Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0ED6100160C11F1A9B8FF8FDAE4EC9C.roa
File:                     F0ED6100160C11F1A9B8FF8FDAE4EC9C.roa (raw, json)
Hash identifier:          SBM2bzdxPK88lZ1qLDiPSVC71EKvB3u8HdSQE5mvtEM=
Subject key identifier:   70:30:FD:78:E3:4E:DB:79:A8:8D:89:29:AE:76:2C:C9:BD:B7:BB:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01BCB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0ED6100160C11F1A9B8FF8FDAE4EC9C.roa
Signing time:             Mon 02 Mar 2026 07:53:46 +0000
ROA not before:           Mon 02 Mar 2026 07:53:42 +0000
ROA not after:            Fri 02 Mar 2029 07:53:42 +0000
asID:                     17561
IP address blocks:        154.80.72.0/24 maxlen: 24
                          154.80.73.0/24 maxlen: 24
                          154.80.74.0/24 maxlen: 24
                          154.80.75.0/24 maxlen: 24
                          154.80.76.0/24 maxlen: 24
                          154.80.77.0/24 maxlen: 24
                          154.80.78.0/24 maxlen: 24
                          154.80.79.0/24 maxlen: 24
                          154.80.80.0/24 maxlen: 24
                          154.80.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 26 Mar 2026 08:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113848 (0x1bcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  2 07:53:42 2026 GMT
            Not After : Mar  2 07:53:42 2029 GMT
        Subject: CN=69a5420a-3ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:08:31:fe:05:a8:ea:ec:e1:5a:52:7b:a6:
                    c3:78:cf:bb:33:7b:63:f2:39:21:ba:1a:22:bf:c2:
                    d5:1e:5f:23:8d:c2:99:75:35:e1:a6:ba:54:45:e3:
                    77:08:84:3e:e4:5e:a4:48:c7:44:d4:59:c9:87:29:
                    07:b0:fb:e6:b0:13:8d:73:46:cd:56:54:d1:5e:bb:
                    13:b7:88:2c:58:6c:d4:a3:fc:d8:1a:99:c2:8b:b3:
                    7e:eb:2e:6a:13:1f:14:0a:37:20:13:76:bd:cb:7f:
                    df:8b:c3:c5:d3:c9:db:ab:7d:11:70:a4:ec:fa:64:
                    fe:6e:0c:80:c4:64:a8:53:16:23:6d:e0:1e:37:10:
                    73:d9:3b:be:36:6d:06:84:55:f2:bd:b0:78:a3:83:
                    41:1b:79:08:d4:5f:99:d2:cf:0f:4b:69:92:70:18:
                    52:20:24:a9:83:ab:a9:b6:ba:55:ac:f1:60:1f:a8:
                    a1:31:6b:e1:e1:b0:2b:6b:a4:77:b5:9d:35:af:e0:
                    f5:07:9b:06:10:a3:cd:17:8d:ea:34:b1:2f:e7:4e:
                    eb:d3:cf:71:2a:fe:ef:5c:81:94:33:55:12:a5:75:
                    74:32:26:e2:bd:5a:52:ec:30:b2:26:37:b3:46:c8:
                    d2:2a:43:56:16:e3:15:4c:50:0f:f7:05:58:1c:01:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:FD:78:E3:4E:DB:79:A8:8D:89:29:AE:76:2C:C9:BD:B7:BB:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0ED6100160C11F1A9B8FF8FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.72.0-154.80.81.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:a4:08:56:e5:c4:4f:97:7b:80:26:a1:eb:67:5f:7d:98:
         d1:a4:08:ff:26:8b:15:20:11:45:dd:12:a9:35:ef:0e:07:d3:
         a5:92:28:f7:de:0b:e2:e1:ba:92:7b:cd:82:f2:15:43:7a:d2:
         48:e0:a2:90:ff:5c:35:89:17:39:f8:bd:7b:d3:b6:7f:17:17:
         88:59:c0:15:ff:7f:41:0f:7d:40:35:82:5c:2c:ca:75:5c:70:
         f3:a2:c2:df:34:92:e0:97:f9:fc:54:63:ac:7a:12:98:13:ac:
         90:69:ad:ef:c7:d5:e0:16:de:25:2a:2c:cc:12:45:7b:3f:73:
         87:a5:68:90:dc:87:5f:28:af:f2:2b:a0:12:ba:9d:6f:3e:15:
         63:df:bd:83:25:3a:52:85:8d:a9:03:d8:56:f8:b1:76:95:03:
         e3:41:1e:bb:2d:b8:3c:39:6c:0e:05:c1:86:3b:ca:22:fc:6b:
         9b:14:a7:bf:bb:cc:cc:4e:1e:08:79:a0:71:08:e3:ee:03:86:
         ad:e2:9e:a1:53:ef:9e:09:74:a9:31:91:4d:31:79:0e:aa:c6:
         f5:4e:42:12:33:99:2e:52:d4:86:dd:f8:1b:6e:85:9e:ab:88:
         26:36:67:88:4e:82:76:bb:0f:ad:b2:ef:7e:a0:8b:a8:a1:b9:
         ef:36:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client