Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB70A6230D311F1A250F9B5DAE4EC9C.roa
File:                     FDB70A6230D311F1A250F9B5DAE4EC9C.roa (raw, json)
Hash identifier:          1R0mVDPxesqpeXfC7Hfeao7uSnt71HWXivbW1DbdNH4=
Subject key identifier:   85:C7:70:F4:7A:19:67:C6:7A:F6:31:65:F4:8C:98:92:A5:FB:AD:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C308
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB70A6230D311F1A250F9B5DAE4EC9C.roa
Signing time:             Sun 05 Apr 2026 09:44:08 +0000
ROA not before:           Sun 05 Apr 2026 09:44:00 +0000
ROA not after:            Fri 08 May 2026 09:44:00 +0000
asID:                     45194
IP address blocks:        154.84.202.0/24 maxlen: 24
                          154.84.203.0/24 maxlen: 24
                          154.84.204.0/24 maxlen: 24
                          154.84.205.0/24 maxlen: 24
                          154.84.206.0/24 maxlen: 24
                          154.84.207.0/24 maxlen: 24
                          154.84.252.0/24 maxlen: 24
                          154.84.253.0/24 maxlen: 24
                          154.84.254.0/24 maxlen: 24
                          154.84.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 16:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115464 (0x1c308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  5 09:44:00 2026 GMT
            Not After : May  8 09:44:00 2026 GMT
        Subject: CN=69d22ee8-45e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:0f:c5:44:b5:6d:5e:d9:8e:bb:cf:bd:51:
                    64:b8:1c:a1:0b:93:a6:aa:08:80:4e:d2:4f:1c:05:
                    d3:a2:3f:11:1a:d7:5a:77:a3:f1:72:b9:8a:53:c3:
                    cb:96:d1:27:69:97:81:79:7d:a6:89:81:de:25:c4:
                    c8:d5:c6:ff:0f:8c:ac:11:ec:25:c3:39:54:fd:21:
                    14:53:fc:4f:cd:85:28:ec:25:39:cb:be:f6:08:07:
                    6f:f5:67:01:26:05:4d:0a:b4:f3:6d:1e:55:b0:9f:
                    58:5f:f9:f5:c2:81:e6:5c:1d:d1:53:84:ae:ec:9e:
                    dd:01:81:05:a4:42:69:8a:5d:b9:39:80:d3:ad:9a:
                    44:f3:ac:cd:65:3c:d2:17:b8:1d:65:5a:02:ce:09:
                    3d:0f:78:2e:58:e9:6a:27:95:ab:ff:b8:9d:14:dd:
                    2f:5f:58:e8:1e:32:6e:06:89:bf:33:2d:83:8f:0c:
                    32:26:ea:e5:ea:17:58:26:a1:cc:ad:3e:1f:cf:68:
                    29:30:06:3d:ae:6a:14:db:16:10:45:f9:58:d3:52:
                    cf:83:f9:36:77:b8:54:c1:dd:a5:a3:81:b4:34:74:
                    52:2b:2c:e1:60:bc:ec:70:5f:f3:0d:7c:ed:fe:f2:
                    66:de:49:d3:5a:71:71:be:9f:2c:b2:bd:5d:14:08:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:70:F4:7A:19:67:C6:7A:F6:31:65:F4:8C:98:92:A5:FB:AD:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB70A6230D311F1A250F9B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.202.0-154.84.207.255
                  154.84.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:e0:34:b6:7e:86:2d:dc:d8:b5:8b:61:e1:1c:0e:e9:ad:
         e1:c0:c4:7b:83:ee:cb:6a:9a:87:7c:d0:4e:c7:f5:37:40:4f:
         37:7e:57:19:b4:b4:3c:c9:d7:64:8e:dd:12:cf:d1:6a:1c:6a:
         d3:45:53:d2:f5:39:42:de:51:30:4e:46:43:02:66:db:29:0b:
         0b:15:31:08:00:1e:53:1f:a5:23:b4:7b:2e:98:d3:7f:4e:9f:
         43:3a:cd:d8:40:af:d0:01:95:40:05:d7:95:a9:d3:c6:f9:67:
         f4:1c:5e:99:82:51:50:18:55:1c:71:d6:9a:5c:c9:da:63:b6:
         78:5f:69:62:d4:92:6e:be:53:ca:3d:d8:90:c9:cb:c5:2d:ad:
         f1:d2:e5:c6:7b:96:cd:c7:0e:ad:9c:d5:7e:d4:90:01:80:c5:
         79:25:c8:be:c9:3c:ce:9f:58:6b:c3:3d:76:2a:76:01:87:06:
         48:2e:3c:98:e6:d3:07:43:ee:27:fb:b3:93:1d:dc:c3:0d:56:
         48:f4:37:60:ba:11:12:81:a2:be:a3:ba:3e:ff:cb:99:c5:6c:
         9b:c1:af:45:74:55:6c:cf:8e:49:2b:c4:dc:29:bf:15:00:db:
         21:19:ee:87:13:ca:38:0a:c0:6c:7e:f4:1c:ae:46:80:57:3d:
         18:3f:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:37 2026 by rpki-client