Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
File:                     BF94DC6259A211F186D43705CF1D38B0.roa (raw, json)
Hash identifier:          7mqRrOIfc6JlY99UfAydyhDqmhigNdf3CzZYhD/McoA=
Subject key identifier:   F8:DB:F4:7A:BC:27:06:6E:43:47:49:E0:F4:F9:C1:C5:98:61:89:24
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CFED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
Signing time:             Wed 27 May 2026 08:04:56 +0000
ROA not before:           Wed 27 May 2026 08:04:51 +0000
ROA not after:            Fri 04 Sep 2026 08:04:51 +0000
asID:                     46071
IP address blocks:        154.209.6.0/24 maxlen: 24
                          154.209.7.0/24 maxlen: 24
                          154.210.178.0/24 maxlen: 24
                          154.210.179.0/24 maxlen: 24
                          154.210.180.0/24 maxlen: 24
                          154.210.203.0/24 maxlen: 24
                          154.210.204.0/24 maxlen: 24
                          154.210.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118765 (0x1cfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 27 08:04:51 2026 GMT
            Not After : Sep  4 08:04:51 2026 GMT
        Subject: CN=6a16a5a8-d25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:b5:71:ec:5f:a5:bb:54:4d:00:4d:1f:b3:
                    7b:79:06:c9:24:e8:f6:53:91:c5:08:b4:eb:76:fe:
                    ea:06:da:59:5e:d3:75:29:e0:7c:61:05:96:03:a1:
                    d6:cf:1a:e0:dc:dc:66:17:8b:d9:a9:f6:72:f4:5e:
                    ae:d1:74:43:1c:69:be:bc:17:4b:ff:69:13:83:58:
                    21:6e:05:2e:c8:d9:04:f3:98:52:b0:8b:01:7e:0c:
                    24:cc:6f:97:5e:09:de:95:ca:6b:6e:ab:bb:97:11:
                    0e:62:a1:48:26:f9:22:7d:a6:c2:7a:c7:20:62:41:
                    01:31:d0:ac:93:b6:4b:0b:cf:3b:85:08:89:55:86:
                    ac:ae:a6:d0:3f:2c:8d:71:09:91:0a:43:60:10:2b:
                    b8:c8:4e:e4:9f:55:9e:27:fa:95:f4:03:c2:e8:cc:
                    6b:45:5d:83:31:50:d6:3f:03:90:25:d0:63:49:4b:
                    66:ae:22:fc:3d:5f:8a:5e:ec:52:0d:0d:85:ef:8a:
                    09:fe:d2:f5:f3:18:cd:b9:4f:e9:32:62:22:ed:11:
                    71:ca:da:53:fb:b4:12:aa:d6:6a:19:de:bb:49:ee:
                    7b:a6:b1:7d:44:72:5b:48:3f:fa:64:ad:03:b7:4f:
                    fd:55:2a:a2:71:35:2f:2a:57:a1:a7:f8:96:72:30:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:F4:7A:BC:27:06:6E:43:47:49:E0:F4:F9:C1:C5:98:61:89:24
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.6.0/23
                  154.210.178.0-154.210.180.255
                  154.210.203.0-154.210.204.255
                  154.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:57:0e:36:4f:94:2a:28:c7:df:81:17:25:bf:27:45:c4:
         09:49:66:c3:13:3d:b8:44:bc:a0:2d:08:fd:a7:b0:8b:b4:12:
         4a:fd:62:40:f4:da:a0:ef:07:3b:07:cc:1e:78:95:4f:ad:6b:
         20:32:bc:1b:65:7f:aa:f1:81:26:3b:61:d5:5b:7b:ca:82:9c:
         3a:c2:06:f2:65:19:c8:c2:66:69:3d:af:9e:fc:5b:49:01:a3:
         21:b5:bb:9e:a5:70:fd:5c:bf:e8:37:df:fd:68:62:10:b8:dd:
         de:50:31:61:a9:5a:cc:87:68:8b:22:ab:7a:6c:f7:b6:74:53:
         91:f7:18:2e:be:92:f7:84:a5:17:16:ac:f9:d1:71:7c:70:a3:
         04:0d:cb:22:f0:61:cc:84:87:8a:6e:be:df:06:7d:c0:b4:76:
         cb:3c:ec:34:32:0f:c2:1e:3d:10:7e:8e:13:96:ee:83:fe:59:
         e0:b9:bb:06:0f:12:22:43:72:07:20:a0:f2:bc:32:94:52:a2:
         c6:69:ef:c1:7a:bc:a2:9d:32:8a:0e:c9:be:93:74:13:0f:15:
         d2:62:a3:0d:75:28:18:09:86:b3:55:3d:49:b0:da:06:15:86:
         92:70:bd:74:80:46:93:94:5c:6e:cc:65:ef:c1:5c:82:55:dc:
         9f:2b:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:21 2026 by rpki-client