Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD4CAA545311F190F056A1CE1D38B0.roa
File:                     8DBD4CAA545311F190F056A1CE1D38B0.roa (raw, json)
Hash identifier:          Q92DbmFCQWwIuOvqnH1MT+eO/YXFs7EzkZZKFZEbvQU=
Subject key identifier:   6B:17:F7:00:45:81:EC:A9:BF:A3:79:1B:E4:5E:BA:C5:47:3E:3C:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CCE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD4CAA545311F190F056A1CE1D38B0.roa
Signing time:             Wed 20 May 2026 13:55:26 +0000
ROA not before:           Wed 20 May 2026 13:55:22 +0000
ROA not after:            Fri 26 Jun 2026 13:55:22 +0000
asID:                     63139
IP address blocks:        154.93.67.0/24 maxlen: 24
                          154.93.68.0/24 maxlen: 24
                          154.93.69.0/24 maxlen: 24
                          154.93.70.0/24 maxlen: 24
                          154.93.71.0/24 maxlen: 24
                          154.93.72.0/24 maxlen: 24
                          154.93.73.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117986 (0x1cce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 20 13:55:22 2026 GMT
            Not After : Jun 26 13:55:22 2026 GMT
        Subject: CN=6a0dbd4e-7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:7b:8b:f3:2b:55:ec:82:71:a6:94:88:29:
                    ad:20:e2:19:0a:ae:27:a6:4d:52:bf:94:cc:a9:76:
                    7f:da:99:6c:8b:a3:86:1d:74:26:b3:39:a1:63:a1:
                    e6:50:0f:f5:93:db:e1:11:a8:60:a2:31:e0:53:05:
                    18:74:72:df:13:30:3d:ab:16:51:65:b8:17:bd:ea:
                    19:db:16:b3:d7:c7:d4:fb:ee:d5:40:a2:b3:67:78:
                    3d:c8:84:91:a2:6b:29:24:a5:85:e3:56:15:dd:2c:
                    a6:05:ba:02:43:ff:58:b4:2c:b8:a4:4a:c7:76:48:
                    f5:05:db:f0:4a:20:c0:bb:7f:e4:4b:91:76:67:79:
                    c2:fe:eb:18:b8:b5:9e:59:bb:50:c6:b1:a2:f5:7c:
                    f6:06:18:58:43:54:48:d3:f0:3a:83:91:e6:c8:86:
                    14:5b:51:4c:5e:2d:3b:0c:4b:dc:da:9f:cf:71:b7:
                    b3:77:88:4d:8c:f1:f9:bb:42:ba:d9:bb:69:2a:96:
                    51:93:d5:ee:35:5a:1c:1c:33:52:9d:bf:e1:b4:64:
                    04:d8:6c:4b:57:1d:fd:e2:c0:3d:5b:58:18:c9:a7:
                    39:2b:12:0c:51:f1:8c:03:7c:61:a4:9c:e1:56:a8:
                    ca:71:0d:91:b7:5e:a7:27:eb:1c:98:9d:9d:2e:fd:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:F7:00:45:81:EC:A9:BF:A3:79:1B:E4:5E:BA:C5:47:3E:3C:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD4CAA545311F190F056A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.67.0-154.93.76.255

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:f5:6c:63:53:54:e6:0a:c6:7d:67:a1:48:8b:f1:63:a2:
         ef:83:d1:7b:bd:4c:be:83:5e:54:6b:73:10:00:47:ce:e5:4a:
         c2:c9:21:94:84:b4:a8:0c:2c:59:9d:e4:37:09:e9:7c:51:fa:
         12:5e:f5:c4:d4:47:3e:b3:e6:fe:0b:2a:8d:b5:55:7a:35:f3:
         b8:7f:78:4d:68:18:e0:8a:64:3e:67:1b:34:03:59:24:e0:50:
         b4:73:91:af:85:b9:bc:9f:ae:65:19:f5:c9:da:c2:1b:bc:ae:
         de:bd:10:c2:dc:71:40:ee:da:7a:37:b7:3f:d8:c3:b6:39:79:
         1f:06:32:52:27:c2:dd:eb:ca:fa:42:25:dd:46:ce:8f:2b:38:
         88:19:8f:2e:b9:d3:93:d9:0a:61:cd:28:15:b9:e6:9f:82:ea:
         0d:5a:27:c8:fc:b2:6a:2e:c6:51:fb:0a:1e:65:c5:b8:e4:fc:
         c0:62:de:82:a3:77:0d:54:34:e4:44:de:2d:a4:3a:31:f0:f8:
         1a:67:2f:10:36:92:a2:54:75:f4:4e:b3:f7:48:80:5a:87:8d:
         6e:8f:ce:99:18:5c:a4:e2:32:58:d4:e4:1e:63:22:56:02:6d:
         98:64:ce:8c:c1:99:ae:a7:0d:b6:fb:fd:5e:1f:b6:1b:ad:26:
         f8:0b:94:21
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcziMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIwMTM1NTIyWhcNMjYwNjI2MTM1NTIyWjAYMRYw
FAYDVQQDEw02YTBkYmQ0ZS03YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw+F7i/MrVeyCcaaUiCmtIOIZCq4npk1Sv5TMqXZ/2plsi6OGHXQmszmh
Y6HmUA/1k9vhEahgojHgUwUYdHLfEzA9qxZRZbgXveoZ2xaz18fU++7VQKKzZ3g9
yISRomspJKWF41YV3SymBboCQ/9YtCy4pErHdkj1BdvwSiDAu3/kS5F2Z3nC/usY
uLWeWbtQxrGi9Xz2BhhYQ1RI0/A6g5HmyIYUW1FMXi07DEvc2p/Pcbezd4hNjPH5
u0K62btpKpZRk9XuNVocHDNSnb/htGQE2GxLVx394sA9W1gYyac5KxIMUfGMA3xh
pJzhVqjKcQ2Rt16nJ+scmJ2dLv3bDwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGsX
9wBFgeypv6N5G+ReusVHPjwgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84REJENENBQTU0NTMxMUYxOTBGMDU2QTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXUMDBACaXUwwDQYJ
KoZIhvcNAQELBQADggEBAHUt9WxjU1TmCsZ9Z6FIi/Fjou+D0Xu9TL6DXlRrcxAA
R87lSsLJIZSEtKgMLFmd5DcJ6XxR+hJe9cTURz6z5v4LKo21VXo187h/eE1oGOCK
ZD5nGzQDWSTgULRzka+FubyfrmUZ9cnawhu8rt69EMLccUDu2no3tz/Yw7Y5eR8G
MlInwt3ryvpCJd1Gzo8rOIgZjy6505PZCmHNKBW55p+C6g1aJ8j8smouxlH7Ch5l
xbjk/MBi3oKjdw1UNORE3i2kOjHw+BpnLxA2kqJUdfROs/dIgFqHjW6PzpkYXKTi
MljU5B5jIlYCbZhkzozBma6nDbb7/V4fthutJvgLlCE=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:56 2026 by rpki-client