Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10CC63230A211F1A82E2E89DAE4EC9C.roa
File:                     C10CC63230A211F1A82E2E89DAE4EC9C.roa (raw, json)
Hash identifier:          F9yTToIyjrq5R/KTlgv/xnsBqUTK2uMFchLQbY7KQ1g=
Subject key identifier:   C3:60:C4:8D:CA:DA:E7:0C:58:E6:76:6B:68:E5:E8:47:3E:36:4B:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C2D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10CC63230A211F1A82E2E89DAE4EC9C.roa
Signing time:             Sun 05 Apr 2026 03:51:43 +0000
ROA not before:           Sun 05 Apr 2026 03:51:01 +0000
ROA not after:            Fri 08 May 2026 03:51:01 +0000
asID:                     45194
IP address blocks:        154.84.202.0/24 maxlen: 24
                          154.84.203.0/24 maxlen: 24
                          154.84.204.0/24 maxlen: 24
                          154.84.205.0/24 maxlen: 24
                          154.84.206.0/24 maxlen: 24
                          154.84.207.0/24 maxlen: 24
                          154.84.252.0/24 maxlen: 24
                          154.84.253.0/24 maxlen: 24
                          154.84.254.0/24 maxlen: 24
                          154.84.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 16:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115414 (0x1c2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  5 03:51:01 2026 GMT
            Not After : May  8 03:51:01 2026 GMT
        Subject: CN=69d1dc4f-c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:96:84:ec:94:8d:7d:2f:85:c6:19:6f:f7:1d:
                    7f:a2:0d:78:06:9d:00:03:79:cd:66:58:79:02:10:
                    bc:d8:aa:63:8a:52:51:0d:c6:63:ff:3c:6d:37:58:
                    6a:9a:b2:f1:86:c2:5a:60:6a:be:0c:ae:a4:a0:96:
                    e6:7c:e5:ba:62:59:f2:8c:c8:ea:71:ef:45:5f:0a:
                    80:72:17:71:b5:52:b3:70:55:fa:eb:d3:51:b7:a0:
                    d3:e7:32:85:08:77:c5:b0:5a:76:62:7b:27:98:50:
                    fd:40:8d:0e:17:89:11:b0:81:45:0b:15:c7:dc:60:
                    5f:d2:d8:ca:fe:c5:a6:93:c6:4f:18:08:91:ca:a4:
                    bf:7b:e1:48:13:b5:bf:de:87:63:71:d0:0f:e8:f2:
                    47:8a:34:09:d8:68:37:46:0f:e6:62:a9:92:01:f9:
                    84:fe:f2:cc:ee:f8:f4:83:c4:b0:44:d8:62:cc:90:
                    31:d8:76:9f:dd:41:4b:2c:8c:59:8f:f4:05:af:35:
                    49:fe:1d:8d:33:d3:09:aa:08:4f:b6:15:b4:6d:fa:
                    09:d0:05:1f:a5:df:fb:e4:1e:3e:dc:f5:03:e6:ce:
                    e0:ba:25:41:ff:1a:67:7e:77:bc:6a:b8:d7:1b:e6:
                    fe:27:3f:67:48:c5:c8:9d:09:b7:5e:73:02:dc:85:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:C4:8D:CA:DA:E7:0C:58:E6:76:6B:68:E5:E8:47:3E:36:4B:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10CC63230A211F1A82E2E89DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.202.0-154.84.207.255
                  154.84.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:00:43:bb:93:cd:be:51:e4:ca:ca:bf:80:83:bc:18:37:
         b4:6c:bf:e3:bf:c9:d4:56:c2:5c:a1:65:e9:02:0e:78:67:69:
         7d:70:ad:fa:84:0a:f3:47:ed:b7:f5:fb:ca:f9:c8:16:86:72:
         19:e2:f3:fc:79:6a:0b:eb:1d:29:14:d8:64:fd:6b:61:10:66:
         85:5e:1e:c4:59:a1:7a:5b:c3:d9:33:95:e6:c8:dd:39:96:eb:
         68:c3:b6:11:10:07:62:67:43:79:ef:55:f3:0e:a7:ec:29:7c:
         03:20:6d:d2:8a:30:5c:a9:8c:24:36:f1:59:df:30:c1:d6:69:
         1a:f2:3f:3d:8e:45:92:67:d3:fa:3e:54:90:6e:ad:75:b7:57:
         5c:95:aa:eb:5f:e1:10:9b:7c:eb:f3:e8:cd:f0:6a:f9:d8:74:
         1b:5b:92:db:f0:1f:b3:de:de:fd:30:01:ab:05:ff:93:1f:e8:
         2b:15:7d:97:43:a6:84:00:22:6e:98:89:3b:72:1b:54:1d:b1:
         c9:f7:b5:9c:c9:a3:08:fd:89:69:f4:0f:2a:f1:96:3d:9f:2b:
         1d:d9:cf:05:05:a7:b9:a9:01:4d:fe:a7:3e:19:20:2b:a6:4e:
         df:4f:ea:9e:74:aa:1d:da:21:4a:f4:76:75:83:e2:5e:14:82:
         c1:95:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:26 2026 by rpki-client