Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64CE62A5B9E11F1B6B2E402CF1D38B0.roa
File:                     F64CE62A5B9E11F1B6B2E402CF1D38B0.roa (raw, json)
Hash identifier:          XsQ36TVDDhddKKROjbkhibd6+xtzImkCQnMJM/XxIEI=
Subject key identifier:   09:06:3B:E5:9A:37:8F:E3:08:29:1C:0A:6B:3A:80:23:9C:DB:D7:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64CE62A5B9E11F1B6B2E402CF1D38B0.roa
Signing time:             Fri 29 May 2026 20:42:52 +0000
ROA not before:           Fri 29 May 2026 20:42:48 +0000
ROA not after:            Wed 01 Jul 2026 20:42:48 +0000
asID:                     62240
IP address blocks:        154.194.79.0/24 maxlen: 24
                          154.194.89.0/24 maxlen: 24
                          154.194.92.0/24 maxlen: 24
                          154.194.93.0/24 maxlen: 24
                          154.194.98.0/24 maxlen: 24
                          154.196.18.0/24 maxlen: 24
                          154.196.26.0/24 maxlen: 24
                          154.196.27.0/24 maxlen: 24
                          154.196.28.0/24 maxlen: 24
                          154.196.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118913 (0x1d081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 20:42:48 2026 GMT
            Not After : Jul  1 20:42:48 2026 GMT
        Subject: CN=6a19fa4c-9600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:d9:e5:74:69:3b:5a:7a:b3:1a:cb:09:9e:
                    e1:56:35:72:33:ff:2e:27:09:14:39:8c:0d:39:d3:
                    dd:a5:ee:3b:01:d2:2a:c8:4c:cf:5e:0c:cb:ee:b3:
                    ec:55:8d:b3:cf:21:43:c4:03:af:d9:66:55:5a:36:
                    13:e3:ff:77:b9:84:82:f9:56:c3:d2:c8:be:55:92:
                    b9:6e:73:13:7c:8e:b8:a4:54:f6:2e:77:9f:e9:ce:
                    0b:da:92:f0:b1:b3:7a:03:0c:41:1c:b5:fa:e6:4f:
                    8f:72:f9:b4:3b:88:bc:c8:33:12:b4:0c:bb:43:3f:
                    7c:dc:c8:81:b2:c5:43:d9:f9:8d:a7:1c:4f:3d:bf:
                    4b:50:8c:84:10:b3:c3:d0:54:12:66:23:c9:73:87:
                    67:40:10:54:97:c7:b2:53:e0:bf:62:9f:38:4b:6c:
                    cd:56:85:02:78:c6:6c:e5:b5:e0:cc:4b:c6:83:87:
                    17:a4:73:db:5a:75:d0:6e:30:08:8f:5e:98:9f:61:
                    b6:37:3e:ee:86:a8:9f:46:f5:b2:9f:7a:a5:2c:f5:
                    e5:6c:b9:9e:79:e2:e7:a8:a9:48:af:40:82:2f:34:
                    be:57:db:5e:43:22:ce:e1:d6:02:e1:6c:70:b3:00:
                    07:46:57:c7:75:49:86:5c:7f:d7:9f:9b:cb:b4:62:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:3B:E5:9A:37:8F:E3:08:29:1C:0A:6B:3A:80:23:9C:DB:D7:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64CE62A5B9E11F1B6B2E402CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.79.0/24
                  154.194.89.0/24
                  154.194.92.0/23
                  154.194.98.0/24
                  154.196.18.0/24
                  154.196.26.0-154.196.28.255
                  154.196.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:59:65:9b:85:f1:07:7e:56:63:98:62:6d:33:e5:7d:40:39:
         6d:6e:7a:2a:54:26:d4:ab:33:31:25:e3:96:f2:35:38:01:f9:
         cb:88:58:1a:41:ee:b2:e0:1e:7e:4c:5e:53:82:d7:23:1b:69:
         79:cc:39:3a:13:07:f2:55:ce:b4:d4:47:d9:17:92:18:2c:44:
         34:e3:94:04:58:03:02:09:6b:88:f4:ff:20:10:67:a1:52:70:
         b6:92:cf:ad:bc:00:99:d7:da:71:ec:44:be:58:8b:d5:93:ca:
         4d:a8:53:a2:0a:bc:61:a3:d4:e6:33:ae:fe:7f:51:b5:0e:a2:
         c7:9b:5f:62:2e:f6:b6:95:51:b9:f8:b5:a8:2c:81:a0:83:48:
         25:99:66:0e:2b:96:91:04:e8:8a:7f:d0:ba:5c:eb:f3:c2:fa:
         05:55:1d:d2:a0:5c:04:bd:e0:58:b5:1e:6e:bb:23:79:26:c5:
         6c:12:c7:7c:c9:ae:89:0c:8a:c6:cf:5e:6d:cb:a1:26:45:75:
         3b:94:6f:48:b2:1c:83:0e:5e:19:31:1a:c0:e1:ab:9a:9c:b9:
         6f:ab:89:aa:83:64:9c:90:d2:37:99:8d:f9:c8:3e:8c:ec:fd:
         de:09:0c:de:f8:ff:f9:27:e6:06:1f:fc:be:fd:19:49:33:b4:
         ba:0c:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:46 2026 by rpki-client