Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636595C193711F1A1A9528CDAE4EC9C.roa
File:                     7636595C193711F1A1A9528CDAE4EC9C.roa (raw, json)
Hash identifier:          ++L5BWkbXHO5RpvWeD8k0w/7oqYkJbONloPjLa20A0E=
Subject key identifier:   F1:AF:53:95:50:AC:1C:57:EB:CE:4D:33:1C:72:D8:08:43:90:8E:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01BDF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636595C193711F1A1A9528CDAE4EC9C.roa
Signing time:             Fri 06 Mar 2026 08:35:43 +0000
ROA not before:           Fri 06 Mar 2026 08:35:38 +0000
ROA not after:            Wed 08 Apr 2026 08:35:38 +0000
asID:                     45194
IP address blocks:        154.84.192.0/24 maxlen: 24
                          154.84.194.0/24 maxlen: 24
                          154.84.195.0/24 maxlen: 24
                          154.84.196.0/24 maxlen: 24
                          154.84.197.0/24 maxlen: 24
                          154.84.198.0/24 maxlen: 24
                          154.84.240.0/24 maxlen: 24
                          154.84.241.0/24 maxlen: 24
                          154.84.242.0/24 maxlen: 24
                          154.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Mar 2026 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114161 (0x1bdf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  6 08:35:38 2026 GMT
            Not After : Apr  8 08:35:38 2026 GMT
        Subject: CN=69aa91df-6f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:87:2d:ef:95:89:57:c4:46:98:e8:8d:31:
                    28:93:2f:99:a9:e0:f8:56:4b:a1:92:11:a3:60:27:
                    d0:58:2b:07:1e:50:52:01:4a:89:24:b0:b0:d8:5b:
                    72:c9:97:b3:a6:16:8e:46:76:5b:3f:11:e3:1e:30:
                    78:cd:65:08:72:eb:a6:59:e2:e6:65:35:af:4c:2d:
                    24:df:25:df:ed:69:2a:51:85:f5:78:14:92:4c:22:
                    38:09:f8:fa:0d:94:23:9d:eb:a6:63:01:bf:97:56:
                    ce:22:8f:5a:f7:5c:b3:37:4a:64:ce:5a:b4:9f:5d:
                    98:e8:5f:af:16:b3:7f:a3:a4:2d:43:7d:6b:fa:55:
                    92:59:9b:9e:97:4f:6f:bf:76:01:0a:4a:42:d3:c5:
                    5c:5e:89:f9:2a:64:2c:9c:c6:94:93:98:e2:bf:ed:
                    56:74:e4:47:52:c2:9a:bd:40:b7:69:d6:77:04:ba:
                    84:ac:07:de:f9:12:20:e6:f4:59:68:d8:33:a9:8b:
                    b2:66:90:86:b0:be:27:a2:dd:38:c4:75:f5:db:e8:
                    f6:43:c5:bf:0f:43:29:db:0e:40:0f:63:5b:37:c5:
                    89:f3:da:7b:66:8c:98:a1:6a:95:a7:10:c0:e2:32:
                    57:e2:11:6e:ef:95:30:91:09:1c:f7:5f:24:76:7f:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:53:95:50:AC:1C:57:EB:CE:4D:33:1C:72:D8:08:43:90:8E:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636595C193711F1A1A9528CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.192.0/24
                  154.84.194.0-154.84.198.255
                  154.84.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:64:ba:76:2b:1b:dc:25:f6:17:e8:0f:5f:ba:dc:3d:db:59:
         5f:24:75:1e:e7:be:b7:78:10:57:f6:7d:b0:3b:fd:36:c2:92:
         25:56:98:ef:8c:1a:f7:d0:ff:d4:5c:24:a5:53:d3:59:bf:cd:
         1d:5f:61:9a:ee:e1:6d:43:4a:dd:1d:5c:f0:f5:ea:47:3b:8e:
         db:fe:f0:d4:21:8d:e5:ea:f2:7a:0b:ec:de:61:39:8c:05:9e:
         4f:76:79:16:7d:df:32:ef:b0:0b:67:7f:a6:30:11:8a:93:b3:
         a4:3e:40:75:bf:bc:83:0e:83:93:96:bd:3a:2e:76:c1:28:59:
         57:63:e0:ed:a2:ab:fe:d2:8b:62:12:2f:df:85:c8:00:41:ce:
         49:8a:f9:3a:43:6e:69:99:d6:c8:86:67:46:cc:9f:22:40:c2:
         a6:b5:06:6b:43:f5:e1:c8:65:09:18:16:17:b4:4b:79:37:7c:
         ec:ff:36:28:6b:24:5c:d1:58:4b:ed:9e:28:9d:51:a9:c0:73:
         c7:ba:7b:3c:68:33:b5:0c:7d:9f:d8:73:e8:ff:f0:6f:37:c7:
         c1:a2:80:82:4e:50:03:88:b5:cb:18:80:c6:f3:b3:73:e1:70:
         f4:88:e4:d3:63:f7:38:8d:77:62:ba:02:7e:be:81:25:e2:21:
         f0:fc:bb:03
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAb3xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA2MDgzNTM4WhcNMjYwNDA4MDgzNTM4WjAYMRYw
FAYDVQQDEw02OWFhOTFkZi02ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2lWHLe+ViVfERpjojTEoky+ZqeD4VkuhkhGjYCfQWCsHHlBSAUqJJLCw
2FtyyZezphaORnZbPxHjHjB4zWUIcuumWeLmZTWvTC0k3yXf7WkqUYX1eBSSTCI4
Cfj6DZQjneumYwG/l1bOIo9a91yzN0pkzlq0n12Y6F+vFrN/o6QtQ31r+lWSWZue
l09vv3YBCkpC08VcXon5KmQsnMaUk5jiv+1WdORHUsKavUC3adZ3BLqErAfe+RIg
5vRZaNgzqYuyZpCGsL4not04xHX12+j2Q8W/D0Mp2w5AD2NbN8WJ89p7ZoyYoWqV
pxDA4jJX4hFu75UwkQkc918kdn9oewIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPGv
U5VQrBxX685NMxxy2AhDkI43MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjM2NTk1QzE5MzcxMUYxQTFBOTUyOENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmlTAMAwDBAGaVMIDBACa
VMYDBAKaVPAwDQYJKoZIhvcNAQELBQADggEBAM1kunYrG9wl9hfoD1+63D3bWV8k
dR7nvrd4EFf2fbA7/TbCkiVWmO+MGvfQ/9RcJKVT01m/zR1fYZru4W1DSt0dXPD1
6kc7jtv+8NQhjeXq8noL7N5hOYwFnk92eRZ93zLvsAtnf6YwEYqTs6Q+QHW/vIMO
g5OWvToudsEoWVdj4O2iq/7Si2ISL9+FyABBzkmK+TpDbmmZ1siGZ0bMnyJAwqa1
BmtD9eHIZQkYFhe0S3k3fOz/NihrJFzRWEvtniidUanAc8e6ezxoM7UMfZ/Yc+j/
8G83x8GigIJOUAOItcsYgMbzs3PhcPSI5NNj9ziNd2K6An6+gSXiIfD8uwM=
-----END CERTIFICATE-----
Generated at Thu Mar 12 08:00:14 2026 by rpki-client