Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F0868478711F1B88F03D7CE1D38B0.roa
File:                     550F0868478711F1B88F03D7CE1D38B0.roa (raw, json)
Hash identifier:          pwA2BCbcVtOHrpjjPHPCSEC3OCmU88xMdwY0oDCC8Qk=
Subject key identifier:   26:DD:08:B3:5F:91:D2:3E:4C:12:3C:72:EF:0E:FB:3B:F0:93:EC:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C94F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F0868478711F1B88F03D7CE1D38B0.roa
Signing time:             Mon 04 May 2026 07:03:20 +0000
ROA not before:           Mon 04 May 2026 07:03:15 +0000
ROA not after:            Mon 08 Jun 2026 07:03:15 +0000
asID:                     45194
IP address blocks:        154.84.210.0/24 maxlen: 24
                          154.84.211.0/24 maxlen: 24
                          154.84.212.0/24 maxlen: 24
                          154.84.224.0/24 maxlen: 24
                          154.84.225.0/24 maxlen: 24
                          154.84.226.0/24 maxlen: 24
                          154.84.227.0/24 maxlen: 24
                          154.84.228.0/24 maxlen: 24
                          154.84.229.0/24 maxlen: 24
                          154.84.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117071 (0x1c94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  4 07:03:15 2026 GMT
            Not After : Jun  8 07:03:15 2026 GMT
        Subject: CN=69f844b8-4836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:e5:f9:e6:ea:01:19:e0:ac:19:2f:03:9f:
                    47:b9:5c:aa:a2:c3:f7:34:47:1d:f1:1f:bb:59:8a:
                    09:f9:87:68:4c:70:65:6f:2f:11:45:ec:18:4c:56:
                    09:63:81:4d:a7:9b:3b:a3:8d:bf:13:e5:79:ca:2b:
                    4d:49:d3:31:52:bd:d3:1a:6d:b5:86:08:2f:e1:1e:
                    4d:22:6b:8b:86:36:73:ac:bb:1a:9f:c8:77:af:e6:
                    8a:14:15:a4:c3:ec:c7:63:b3:39:6f:68:4c:22:d2:
                    9f:b3:1f:2a:fb:93:1a:01:a3:d1:ba:08:f1:d0:20:
                    6f:89:10:ca:70:d3:65:fd:a2:49:af:5f:15:84:db:
                    76:59:a3:44:b1:40:aa:fa:0e:f0:26:90:74:36:78:
                    4d:e6:4d:a2:ee:8a:53:59:a4:8a:23:9d:66:ed:24:
                    56:bc:cd:cd:ee:49:8b:db:eb:d2:74:9f:8e:05:ae:
                    da:b4:6c:0e:f2:04:d7:97:05:cb:f9:0d:a4:47:96:
                    f6:b4:d8:3b:46:67:33:3e:f0:4a:b1:43:68:c3:ac:
                    4f:7c:c3:ab:07:02:04:e5:0e:42:a5:9c:9e:87:60:
                    b9:9e:4f:d6:ef:d3:27:12:85:7b:37:48:dc:41:45:
                    28:6a:95:21:93:38:e5:34:8e:24:97:10:85:ff:3a:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:08:B3:5F:91:D2:3E:4C:12:3C:72:EF:0E:FB:3B:F0:93:EC:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F0868478711F1B88F03D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.210.0-154.84.212.255
                  154.84.224.0-154.84.230.255

    Signature Algorithm: sha256WithRSAEncryption
         c6:93:d6:a0:fa:55:61:d3:fe:0e:f8:dd:13:e3:34:2e:62:a8:
         38:62:27:e7:f8:0d:4d:b2:86:52:7a:f8:f2:4b:df:7f:21:1f:
         10:b3:a0:ba:69:2d:6f:77:70:6f:26:68:e9:24:ee:98:a3:13:
         db:44:f8:a0:80:e9:66:25:da:c8:ed:2d:f5:89:76:c9:7e:3f:
         cf:73:4a:92:74:34:b5:db:8a:27:8a:35:15:d9:db:61:fd:32:
         a6:1f:92:00:0c:8f:07:51:41:9a:b0:1f:d7:a8:43:69:01:1f:
         d2:37:a5:5c:f0:19:b2:26:b2:a1:34:da:56:03:27:e1:ab:b2:
         19:44:c7:ab:a9:9a:5b:32:ea:a4:72:2b:35:a5:e4:17:58:5f:
         a9:82:1d:ee:d7:3e:12:7d:b9:cc:e3:19:b1:b4:37:dc:ae:29:
         26:5c:31:7a:cd:f7:14:7a:48:65:d9:81:af:50:65:46:bc:d5:
         33:8d:6f:07:7e:c1:30:4b:b9:ea:30:03:ca:f3:bb:87:79:7b:
         72:13:0f:ab:15:c2:05:be:5e:92:fc:81:e4:c4:95:cf:85:78:
         08:dd:6a:1a:4e:81:7b:17:cc:23:8f:6b:a7:02:32:e0:3c:4f:
         30:fd:8e:73:e3:3d:1b:fe:70:9c:9b:0b:16:8a:03:77:54:33:
         cf:a2:43:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:33 2026 by rpki-client