Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B823F9AA5FE111F18DF46BF9CE1D38B0.roa
File:                     B823F9AA5FE111F18DF46BF9CE1D38B0.roa (raw, json)
Hash identifier:          pnMqq+iEdHohQ02dKY6qCT1aVg9aDDe5V7hfZ/+kueg=
Subject key identifier:   B5:A4:4A:4A:07:3A:74:A0:59:72:A3:31:2E:CC:A3:03:B7:A7:7E:4E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D186
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B823F9AA5FE111F18DF46BF9CE1D38B0.roa
Signing time:             Thu 04 Jun 2026 06:50:49 +0000
ROA not before:           Thu 04 Jun 2026 06:50:44 +0000
ROA not after:            Fri 10 Jul 2026 06:50:44 +0000
asID:                     154177
IP address blocks:        154.90.32.0/23 maxlen: 24
                          154.90.34.0/23 maxlen: 24
                          154.90.36.0/23 maxlen: 24
                          154.90.38.0/23 maxlen: 24
                          154.90.40.0/23 maxlen: 24
                          154.90.42.0/23 maxlen: 24
                          154.90.48.0/23 maxlen: 24
                          154.90.50.0/23 maxlen: 24
                          154.90.54.0/23 maxlen: 24
                          154.90.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119174 (0x1d186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  4 06:50:44 2026 GMT
            Not After : Jul 10 06:50:44 2026 GMT
        Subject: CN=6a212049-3274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:36:60:df:c1:35:f0:42:03:39:5d:eb:b6:
                    cb:e4:11:58:f7:80:3f:b0:61:68:57:f7:1d:29:50:
                    12:53:8d:e8:cf:57:04:76:51:e2:ce:fa:9a:50:3f:
                    6b:f3:9b:9f:ba:66:b8:c8:bc:28:dd:12:16:71:22:
                    14:40:94:11:7b:6f:08:d0:47:aa:a4:bd:a6:b2:82:
                    72:04:a5:d7:87:90:23:79:7f:81:ed:e9:47:26:8c:
                    8d:3b:fc:68:d4:5a:df:68:da:81:59:6f:11:a2:80:
                    5b:63:5b:bb:fd:90:bb:28:ae:94:1e:68:42:21:88:
                    0c:35:e8:38:05:ec:22:21:9b:ae:2e:13:d4:bf:04:
                    41:07:d4:67:3e:9a:6d:49:93:49:57:ea:34:7e:a2:
                    93:ce:97:48:e3:4d:ac:8b:f5:16:1e:bd:b4:66:78:
                    ef:e4:0f:e9:e8:ff:3e:0d:da:db:ce:a9:bd:b6:52:
                    0a:79:37:ed:e1:b6:06:dd:2c:5a:20:fc:da:5e:09:
                    e1:ba:b0:9e:32:9c:33:10:eb:60:0f:40:34:5b:04:
                    b4:a1:e4:93:49:73:6d:05:5f:fd:cf:63:ce:d3:a8:
                    98:f1:ba:00:2f:df:96:00:15:1c:e9:de:4f:23:13:
                    50:55:f5:09:df:8a:6e:77:ed:50:9a:ae:e0:12:32:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A4:4A:4A:07:3A:74:A0:59:72:A3:31:2E:CC:A3:03:B7:A7:7E:4E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B823F9AA5FE111F18DF46BF9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.32.0-154.90.43.255
                  154.90.48.0/22
                  154.90.54.0/23
                  154.90.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:48:af:a7:3d:b7:9b:5b:3d:e2:e8:ad:59:7a:64:7b:c7:bd:
         cf:4b:cf:ee:c7:8d:42:30:a3:3a:e3:7a:7a:aa:75:a9:11:4e:
         80:45:2d:c0:7d:3d:e8:20:74:38:d2:67:e0:ea:e8:25:ba:da:
         45:d9:37:62:5c:37:12:a1:b9:be:71:84:bb:23:fe:b7:6f:92:
         ee:ec:6a:13:ee:86:5e:6a:4a:a2:03:8b:45:30:0d:10:0b:61:
         96:59:08:6f:b9:82:d1:52:ad:e9:24:98:f0:f0:01:fc:1a:26:
         cc:12:56:b5:0f:c4:d6:b6:42:8e:43:e0:9a:91:7f:a8:a3:9d:
         20:7b:f8:5b:b5:9e:2e:21:48:32:e0:26:f7:3d:48:8c:2e:d7:
         44:d8:4a:c4:fa:79:43:53:30:2e:71:71:55:48:5f:15:cf:eb:
         0c:94:45:42:b9:80:ed:66:cc:c6:36:07:47:59:06:38:54:98:
         88:10:57:6e:92:f0:dc:af:e1:06:96:ba:d7:97:3c:32:32:9b:
         c9:80:a1:24:fe:01:26:c6:02:3c:da:be:58:fc:84:23:57:95:
         d6:22:12:1d:77:30:49:bd:a6:ac:07:8f:bb:36:bb:03:59:dd:
         83:58:ca:87:c9:71:9b:90:7f:69:8f:76:18:1d:c0:3e:5f:eb:
         4a:3f:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:29 2026 by rpki-client