Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94030D045B4011F1876191D3CE1D38B0.roa
File:                     94030D045B4011F1876191D3CE1D38B0.roa (raw, json)
Hash identifier:          T/QFmO/XNNMkK8/75pYpTUVU5U9ABWBzcM5CDEOLZfA=
Subject key identifier:   F9:D0:10:7D:58:3A:8D:09:82:17:F8:63:8A:9D:D5:D1:BC:D6:38:8F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94030D045B4011F1876191D3CE1D38B0.roa
Signing time:             Fri 29 May 2026 09:27:15 +0000
ROA not before:           Fri 29 May 2026 09:27:10 +0000
ROA not after:            Thu 02 Jul 2026 09:27:10 +0000
asID:                     44559
IP address blocks:        154.81.40.0/24 maxlen: 24
                          154.81.53.0/24 maxlen: 24
                          154.81.54.0/24 maxlen: 24
                          154.81.55.0/24 maxlen: 24
                          154.81.192.0/24 maxlen: 24
                          154.81.195.0/24 maxlen: 24
                          154.81.196.0/24 maxlen: 24
                          154.81.197.0/24 maxlen: 24
                          154.81.198.0/24 maxlen: 24
                          154.81.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Jun 2026 00:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118882 (0x1d062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 09:27:10 2026 GMT
            Not After : Jul  2 09:27:10 2026 GMT
        Subject: CN=6a195bf3-e1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:dd:74:a2:37:db:99:4c:71:45:73:6f:3a:
                    25:9f:e7:12:9c:c6:f3:8e:ba:ce:ff:fd:a6:95:6d:
                    97:5d:88:47:dc:f2:02:75:19:3f:80:a0:1d:3c:14:
                    c9:db:6e:16:fb:30:c8:12:25:43:9c:ae:cc:3a:67:
                    e4:5f:20:4d:a1:1d:dc:03:0a:fc:cf:e6:6b:ac:04:
                    53:34:f2:4a:bd:79:08:e7:8a:39:d5:c4:04:47:a8:
                    63:a9:f3:08:02:c5:5b:18:51:1a:55:16:e4:7a:d4:
                    32:a4:e7:63:0c:1c:79:5e:d3:99:8e:cb:0b:ad:a7:
                    b9:e0:9b:db:3f:9b:d6:27:3c:1e:97:04:1f:b0:42:
                    1e:e6:7c:6b:a3:ec:ef:29:9c:19:54:b5:47:d1:77:
                    5b:08:ef:2c:e3:7f:6a:2c:33:c4:b5:87:c3:53:22:
                    e3:44:00:e6:0a:52:e0:5f:64:33:34:52:f3:b8:e4:
                    ac:4f:3f:01:dc:df:23:ab:c3:59:bb:96:8a:50:ab:
                    67:d8:77:f4:e0:1a:1a:62:2c:d7:8f:d7:c0:3f:8f:
                    b0:9a:3a:2d:d8:ba:f9:54:c3:7b:2d:3f:6b:de:99:
                    db:7a:46:16:2a:7f:3a:3c:75:50:2f:69:67:ca:a1:
                    1a:84:cb:18:a4:16:ba:d3:7e:d2:14:47:66:b5:c4:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D0:10:7D:58:3A:8D:09:82:17:F8:63:8A:9D:D5:D1:BC:D6:38:8F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94030D045B4011F1876191D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.40.0/24
                  154.81.53.0-154.81.55.255
                  154.81.192.0/24
                  154.81.195.0-154.81.199.255

    Signature Algorithm: sha256WithRSAEncryption
         89:62:cc:d4:82:1a:5a:b8:73:2f:38:96:a8:86:72:0b:eb:f8:
         0f:26:a3:9f:06:f6:ea:f7:4a:86:e5:aa:d3:52:7b:b6:27:5a:
         2d:b7:81:e7:d4:ca:ab:36:cc:64:8f:95:64:a6:4e:da:07:29:
         7f:e0:c5:c3:32:ae:41:d0:f4:20:b4:7c:d9:cf:57:8d:2e:6b:
         1a:4f:33:34:b8:ee:ea:d1:0a:76:fa:ca:ab:ea:29:d6:f1:e5:
         71:5e:b8:84:0b:3b:26:1f:c5:88:1c:4b:2a:6c:be:ee:50:98:
         ca:1f:6c:3e:a3:22:92:af:6f:d8:c3:45:84:67:7e:fd:04:bb:
         c2:0b:7e:cf:9e:aa:c5:28:9a:91:4d:5c:7b:cc:5d:f0:4a:f1:
         ce:6f:d6:e4:c1:7f:b6:67:10:ee:ba:f9:34:f0:15:c4:ca:19:
         bd:bb:03:c6:b0:99:2a:9b:f0:60:10:aa:1f:15:67:17:3a:ea:
         1f:98:9c:01:ea:10:08:84:12:c9:ce:42:09:52:63:2b:92:b2:
         35:6b:c8:ee:24:9c:40:c1:63:78:be:a7:d4:89:8b:7f:3a:f4:
         e7:63:b5:4e:0f:23:9c:e4:e9:87:f0:33:14:61:d9:f2:ba:61:
         e9:7a:85:dd:11:52:b1:ef:97:30:cf:aa:1f:87:f6:9a:8f:12:
         a3:97:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:22 2026 by rpki-client