV610mAZpcWXXh+h5lO
NkV9pA3p/kSKszgRqmSkQU+oZhgI3T3LC941ysjAD/wvmCPXkawPgRtlUFaImJSF
PhsFhTngp21Omrs7mA0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:41 2026 by rpki-client