Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92BECC6493611F1A2F56B0ECF1D38B0.roa
File:                     A92BECC6493611F1A2F56B0ECF1D38B0.roa (raw, json)
Hash identifier:          IKaEWDw/1Nt+iokhzjb/NKSsADv4lAhpKLSTGBWqfSw=
Subject key identifier:   44:7E:AE:42:81:39:FD:A3:1C:BB:84:56:28:81:63:6C:9D:FB:25:CF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C997
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92BECC6493611F1A2F56B0ECF1D38B0.roa
Signing time:             Wed 06 May 2026 10:30:54 +0000
ROA not before:           Wed 06 May 2026 10:30:49 +0000
ROA not after:            Sun 06 May 2029 10:30:49 +0000
asID:                     17561
IP address blocks:        154.85.178.0/24 maxlen: 24
                          154.85.179.0/24 maxlen: 24
                          154.85.180.0/24 maxlen: 24
                          154.85.181.0/24 maxlen: 24
                          154.85.182.0/24 maxlen: 24
                          154.85.183.0/24 maxlen: 24
                          154.85.184.0/24 maxlen: 24
                          154.85.185.0/24 maxlen: 24
                          154.85.186.0/24 maxlen: 24
                          154.85.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117143 (0x1c997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  6 10:30:49 2026 GMT
            Not After : May  6 10:30:49 2029 GMT
        Subject: CN=69fb185e-e82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:87:32:51:6e:2d:7f:34:45:99:42:67:7e:e0:
                    f3:fb:dc:78:a1:57:54:e9:dc:cd:eb:9c:cd:be:bd:
                    45:e8:9e:78:46:a3:91:75:3b:71:97:3c:bc:ae:7a:
                    3c:04:ad:8a:f6:87:77:d9:09:61:2f:55:34:78:ee:
                    cb:bc:74:6b:5a:f3:bf:6d:46:d6:98:c8:54:79:7d:
                    3a:26:87:29:e9:01:79:64:b0:6d:a2:fa:24:aa:7e:
                    e7:0f:3a:c7:c7:ad:e1:3e:45:42:91:9e:bc:5a:63:
                    27:64:af:cc:55:f2:e5:93:c6:94:b9:40:0f:a6:f9:
                    20:31:9b:bd:ea:95:73:d2:9f:ca:50:c1:91:b9:f4:
                    d0:72:e9:3c:05:26:23:01:6a:a1:2c:ad:e5:65:dd:
                    aa:aa:5a:fa:d2:b9:fe:8f:6c:e6:f7:c9:5d:5c:05:
                    2e:4d:7e:72:a6:40:11:60:8b:3c:9e:93:35:00:be:
                    89:3d:09:71:46:00:85:e0:f3:13:63:2e:23:16:2d:
                    cd:6f:e7:3c:53:a7:d4:db:3f:f7:ce:8e:ee:ef:0f:
                    1e:78:62:1d:ef:95:09:e1:ce:ac:d7:6f:22:dd:3e:
                    9e:e3:8b:0c:0b:3d:9b:47:98:63:bb:89:ec:ed:2b:
                    71:81:58:9c:38:48:77:51:f2:48:a0:d4:9c:b5:ae:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7E:AE:42:81:39:FD:A3:1C:BB:84:56:28:81:63:6C:9D:FB:25:CF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92BECC6493611F1A2F56B0ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.178.0-154.85.187.255

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:7e:4e:7a:91:ec:25:f5:20:7e:f4:b6:10:b4:45:c1:a1:
         d3:b1:7d:d7:9d:3d:f6:6b:1a:91:8a:34:1a:cb:3e:29:b4:fd:
         c7:0e:e0:61:46:8a:53:f9:a8:f6:f0:5f:f5:09:ce:de:86:8f:
         39:fc:58:47:ec:48:16:27:15:07:b6:98:30:fa:85:9a:aa:66:
         07:8f:be:47:f1:f1:74:06:7d:f5:c4:5c:3e:be:d3:b2:cf:cd:
         1f:1e:5f:40:f7:53:38:4f:e5:f5:a0:19:70:08:5d:b9:93:ff:
         a0:ca:9d:d9:c8:c3:3f:fd:51:8a:4a:9c:3a:cb:09:57:3f:00:
         54:67:b6:cf:d0:4a:9b:f9:64:f2:1a:37:ee:ad:3b:fe:ff:68:
         5c:b6:4c:03:cc:17:a2:cd:a4:73:f4:22:43:eb:d4:68:61:0f:
         a4:6b:7f:f2:87:5f:53:8f:64:b3:2e:c5:71:66:a0:c4:ba:8f:
         4d:29:96:f0:6c:23:33:e5:20:70:c8:f7:2e:cc:78:a8:bd:84:
         60:6d:c9:38:44:07:cd:d8:0f:1f:65:fb:80:c9:2f:f3:21:90:
         59:38:57:ce:71:4d:35:54:e9:ea:66:8a:bc:94:8f:75:85:2a:
         b1:b5:fb:f2:38:de:b7:a4:14:34:97:3d:52:81:28:89:4a:16:
         2b:8f:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:25 2026 by rpki-client