Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F00F166343111F1B0D142CDCE1D38B0.roa
File:                     9F00F166343111F1B0D142CDCE1D38B0.roa (raw, json)
Hash identifier:          2HGInLGrXr7UxR49DvSsvTIg5d8fzugnEmLcl3tbAAo=
Subject key identifier:   70:F3:A2:D0:1B:5D:6A:38:A5:B5:35:F2:FA:A0:23:EF:25:27:16:43
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C414
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F00F166343111F1B0D142CDCE1D38B0.roa
Signing time:             Thu 09 Apr 2026 16:31:55 +0000
ROA not before:           Thu 09 Apr 2026 16:31:50 +0000
ROA not after:            Mon 09 Apr 2029 16:31:50 +0000
asID:                     17561
IP address blocks:        154.81.80.0/24 maxlen: 24
                          154.81.81.0/24 maxlen: 24
                          154.81.82.0/24 maxlen: 24
                          154.81.83.0/24 maxlen: 24
                          154.81.84.0/24 maxlen: 24
                          154.81.85.0/24 maxlen: 24
                          154.81.86.0/24 maxlen: 24
                          154.81.87.0/24 maxlen: 24
                          154.81.88.0/24 maxlen: 24
                          154.81.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115732 (0x1c414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  9 16:31:50 2026 GMT
            Not After : Apr  9 16:31:50 2029 GMT
        Subject: CN=69d7d47b-b699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:7c:a4:f4:eb:93:25:b7:70:7a:6a:fa:27:
                    c1:63:79:4b:14:f6:f2:42:26:f9:04:9a:46:64:c5:
                    76:b7:07:31:a0:63:df:8c:cf:05:55:6c:fb:36:be:
                    4b:07:26:07:7c:b3:bf:ce:9d:4f:1b:82:9a:28:4a:
                    52:cb:8b:77:2c:0a:03:ee:93:42:5f:62:0c:f5:cc:
                    2f:00:bd:30:5f:b0:c9:09:72:3e:35:dc:4e:72:e6:
                    58:2c:53:98:d1:b6:8a:f5:c8:34:01:c8:67:21:b8:
                    8c:5a:e0:ef:31:6a:3f:bf:45:80:c7:04:80:d3:22:
                    fe:d5:fc:67:96:24:9e:9a:13:83:ed:11:22:e0:05:
                    cb:21:f5:ec:82:8d:e2:17:1d:ed:40:61:7a:d2:2d:
                    38:bc:00:59:ed:b8:69:8b:65:00:0e:e9:a9:b7:0d:
                    8f:58:b7:24:4d:8a:3a:79:2a:9a:7b:f3:e3:0f:24:
                    50:76:36:cd:7b:66:5a:03:38:21:86:0d:83:2e:8c:
                    ac:a3:3a:57:59:2a:f6:15:7f:3c:c4:95:9a:99:74:
                    49:f8:d9:12:84:48:d4:24:42:6f:0a:e5:57:5c:94:
                    c8:28:22:79:b0:be:26:9d:4a:c4:49:27:ee:1f:3b:
                    a3:50:ff:d6:8f:07:03:a1:7b:74:2a:11:fa:17:ac:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:A2:D0:1B:5D:6A:38:A5:B5:35:F2:FA:A0:23:EF:25:27:16:43
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F00F166343111F1B0D142CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.80.0-154.81.89.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:bd:85:5e:4d:68:dd:35:ac:31:80:35:0c:fd:fc:99:86:
         be:e3:f6:bc:3a:08:b1:34:c1:7f:98:65:1d:a3:94:98:ee:86:
         3a:50:44:8a:67:e8:b9:40:52:13:2a:d5:37:95:19:ec:2e:81:
         74:d5:7c:d5:7f:f8:9d:25:b5:63:05:fc:86:f7:b8:b5:7e:7e:
         47:2a:d9:71:5d:a8:25:b3:47:3a:95:16:ee:f5:fb:a0:5f:69:
         8e:0a:0f:69:fb:25:37:65:eb:d2:cc:0b:b5:bb:2a:7e:e0:77:
         07:9f:70:0e:a7:33:2a:59:be:a9:84:91:d6:74:ec:4d:f0:7b:
         b9:b2:02:fa:25:e2:67:e5:1b:f5:55:39:bd:14:97:73:d5:9b:
         f6:20:c5:eb:38:e2:f4:a0:da:96:0b:ff:4a:42:a7:91:77:c3:
         ef:e8:64:a4:37:fc:aa:e5:9b:19:34:a1:82:30:27:ca:8f:63:
         e3:27:70:fc:37:08:0f:23:4d:66:d4:7b:6c:08:74:e7:51:5e:
         8f:05:1a:17:a2:fb:fb:ee:81:63:f5:e1:b4:9e:79:63:ce:85:
         8b:e6:d5:41:00:35:d5:f0:34:62:e4:4f:49:52:6d:46:f1:36:
         ca:98:67:21:e9:57:15:07:89:8d:df:4d:01:74:4a:e1:41:92:
         35:50:df:2c
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcQUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTYzMTUwWhcNMjkwNDA5MTYzMTUwWjAYMRYw
FAYDVQQDEw02OWQ3ZDQ3Yi1iNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqy98pPTrkyW3cHpq+ifBY3lLFPbyQib5BJpGZMV2twcxoGPfjM8FVWz7
Nr5LByYHfLO/zp1PG4KaKEpSy4t3LAoD7pNCX2IM9cwvAL0wX7DJCXI+NdxOcuZY
LFOY0baK9cg0AchnIbiMWuDvMWo/v0WAxwSA0yL+1fxnliSemhOD7REi4AXLIfXs
go3iFx3tQGF60i04vABZ7bhpi2UADumptw2PWLckTYo6eSqae/PjDyRQdjbNe2Za
Azghhg2DLoysozpXWSr2FX88xJWamXRJ+NkShEjUJEJvCuVXXJTIKCJ5sL4mnUrE
SSfuHzujUP/WjwcDoXt0KhH6F6xE5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHDz
otAbXWo4pbU18vqgI+8lJxZDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RjAwRjE2NjM0MzExMUYxQjBEMTQyQ0RDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaUVADBAGaUVgwDQYJ
KoZIhvcNAQELBQADggEBAB1WvYVeTWjdNawxgDUM/fyZhr7j9rw6CLE0wX+YZR2j
lJjuhjpQRIpn6LlAUhMq1TeVGewugXTVfNV/+J0ltWMF/Ib3uLV+fkcq2XFdqCWz
RzqVFu71+6BfaY4KD2n7JTdl69LMC7W7Kn7gdwefcA6nMypZvqmEkdZ07E3we7my
Avol4mflG/VVOb0Ul3PVm/Ygxes44vSg2pYL/0pCp5F3w+/oZKQ3/Krlmxk0oYIw
J8qPY+MncPw3CA8jTWbUe2wIdOdRXo8FGhei+/vugWP14bSeeWPOhYvm1UEANdXw
NGLkT0lSbUbxNsqYZyHpVxUHiY3fTQF0SuFBkjVQ3yw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:40 2026 by rpki-client