Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7E4F5E447811F1896482B7CE1D38B0.roa
File:                     6F7E4F5E447811F1896482B7CE1D38B0.roa (raw, json)
Hash identifier:          w9qAOhwyLah1yJO4KOX1iCIGV/EK9D53v1RLwZjxb4U=
Subject key identifier:   EF:D0:E4:43:E1:47:B5:EA:08:F8:DF:96:D9:BC:A9:EF:EE:53:EF:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C815
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7E4F5E447811F1896482B7CE1D38B0.roa
Signing time:             Thu 30 Apr 2026 09:39:09 +0000
ROA not before:           Thu 30 Apr 2026 09:39:04 +0000
ROA not after:            Wed 27 May 2026 09:39:04 +0000
asID:                     147176
IP address blocks:        154.83.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116757 (0x1c815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 30 09:39:04 2026 GMT
            Not After : May 27 09:39:04 2026 GMT
        Subject: CN=69f3233c-aa1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:0a:aa:e7:0c:ff:ae:74:80:50:ca:f3:20:
                    93:ae:bd:db:26:96:7c:b0:39:4a:e9:aa:53:69:a3:
                    d1:35:52:d9:24:a9:63:43:68:db:33:c1:4c:08:12:
                    a0:d7:ed:5c:0e:52:26:1e:27:9c:6d:b4:81:94:19:
                    83:7d:ee:a6:3d:b3:ce:ef:8f:45:b5:f8:15:63:fc:
                    52:53:9b:33:05:b9:a8:3e:fa:73:de:60:f4:db:8a:
                    05:4a:e0:3a:a6:78:d7:4a:2b:06:f9:31:e3:30:91:
                    d6:13:f5:21:5d:f3:39:11:92:25:8c:70:f9:ab:ec:
                    77:4a:44:f2:7b:71:57:ef:db:7f:fc:22:2a:47:54:
                    ee:10:ff:b0:3e:ab:1a:3d:09:e2:a7:58:65:cf:cb:
                    39:31:e2:d5:46:18:be:a7:74:4f:2f:00:4f:03:bc:
                    fc:54:8c:d7:0a:31:e1:46:20:9e:16:dd:e1:8f:60:
                    90:41:61:a0:38:22:d0:13:e3:d9:0a:08:67:24:e6:
                    be:d6:24:2e:ad:10:c7:d3:eb:b3:51:13:a6:f0:e3:
                    2b:07:dd:9c:25:20:c8:73:22:1b:68:af:83:03:ff:
                    6b:63:25:ac:2d:3e:81:63:13:0b:82:a7:1d:44:81:
                    16:3c:c3:2d:c1:4a:f4:a5:ca:a4:95:2a:30:b0:8a:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D0:E4:43:E1:47:B5:EA:08:F8:DF:96:D9:BC:A9:EF:EE:53:EF:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7E4F5E447811F1896482B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:30:42:36:d4:4e:52:ff:24:61:06:33:77:55:26:20:32:58:
         ef:b8:81:8f:cf:b7:81:79:93:a2:be:2e:86:61:2e:93:3e:5a:
         c6:96:cd:ce:04:7b:5f:5b:b1:39:da:db:27:11:a6:b2:2b:bc:
         0b:1a:ca:71:24:b7:67:9d:00:84:ba:81:18:aa:57:25:08:d8:
         59:2d:a9:85:24:db:56:56:b6:b6:61:ea:02:d1:7f:a4:04:a7:
         46:05:e0:f9:dc:56:f2:04:8e:5a:43:c8:78:21:51:b0:de:d1:
         b1:bc:48:ea:3d:77:73:41:9d:af:34:ac:11:04:ba:7b:f6:1a:
         e0:d2:f7:a1:e8:8a:91:80:cb:fa:e1:95:3b:df:eb:51:3b:19:
         95:57:db:36:92:ce:16:1c:26:2b:f3:aa:d9:2d:16:c8:5a:8d:
         3f:c9:05:8b:83:96:64:cb:4a:23:21:6b:48:9f:a5:5e:8f:c8:
         0a:7e:c8:6f:39:a5:a6:21:7e:11:77:f2:f4:c6:94:33:da:71:
         06:d6:04:58:11:13:08:98:c6:c5:1a:59:10:27:aa:ff:5a:af:
         05:81:0c:80:f9:d5:fd:08:7f:c1:35:6d:cf:76:83:03:12:8f:
         05:72:d5:b7:22:56:1c:43:6d:ab:4d:a9:07:a4:f5:5a:40:a2:
         95:b7:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client