Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E1542033F411F1A17FB9E1CE1D38B0.roa
File:                     E3E1542033F411F1A17FB9E1CE1D38B0.roa (raw, json)
Hash identifier:          WQZbBtObO/LARRZ0HMTFeg0YyWhfw33UoXh60PFSs1s=
Subject key identifier:   BC:4B:52:D0:C9:7E:AF:34:7D:B4:B4:63:A1:0D:68:C6:28:32:80:E7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C3B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E1542033F411F1A17FB9E1CE1D38B0.roa
Signing time:             Thu 09 Apr 2026 09:17:12 +0000
ROA not before:           Thu 09 Apr 2026 09:17:07 +0000
ROA not after:            Mon 09 Apr 2029 09:17:07 +0000
asID:                     17561
IP address blocks:        154.81.100.0/24 maxlen: 24
                          154.81.101.0/24 maxlen: 24
                          154.81.102.0/24 maxlen: 24
                          154.81.103.0/24 maxlen: 24
                          154.81.104.0/24 maxlen: 24
                          154.81.105.0/24 maxlen: 24
                          154.81.106.0/24 maxlen: 24
                          154.81.107.0/24 maxlen: 24
                          154.81.108.0/24 maxlen: 24
                          154.81.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 16:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115635 (0x1c3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  9 09:17:07 2026 GMT
            Not After : Apr  9 09:17:07 2029 GMT
        Subject: CN=69d76e97-bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:15:b0:f4:9d:c2:07:02:41:3a:41:e3:29:
                    82:84:49:0d:b2:c4:ae:33:f2:6b:cf:a4:d9:84:91:
                    2f:75:58:1e:e7:5b:42:f6:91:68:35:9e:e0:df:ba:
                    cc:b8:f2:b3:bc:a1:36:52:62:29:54:3d:49:5f:1e:
                    84:dc:d8:ad:e6:0c:0f:18:7b:f9:56:be:0a:18:c7:
                    6d:e3:2e:23:17:3b:31:2c:fd:a6:7f:cd:dd:56:5c:
                    3a:7f:cc:c6:f2:33:6f:1e:67:ca:4b:78:a5:88:fa:
                    34:4d:79:e4:6b:91:6d:67:95:e1:6b:8f:88:12:d4:
                    6f:2c:03:4c:55:a0:7f:06:42:7a:21:99:85:3e:dc:
                    13:62:3b:2c:50:18:1b:6a:85:6e:dc:19:fc:c0:54:
                    0f:8b:7a:ce:34:09:8d:f3:a6:f3:35:ac:64:5c:04:
                    dd:38:7d:39:98:2c:a7:01:21:ed:ff:dd:0a:7a:06:
                    e0:7a:17:3f:1b:e3:4b:1b:86:14:62:b2:45:91:70:
                    56:05:81:15:a5:7b:6b:15:b9:cd:97:18:7a:43:d0:
                    8f:44:1b:af:f0:28:8a:ae:95:11:ac:78:fa:46:86:
                    a6:ba:4c:d5:35:ca:67:b9:00:88:ae:5e:8d:76:77:
                    05:ba:54:4f:c1:4d:2b:b2:22:93:27:f5:a2:81:52:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:52:D0:C9:7E:AF:34:7D:B4:B4:63:A1:0D:68:C6:28:32:80:E7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E1542033F411F1A17FB9E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.100.0-154.81.109.255

    Signature Algorithm: sha256WithRSAEncryption
         55:5e:cc:e6:c2:0a:b7:61:1a:f4:f0:36:f4:ec:64:e4:b4:b7:
         f3:4e:ab:d8:10:a4:7e:65:ca:82:1d:1f:15:07:79:8e:d1:40:
         14:b5:97:e7:89:cd:ed:1e:ad:60:44:c9:74:19:93:66:cb:88:
         2b:0c:76:ae:e5:79:7e:28:cc:4e:a8:b2:c5:71:69:21:f4:e6:
         05:de:76:11:56:1d:d8:bd:ec:6a:df:4d:22:ea:a2:28:f8:0c:
         1b:d6:9d:8e:3c:e3:44:0d:45:59:40:6b:91:17:d7:71:d0:49:
         9c:75:63:0f:3a:4d:59:5c:b2:4e:44:fe:3d:53:ad:e1:81:08:
         c6:e7:cd:87:ed:4c:0f:43:f0:3b:34:0b:01:ac:98:a9:5a:d6:
         0b:a2:d9:0e:09:96:9c:64:bf:98:2e:36:18:ca:dc:56:fb:04:
         ed:32:d3:d9:c5:0b:bf:3f:5c:e1:da:e5:b6:cf:c1:bf:d5:0b:
         21:3d:43:53:cd:da:83:4f:e4:a5:11:12:08:67:2a:02:c2:55:
         9c:04:c7:77:90:e6:91:a4:b5:d8:6e:5f:95:aa:db:db:a5:37:
         fd:48:ac:b6:db:1c:95:bd:8b:a9:a4:f4:21:c5:9c:ec:f7:f8:
         77:a3:6d:86:a0:e3:74:a7:4b:54:1c:ea:dc:18:91:4b:61:c1:
         61:9c:c9:33
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcOzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MDkxNzA3WhcNMjkwNDA5MDkxNzA3WjAYMRYw
FAYDVQQDEw02OWQ3NmU5Ny1iZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1gAVsPSdwgcCQTpB4ymChEkNssSuM/Jrz6TZhJEvdVge51tC9pFoNZ7g
37rMuPKzvKE2UmIpVD1JXx6E3Nit5gwPGHv5Vr4KGMdt4y4jFzsxLP2mf83dVlw6
f8zG8jNvHmfKS3iliPo0TXnka5FtZ5Xha4+IEtRvLANMVaB/BkJ6IZmFPtwTYjss
UBgbaoVu3Bn8wFQPi3rONAmN86bzNaxkXATdOH05mCynASHt/90Kegbgehc/G+NL
G4YUYrJFkXBWBYEVpXtrFbnNlxh6Q9CPRBuv8CiKrpURrHj6RoamukzVNcpnuQCI
rl6NdncFulRPwU0rsiKTJ/WigVJqrQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLxL
UtDJfq80fbS0Y6ENaMYoMoDnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FM0UxNTQyMDMzRjQxMUYxQTE3RkI5RTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaUWQDBAGaUWwwDQYJ
KoZIhvcNAQELBQADggEBAFVezObCCrdhGvTwNvTsZOS0t/NOq9gQpH5lyoIdHxUH
eY7RQBS1l+eJze0erWBEyXQZk2bLiCsMdq7leX4ozE6ossVxaSH05gXedhFWHdi9
7GrfTSLqoij4DBvWnY4840QNRVlAa5EX13HQSZx1Yw86TVlcsk5E/j1TreGBCMbn
zYftTA9D8Ds0CwGsmKla1gui2Q4Jlpxkv5guNhjK3Fb7BO0y09nFC78/XOHa5bbP
wb/VCyE9Q1PN2oNP5KUREghnKgLCVZwEx3eQ5pGktdhuX5Wq29ulN/1IrLbbHJW9
i6mk9CHFnOz3+HejbYag43SnS1Qc6twYkUthwWGcyTM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:32 2026 by rpki-client