Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DDBEE2449411F1B9D797DECE1D38B0.roa
File:                     82DDBEE2449411F1B9D797DECE1D38B0.roa (raw, json)
Hash identifier:          LPHUCirNq0pySTlXV2iYydj6fBjj0RDg1Pxuj7671Ws=
Subject key identifier:   1C:3D:3C:0B:F2:64:BC:CD:E3:24:34:AD:2B:80:A2:A3:C6:64:1D:83
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C83D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DDBEE2449411F1B9D797DECE1D38B0.roa
Signing time:             Thu 30 Apr 2026 13:00:07 +0000
ROA not before:           Thu 30 Apr 2026 13:00:02 +0000
ROA not after:            Fri 05 Jun 2026 13:00:02 +0000
asID:                     202656
IP address blocks:        154.222.1.0/24 maxlen: 24
                          154.222.12.0/24 maxlen: 24
                          154.222.13.0/24 maxlen: 24
                          154.222.14.0/24 maxlen: 24
                          154.222.15.0/24 maxlen: 24
                          154.222.43.0/24 maxlen: 24
                          154.222.44.0/24 maxlen: 24
                          154.222.45.0/24 maxlen: 24
                          154.222.46.0/24 maxlen: 24
                          154.222.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116797 (0x1c83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 30 13:00:02 2026 GMT
            Not After : Jun  5 13:00:02 2026 GMT
        Subject: CN=69f35257-919c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:72:dd:dc:56:30:73:a0:00:08:c4:2b:85:
                    d9:0f:1d:38:e8:47:65:b6:5e:26:d0:60:36:b1:b5:
                    03:48:a4:e8:73:98:cf:ea:9d:75:9d:3b:1d:41:f6:
                    e3:d7:33:ab:84:e0:36:69:70:be:35:06:84:db:a8:
                    8d:b7:51:94:e6:af:32:f0:21:1f:60:5a:ec:ff:ad:
                    cb:2a:7d:4e:82:6b:31:e2:fe:8e:be:85:72:59:c2:
                    8b:17:94:ba:4a:cc:1b:3d:23:74:03:27:d0:c1:c5:
                    b3:95:08:64:c3:e8:77:e2:73:4a:15:26:45:8f:d9:
                    5f:53:b1:1a:ae:10:f3:25:93:64:24:5d:ab:f2:c4:
                    ed:f0:da:a6:0e:b8:53:66:7a:de:d6:60:62:57:c5:
                    2a:13:fe:72:e4:ae:42:3e:a8:49:7a:0c:af:d9:72:
                    36:93:99:22:73:13:7a:a5:cb:a0:57:b7:35:0f:36:
                    52:71:38:f0:ae:1f:71:f8:86:92:34:28:b0:0a:39:
                    af:7f:ff:9b:50:65:ee:7f:bb:5c:77:4e:63:7c:7a:
                    ed:59:97:17:37:86:5c:75:d2:3e:b1:1f:db:39:84:
                    50:f9:a1:24:05:24:db:51:c9:63:f0:af:5f:5a:40:
                    2d:fe:66:43:5f:c1:d8:e7:4f:43:52:e7:81:f4:cd:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3D:3C:0B:F2:64:BC:CD:E3:24:34:AD:2B:80:A2:A3:C6:64:1D:83
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DDBEE2449411F1B9D797DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.1.0/24
                  154.222.12.0/22
                  154.222.43.0-154.222.47.255

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:e8:5e:62:41:d2:19:91:fe:3f:bf:72:6d:b6:28:84:9c:
         31:d5:1b:24:08:ac:9d:56:55:24:50:16:b2:32:d4:00:ec:9a:
         f3:b7:8a:ef:b5:5d:ad:7b:f3:8d:42:bc:de:a8:37:ff:be:de:
         45:f3:9a:14:36:84:ae:ad:3f:da:d1:78:6b:aa:11:58:14:31:
         e1:65:35:f8:38:1c:f0:5e:8b:a9:88:bb:82:08:39:bd:73:65:
         39:26:fc:1e:72:5a:80:ce:17:8d:f5:c9:5a:f1:24:a3:fa:c8:
         d4:f9:1b:cf:27:32:5a:49:9a:cc:8b:d7:c2:21:e0:e2:a5:e0:
         da:b0:52:24:11:3c:29:2e:2b:cf:db:ce:80:29:63:07:40:d7:
         40:01:dc:0d:ed:01:eb:26:1d:e0:e6:cd:99:63:59:ab:62:c8:
         56:ca:7e:19:77:ba:f2:2c:31:84:9b:c5:43:e3:90:96:6f:12:
         54:be:59:00:c4:22:d1:9e:08:ad:cf:c9:fa:34:85:6e:35:7f:
         f6:af:a2:71:6f:44:90:51:84:b3:88:8d:91:bb:65:5f:8b:a2:
         fd:ad:8d:c5:93:ba:bc:98:3c:f2:63:3b:e8:eb:ee:52:0d:b8:
         73:fc:ff:55:1e:b1:0d:db:ed:d5:7e:2c:b8:e9:56:1c:74:f2:
         36:04:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client