Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD706E05BB211F1AEEBD9F9CE1D38B0.roa
File:                     EAD706E05BB211F1AEEBD9F9CE1D38B0.roa (raw, json)
Hash identifier:          n3a8iGO1AEoMnisQMFdkvQDIr5GlBDiU+wTYbOfR2Ho=
Subject key identifier:   7D:5F:EA:14:66:A9:48:36:CF:FA:30:D2:AB:7C:9E:E8:40:C1:BF:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D0B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD706E05BB211F1AEEBD9F9CE1D38B0.roa
Signing time:             Fri 29 May 2026 23:05:43 +0000
ROA not before:           Sat 30 May 2026 23:05:37 +0000
ROA not after:            Wed 01 Jul 2026 23:05:37 +0000
asID:                     62240
IP address blocks:        154.194.73.0/24 maxlen: 24
                          154.194.74.0/24 maxlen: 24
                          154.194.103.0/24 maxlen: 24
                          154.196.20.0/24 maxlen: 24
                          154.196.21.0/24 maxlen: 24
                          154.196.23.0/24 maxlen: 24
                          154.196.24.0/24 maxlen: 24
                          154.196.25.0/24 maxlen: 24
                          154.196.48.0/24 maxlen: 24
                          154.196.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118961 (0x1d0b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 23:05:37 2026 GMT
            Not After : Jul  1 23:05:37 2026 GMT
        Subject: CN=6a1a1bc7-1037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:d5:e7:56:d0:cf:f1:8c:8b:08:23:fb:4e:
                    67:bb:19:19:f7:1d:0a:61:ee:33:3e:aa:a8:a0:28:
                    99:bd:64:9a:ab:ff:26:ef:e8:96:63:1f:1a:17:eb:
                    83:cc:d8:46:66:ad:e0:9c:44:72:b0:4a:ad:4a:05:
                    15:f1:0d:2b:d8:f2:71:57:61:d0:c9:af:58:f4:9f:
                    27:a1:50:e4:cd:a3:8a:18:48:0c:73:39:2e:64:40:
                    3e:c3:bc:70:e8:0c:47:0f:14:78:24:f2:35:bb:82:
                    96:94:b0:c3:63:fb:64:10:cc:54:d0:63:6f:14:3f:
                    60:40:0c:91:e9:18:5d:32:fe:21:6d:23:dd:06:09:
                    79:a7:18:9f:57:f3:e5:c0:ba:19:37:7e:58:6c:7a:
                    c0:73:4f:75:b5:41:bc:f4:3b:be:38:a5:fb:d9:7d:
                    11:95:ed:ec:16:fb:c9:eb:a7:94:bf:a9:a0:d5:56:
                    19:b9:41:78:26:90:c0:37:ac:b1:cd:e1:83:54:a5:
                    a1:af:9f:12:be:23:05:91:82:49:6b:0d:9f:09:64:
                    a7:aa:9c:d1:07:ad:2e:7a:91:ec:db:48:e1:00:4f:
                    cc:a1:c8:bc:6d:8f:88:38:7d:38:73:13:c7:9f:33:
                    4b:35:68:1e:4b:d7:b0:c2:c9:bd:60:02:13:cf:2e:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:EA:14:66:A9:48:36:CF:FA:30:D2:AB:7C:9E:E8:40:C1:BF:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD706E05BB211F1AEEBD9F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.73.0-154.194.74.255
                  154.194.103.0/24
                  154.196.20.0/23
                  154.196.23.0-154.196.25.255
                  154.196.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:ed:f8:2f:bf:eb:70:9f:9f:93:bd:a6:e2:61:4b:7a:2d:
         56:d7:9e:1b:a7:94:5e:88:bb:18:1c:21:3a:64:f8:81:cf:32:
         0f:c1:fd:fd:6f:33:36:4f:06:09:f8:d1:ec:f8:c4:08:89:25:
         51:df:62:de:b1:4c:b1:b5:70:1c:7d:26:fb:8a:d9:f6:aa:3a:
         87:d6:ef:89:87:7c:20:1b:ee:d7:ef:b6:4b:13:05:82:bb:5d:
         53:7a:34:ff:05:b2:a0:9b:fc:92:a9:0b:22:12:d1:50:b6:51:
         3f:03:d7:01:45:43:8d:bf:59:d5:80:1f:c2:1d:d4:08:5b:4d:
         ee:d6:11:5e:90:00:ba:42:73:0a:67:51:1d:c8:4e:ff:1d:56:
         5b:5b:51:46:aa:54:e7:29:4e:ab:51:b1:d0:4d:f4:d5:12:ba:
         bf:93:8a:a1:25:47:98:a3:e0:3f:57:54:1b:52:6d:f3:a4:e1:
         06:a8:46:a9:73:df:c3:5c:b2:0b:92:92:0c:20:c1:b5:74:64:
         e1:f1:c2:e5:29:19:47:47:ea:b9:6b:a1:9c:c9:d6:87:bf:76:
         1a:65:32:92:0c:09:08:b7:cd:15:37:6f:2b:07:85:42:cf:1c:
         cb:ee:e1:7d:00:e6:7b:5e:2e:f7:77:aa:cc:3d:81:51:bb:58:
         cd:6b:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:46 2026 by rpki-client