Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C8BD424A7A11F1943F51B5CE1D38B0.roa
File:                     93C8BD424A7A11F1943F51B5CE1D38B0.roa (raw, json)
Hash identifier:          q8LjWlTEfYRSTmuwr/Ok7t/YCw0V1+ot9lKnV2Rd+aI=
Subject key identifier:   C5:91:92:0C:E0:1E:62:4B:F9:6B:91:63:B7:8C:07:D8:9C:79:37:CF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CA12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C8BD424A7A11F1943F51B5CE1D38B0.roa
Signing time:             Fri 08 May 2026 01:09:35 +0000
ROA not before:           Fri 08 May 2026 01:09:30 +0000
ROA not after:            Wed 07 Jul 2027 01:09:30 +0000
asID:                     328608
IP address blocks:        154.200.166.0/24 maxlen: 24
                          154.200.167.0/24 maxlen: 24
                          154.200.168.0/24 maxlen: 24
                          154.200.169.0/24 maxlen: 24
                          154.200.170.0/24 maxlen: 24
                          154.200.171.0/24 maxlen: 24
                          154.200.172.0/24 maxlen: 24
                          154.200.173.0/24 maxlen: 24
                          154.200.174.0/24 maxlen: 24
                          154.200.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117266 (0x1ca12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  8 01:09:30 2026 GMT
            Not After : Jul  7 01:09:30 2027 GMT
        Subject: CN=69fd37cf-fdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:30:1f:d7:58:9a:e2:8d:f6:59:b4:9f:91:
                    41:f6:7a:7d:71:af:7d:b5:c6:3c:12:38:83:6d:11:
                    e6:ee:76:bc:8c:6f:0c:a0:d4:8b:0a:1a:1e:85:ec:
                    83:3b:70:5d:18:ef:cc:8b:92:e2:5b:1f:eb:05:b3:
                    d5:08:d1:99:2d:14:da:a2:b6:4e:2b:8c:ea:f0:2a:
                    bc:39:0d:36:f7:b5:6f:bd:de:82:78:26:26:6a:b6:
                    fa:d2:65:30:a8:60:75:ba:f8:32:35:d9:9e:be:ea:
                    8e:01:5f:2d:f0:a3:83:92:b9:db:e8:fc:c7:4e:e2:
                    e3:9e:e1:9f:ff:3c:67:ef:f0:de:7f:d0:bf:b6:78:
                    a8:b4:17:f5:58:96:1c:37:11:56:31:ec:b9:04:90:
                    ce:64:a4:e8:95:0b:57:96:11:ce:26:2f:10:ce:d6:
                    3c:6f:8e:bb:99:f2:ce:59:23:a3:80:9b:dc:cd:da:
                    0d:3a:b3:3e:b8:f5:49:9a:cf:4c:4d:d1:eb:5c:76:
                    e0:8d:d2:14:98:bc:4f:f2:5d:c2:47:54:49:08:68:
                    ad:8f:fc:a1:db:39:8e:36:b3:59:b8:a3:94:70:7e:
                    0b:19:a9:3a:43:8a:04:23:89:e7:e3:2c:0b:5e:a5:
                    91:e4:9f:f9:7a:01:fa:e9:4d:17:a5:24:4e:f8:db:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:92:0C:E0:1E:62:4B:F9:6B:91:63:B7:8C:07:D8:9C:79:37:CF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C8BD424A7A11F1943F51B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.166.0-154.200.175.255

    Signature Algorithm: sha256WithRSAEncryption
         42:96:39:43:60:80:6c:18:e7:ca:74:47:2a:77:c8:b6:04:cb:
         a9:67:6f:b6:aa:5e:72:fa:61:70:81:f3:6e:05:6e:c1:e7:06:
         d5:dd:3d:c2:bb:1f:4c:ec:f6:72:8e:95:58:44:63:eb:8d:4b:
         98:fe:b4:91:0d:f1:6c:bf:ed:3c:de:94:57:ed:58:62:36:b9:
         4a:1f:b8:a2:41:cf:d9:13:58:7a:9f:2f:15:ee:d8:3e:04:b8:
         c2:d6:35:d6:42:04:22:71:12:d6:47:21:a1:a7:df:2d:ac:7f:
         5f:f2:ae:9c:b5:bb:1f:a8:92:99:f9:ae:3a:11:b7:08:0d:fa:
         ca:66:e1:6d:b5:b3:86:e1:f8:ef:ac:a5:0c:a4:55:28:dd:a4:
         38:60:10:37:74:2d:f5:2d:2d:ab:c7:36:40:06:d1:3c:38:3d:
         9d:4d:52:0f:72:e7:f5:e9:a9:ab:c4:d9:7b:81:9d:ca:a3:ee:
         e1:21:f0:d4:25:f2:6f:75:75:a8:34:c9:9a:33:5e:f7:db:19:
         84:12:f2:e6:37:ee:ec:53:29:23:4c:ea:f4:f8:ea:70:f0:4d:
         70:ee:fc:94:5b:f8:ba:c5:52:33:15:15:62:77:a9:9d:fd:59:
         c2:6e:c8:57:e6:aa:95:8c:3b:8e:a2:da:14:14:db:87:67:64:
         64:54:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:41 2026 by rpki-client