Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264E896646B211F19F3F3FCACE1D38B0.roa
File:                     264E896646B211F19F3F3FCACE1D38B0.roa (raw, json)
Hash identifier:          hwQ9meWJBYilg6Emw5yteDuB0geGvL1FjzTdOawhOrE=
Subject key identifier:   7C:24:36:93:C3:8A:4E:9C:8D:0D:34:43:54:49:62:93:F2:1C:CC:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C942
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264E896646B211F19F3F3FCACE1D38B0.roa
Signing time:             Sun 03 May 2026 05:37:19 +0000
ROA not before:           Sun 03 May 2026 05:37:14 +0000
ROA not after:            Wed 10 Jun 2026 05:37:14 +0000
asID:                     14315
IP address blocks:        154.81.11.0/24 maxlen: 24
                          154.81.48.0/23 maxlen: 24
                          154.84.128.0/22 maxlen: 24
                          154.84.132.0/23 maxlen: 24
                          154.84.134.0/24 maxlen: 24
                          154.84.152.0/24 maxlen: 24
                          154.88.68.0/22 maxlen: 24
                          154.89.1.0/24 maxlen: 24
                          154.89.128.0/22 maxlen: 24
                          154.89.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117058 (0x1c942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  3 05:37:14 2026 GMT
            Not After : Jun 10 05:37:14 2026 GMT
        Subject: CN=69f6df0f-a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:96:54:50:fc:bf:16:13:40:ef:72:04:db:
                    5b:c1:dd:18:67:fb:20:03:ad:8e:88:3f:f0:ab:c5:
                    46:e8:01:bb:e7:81:5e:59:1a:a3:b1:4a:91:d8:7a:
                    ee:24:a8:a7:2b:38:95:c5:77:ff:5a:5c:00:73:a2:
                    04:b2:13:cf:be:e7:34:cf:eb:0d:1f:16:bb:f7:27:
                    de:7f:69:5e:01:e3:e9:39:e5:d8:4b:9f:3d:ce:4f:
                    86:05:a6:0a:35:70:2c:a2:af:50:95:8b:f1:62:4b:
                    ae:27:b1:2d:db:54:16:40:3d:c6:2e:86:79:9a:b8:
                    de:30:a5:fd:91:6f:28:17:c2:b0:93:b2:a3:6a:57:
                    aa:66:78:97:8b:4e:06:7d:d3:2a:28:d4:43:d8:cd:
                    5e:62:47:f6:2d:36:38:d1:1a:29:be:79:6f:59:93:
                    b8:9d:9e:f3:70:72:55:fa:41:dd:2a:ca:b3:c3:22:
                    7d:48:24:e0:62:42:ab:cb:d7:f4:f8:81:ed:8c:cf:
                    16:b2:6c:fd:9f:fd:e4:ef:24:bc:9f:56:21:e5:f1:
                    4f:14:3b:06:65:07:d3:33:60:1c:9e:c4:44:48:ce:
                    6c:30:f3:10:90:9d:34:fd:f9:68:9d:60:c2:af:65:
                    79:73:05:3d:e8:d2:eb:f2:a3:bc:7d:83:be:86:69:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:36:93:C3:8A:4E:9C:8D:0D:34:43:54:49:62:93:F2:1C:CC:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264E896646B211F19F3F3FCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.11.0/24
                  154.81.48.0/23
                  154.84.128.0-154.84.134.255
                  154.84.152.0/24
                  154.88.68.0/22
                  154.89.1.0/24
                  154.89.128.0/22
                  154.89.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:3c:43:ee:f9:bf:18:72:2b:fb:07:64:54:fa:71:1e:9d:
         39:f8:88:a4:73:b7:92:8d:e3:f5:36:e5:e4:e7:c2:ba:9b:d2:
         68:d4:9a:8e:d8:aa:49:c8:6c:04:e6:8b:77:d2:f3:7a:a0:6c:
         f6:b0:d4:a9:43:47:4a:fa:bb:73:83:bd:a0:26:0c:82:66:40:
         76:7f:80:47:a4:c1:72:9f:80:d6:bb:23:0d:41:eb:c5:07:ae:
         5b:aa:6f:9f:1a:61:43:c9:8d:b1:17:e6:5c:88:8f:81:d5:1b:
         63:91:05:cc:ca:62:2e:e0:c2:d3:a3:22:65:21:a1:4b:8c:71:
         0c:1f:87:ff:3a:11:41:ba:15:8e:dc:ab:d7:a2:bf:73:14:f2:
         ee:7f:47:9d:85:43:b9:1e:bf:4c:9e:2f:26:f2:dd:a3:08:56:
         80:45:68:ed:8b:16:f3:b5:77:11:36:80:d9:d1:9f:f7:3e:3c:
         64:7c:0f:67:9f:d3:85:67:fb:27:bf:6f:f6:47:9e:a3:bd:10:
         a3:18:2c:f4:4b:35:7d:83:64:67:d7:f0:a8:b8:30:1b:d7:48:
         c4:07:11:11:73:b0:78:84:c1:a6:a2:b0:45:e7:45:04:93:e1:
         62:0b:ee:21:65:15:e3:17:ba:6e:26:05:93:05:36:9b:e3:08:
         9c:cf:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:50 2026 by rpki-client