Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B81DD565FFC11F1A503651ACF1D38B0.roa
File:                     9B81DD565FFC11F1A503651ACF1D38B0.roa (raw, json)
Hash identifier:          +jcR3hM2sTp2LTWDBw8Fd0uAwB74DbBiLXQUQcR2H1I=
Subject key identifier:   1C:38:F4:0D:97:E4:C9:0A:6B:F2:20:64:75:05:35:3B:6B:04:00:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D19C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B81DD565FFC11F1A503651ACF1D38B0.roa
Signing time:             Thu 04 Jun 2026 10:03:17 +0000
ROA not before:           Thu 04 Jun 2026 10:03:11 +0000
ROA not after:            Fri 10 Jul 2026 10:03:11 +0000
asID:                     138915
IP address blocks:        154.93.46.0/24 maxlen: 24
                          154.93.47.0/24 maxlen: 24
                          154.93.48.0/24 maxlen: 24
                          154.93.49.0/24 maxlen: 24
                          154.93.52.0/23 maxlen: 24
                          154.93.54.0/23 maxlen: 24
                          154.93.56.0/23 maxlen: 24
                          154.93.58.0/24 maxlen: 24
                          154.93.59.0/24 maxlen: 24
                          154.93.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119196 (0x1d19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  4 10:03:11 2026 GMT
            Not After : Jul 10 10:03:11 2026 GMT
        Subject: CN=6a214d65-7d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:c9:8b:52:73:ff:be:15:5b:d7:bd:7d:e3:
                    78:01:5f:98:12:ed:5c:26:ee:99:7a:7c:95:6b:9b:
                    4a:0c:32:c7:f8:d7:80:b5:19:55:d6:4a:e2:5f:a0:
                    e4:56:7f:57:59:e4:c9:b3:cb:c2:a3:46:78:ff:c6:
                    80:23:b4:21:99:36:4a:5b:6b:19:0c:84:1c:7b:0f:
                    2d:02:b6:d5:9e:02:bd:58:bd:ee:78:ce:c1:de:24:
                    c1:6b:55:7d:d1:32:a5:d0:1f:e3:d6:46:96:6f:5d:
                    59:0e:b8:9a:62:65:ea:1f:17:f4:5f:b8:de:5c:c4:
                    1d:f0:26:65:9f:ae:71:b8:5c:77:d9:3e:df:fc:22:
                    72:14:d5:6b:fb:56:e0:40:86:26:52:ea:54:01:d1:
                    13:9d:7c:52:3a:0a:77:9f:f3:3d:e6:3e:a5:55:a1:
                    8c:75:9c:a2:d6:3b:5a:29:76:e6:8a:ca:e2:92:5b:
                    cf:6c:f8:b4:20:a9:db:94:63:c9:d0:c6:01:3b:99:
                    5f:a0:8d:f0:f8:7c:02:4d:33:27:45:df:db:98:78:
                    c8:fd:31:ba:50:64:16:ea:05:40:eb:70:a4:1c:09:
                    c3:70:c7:25:92:df:f6:33:3e:9a:6e:fa:0e:5e:4c:
                    c3:9c:e7:e1:67:75:40:91:5b:85:71:47:24:97:d1:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:F4:0D:97:E4:C9:0A:6B:F2:20:64:75:05:35:3B:6B:04:00:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B81DD565FFC11F1A503651ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.46.0-154.93.49.255
                  154.93.52.0-154.93.59.255
                  154.93.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:f8:ef:1c:5c:80:93:4c:8a:26:17:1c:31:f5:e3:a4:f5:
         87:40:50:2c:bb:70:07:6e:50:09:3f:b7:00:4b:c2:e8:3a:ca:
         dd:91:2d:60:69:6e:28:25:96:04:f6:ed:7c:0c:69:f4:22:3d:
         cc:a7:70:c6:bb:16:c6:16:80:37:2b:31:81:1a:0e:df:85:5b:
         b6:91:12:53:d8:a8:dd:d8:85:69:ad:22:8a:1c:97:d1:c2:15:
         b9:3f:47:8e:d8:ab:4b:e9:63:2f:f9:00:db:49:aa:a1:dd:5a:
         4d:90:55:2e:ad:ab:f7:e0:85:3f:cf:cf:c7:31:37:cb:79:65:
         0e:2d:83:06:16:fa:23:20:a1:35:cb:b6:29:27:d9:16:92:42:
         79:16:fe:3e:6a:00:cd:0f:4d:0e:64:e7:e4:12:38:17:57:67:
         43:e0:af:9e:cf:31:50:eb:d9:76:95:45:8f:6d:a1:ac:1e:43:
         5c:e3:c0:53:70:84:4c:a0:c6:f2:90:2d:0d:c4:28:dc:c4:c5:
         d3:a8:a8:92:ca:bd:be:fe:4b:35:c7:f8:67:40:ec:08:f8:18:
         d0:3e:bd:51:69:90:b8:f1:04:98:16:8c:a5:8a:1c:14:3f:7a:
         01:f7:4d:97:a0:95:12:5a:b8:f1:0a:ca:5a:5b:45:8b:13:ff:
         2e:7c:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:16 2026 by rpki-client