Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2006C103EF811F1A5F503B2CE1D38B0.roa
File:                     C2006C103EF811F1A5F503B2CE1D38B0.roa (raw, json)
Hash identifier:          in2pIIJ4GDw46OZr+01A2T6xfjl59q9AlztJmoK3Kfc=
Subject key identifier:   BD:C6:9E:73:B5:3F:84:68:62:09:80:5E:16:F3:C4:A1:A3:9E:A3:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01C6D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2006C103EF811F1A5F503B2CE1D38B0.roa
Signing time:             Thu 23 Apr 2026 09:42:36 +0000
ROA not before:           Thu 23 Apr 2026 09:42:31 +0000
ROA not after:            Tue 09 Jun 2026 09:42:31 +0000
asID:                     401783
IP address blocks:        154.82.153.0/24 maxlen: 24
                          154.82.196.0/24 maxlen: 24
                          154.82.197.0/24 maxlen: 24
                          154.82.198.0/24 maxlen: 24
                          154.82.199.0/24 maxlen: 24
                          154.83.10.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
                          154.83.67.0/24 maxlen: 24
                          154.89.132.0/24 maxlen: 24
                          154.90.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116439 (0x1c6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 23 09:42:31 2026 GMT
            Not After : Jun  9 09:42:31 2026 GMT
        Subject: CN=69e9e98b-c387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:a7:fd:09:5c:52:1d:68:eb:15:4e:52:74:
                    3b:12:db:d4:3e:15:46:3e:9a:d2:9a:43:30:44:ff:
                    0a:d9:08:e4:04:9d:3c:9c:10:8a:25:60:78:cc:18:
                    cc:f6:42:be:07:77:c3:05:44:fa:7d:0d:d4:8a:2a:
                    48:d6:b0:b0:9d:28:19:aa:f0:a2:c3:ae:5a:c1:ba:
                    ee:03:b8:1d:9d:04:02:a4:2e:fa:fc:b7:ae:47:0d:
                    cf:bc:a1:d3:3e:60:9a:2e:e6:62:76:0f:76:93:bb:
                    fd:ee:4a:3a:3a:aa:6e:0c:c8:37:85:93:a7:55:27:
                    bd:71:79:14:d1:aa:d8:4a:d8:0d:d0:c9:db:90:4e:
                    34:cd:72:e6:9c:bd:25:fa:14:9c:e8:31:71:67:15:
                    b1:bf:5b:1c:bb:e6:f5:20:fa:5a:d6:48:23:62:d0:
                    65:33:ef:65:d5:67:09:83:83:97:08:df:2a:2b:3e:
                    be:53:96:6d:85:25:5a:62:97:5e:1b:ee:01:80:9a:
                    22:6f:aa:26:c9:d2:ba:99:61:f3:6f:a7:a2:46:48:
                    64:1e:2e:fb:7c:cc:06:83:50:ac:4c:f3:39:42:dd:
                    22:28:5b:cb:17:58:4b:36:8b:b7:7d:1c:83:83:84:
                    dd:b5:f5:44:b7:32:51:02:8c:14:01:81:8b:30:bc:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:9E:73:B5:3F:84:68:62:09:80:5E:16:F3:C4:A1:A3:9E:A3:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2006C103EF811F1A5F503B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.153.0/24
                  154.82.196.0/22
                  154.83.10.0/24
                  154.83.24.0/24
                  154.83.67.0/24
                  154.89.132.0/24
                  154.90.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:43:1d:db:e9:bb:4e:22:2a:c2:55:29:c7:cf:bc:cd:d7:6a:
         56:a2:2d:56:02:61:28:74:11:d3:16:e0:a9:ba:81:4c:e5:3a:
         4b:70:fb:40:bd:ef:36:dd:75:3b:67:99:50:df:bb:58:9a:af:
         7f:b5:1a:7c:37:1b:8f:0a:83:d5:9c:83:92:95:0b:13:36:7c:
         74:c5:40:62:d1:f2:6e:6c:bb:b9:69:56:0e:29:f1:ca:6f:d1:
         f9:94:ab:37:be:26:7e:3d:39:2e:57:8f:80:c1:33:75:eb:90:
         6a:f7:77:5f:37:8a:80:0d:a4:07:b2:c4:2a:c5:bd:74:01:3e:
         5e:01:5c:9f:8d:9d:cc:0f:4c:e8:3c:92:41:c6:7b:58:e2:34:
         df:3c:10:69:4f:c8:e7:e6:2c:4b:ff:cd:96:0e:5d:88:1f:97:
         f7:8f:cb:b2:c6:a1:9a:d6:b2:a2:20:fe:9a:39:d5:44:8a:a6:
         6d:53:e0:b2:d4:32:be:e8:19:0c:f5:0d:37:36:d9:a5:38:c2:
         52:08:d9:b0:7b:75:04:43:c4:17:bf:07:fe:6c:6a:b1:11:2a:
         72:17:d7:66:49:4d:76:fb:28:68:ab:ff:e6:b0:34:ba:d9:7e:
         a0:d6:5c:1a:36:b2:b1:0e:13:71:3d:6a:b9:d8:c3:5e:8f:09:
         2c:2f:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client