Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD094C06554511F1922641E6CE1D38B0.roa
File:                     AD094C06554511F1922641E6CE1D38B0.roa (raw, json)
Hash identifier:          qsohKMFdZ1ZcDc8PKnekQ2zEWG6dfAA0FPph9cx1+x8=
Subject key identifier:   A3:24:ED:67:01:4D:87:68:2D:E2:88:0E:87:4A:E8:62:41:18:80:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CDB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD094C06554511F1922641E6CE1D38B0.roa
Signing time:             Thu 21 May 2026 18:48:37 +0000
ROA not before:           Thu 21 May 2026 18:48:33 +0000
ROA not after:            Fri 26 Jun 2026 18:48:33 +0000
asID:                     63139
IP address blocks:        154.93.67.0/24 maxlen: 24
                          154.93.68.0/24 maxlen: 24
                          154.93.69.0/24 maxlen: 24
                          154.93.70.0/24 maxlen: 24
                          154.93.71.0/24 maxlen: 24
                          154.93.72.0/24 maxlen: 24
                          154.93.73.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118193 (0x1cdb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 21 18:48:33 2026 GMT
            Not After : Jun 26 18:48:33 2026 GMT
        Subject: CN=6a0f5385-8e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:9b:c2:74:bc:5d:13:ba:73:ec:55:1a:08:
                    9e:e9:52:20:d1:86:3e:c9:09:79:d4:5f:ad:59:c7:
                    c8:eb:22:85:9e:8f:ff:83:2f:36:b2:1a:84:fc:c1:
                    5d:8b:1d:4f:af:21:cd:13:e1:b8:d4:68:96:ec:2c:
                    07:ab:d3:a7:4f:1b:17:e8:2d:72:44:64:89:c7:c8:
                    1f:69:bf:c1:48:ac:63:b8:09:6e:28:b1:79:c6:93:
                    ac:62:26:f8:0e:ec:1f:1a:f9:f2:01:70:a1:c5:04:
                    e1:27:87:8f:a5:de:e2:ca:40:72:9b:a7:d5:31:8a:
                    ee:18:31:6d:c1:99:e3:ed:fd:0d:ab:42:b8:ac:ef:
                    45:c7:07:2d:f9:fb:13:ed:52:ce:c4:a3:39:a8:d4:
                    42:68:77:ed:66:30:35:56:c2:be:55:6c:37:39:32:
                    55:0f:50:66:d6:28:e0:46:90:85:91:7b:41:91:df:
                    68:98:e2:c3:9d:5c:b1:4b:d5:2d:a4:ba:68:76:ef:
                    f7:39:14:d3:ed:a4:6f:7f:41:f5:5c:44:43:6e:1a:
                    70:b8:33:be:ea:d9:85:7b:12:2f:a2:cc:f2:64:20:
                    be:50:79:76:7d:da:4f:1f:66:8d:56:bf:f2:49:3d:
                    e1:13:06:ff:89:de:d7:3f:3e:16:0a:68:fc:eb:c2:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:ED:67:01:4D:87:68:2D:E2:88:0E:87:4A:E8:62:41:18:80:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD094C06554511F1922641E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.67.0-154.93.76.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:c4:57:c7:8f:1f:09:69:12:f1:0c:cc:76:d5:77:ad:ed:
         98:49:43:05:6a:2d:8e:66:ef:7a:9a:11:48:71:4c:ee:2b:b9:
         f8:9d:dc:8e:50:d8:11:50:89:e3:a9:48:c4:57:14:89:af:8a:
         0c:ad:58:66:17:60:e4:2e:53:56:73:8e:8f:e2:9d:ed:58:0f:
         2a:f8:f1:ca:06:54:f6:e2:5d:6a:31:3f:28:83:75:2a:37:b3:
         55:5a:f2:dd:a9:63:90:31:12:43:c8:75:64:99:a2:53:48:58:
         fa:39:51:dd:50:5b:ee:b3:56:a9:56:e9:84:40:b4:4b:e8:ea:
         c2:cf:6d:a2:19:47:85:03:49:e3:7b:45:17:68:0e:19:c4:62:
         ed:45:07:67:50:e1:dd:10:fa:57:54:b2:dc:cb:cd:1c:d4:d6:
         be:bf:4e:95:0d:db:16:cb:c3:b4:8a:a1:a9:7e:12:b2:17:26:
         7a:cf:52:35:61:6e:d9:e0:96:4c:fb:15:df:12:e6:03:4d:b9:
         96:74:20:a0:a1:d8:56:69:f3:94:8f:d9:2a:a2:dd:10:03:bd:
         10:ad:98:fe:ac:3e:f3:13:8d:0a:d1:e7:c0:8d:10:e6:61:b1:
         b6:cc:3f:2c:ba:92:03:65:2b:b5:82:a2:f1:43:ca:de:2b:f8:
         e4:5b:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:44 2026 by rpki-client