Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4B65E264F8D11F1AF65461DCF1D38B0.roa
File:                     F4B65E264F8D11F1AF65461DCF1D38B0.roa (raw, json)
Hash identifier:          WeiC4Lpf5+Uc2xEoMbcSmUaplw5vRlq21nnOX9JXLt8=
Subject key identifier:   A5:5F:D8:CF:49:F1:2D:1A:F3:08:FA:EE:10:07:FE:7A:C9:C4:99:FB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CB9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4B65E264F8D11F1AF65461DCF1D38B0.roa
Signing time:             Thu 14 May 2026 12:10:54 +0000
ROA not before:           Thu 14 May 2026 12:10:49 +0000
ROA not after:            Fri 03 Jul 2026 12:10:49 +0000
asID:                     63023
IP address blocks:        154.94.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Jun 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117662 (0x1cb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 14 12:10:49 2026 GMT
            Not After : Jul  3 12:10:49 2026 GMT
        Subject: CN=6a05bbce-da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:b1:02:8e:f7:da:2b:dc:c6:b2:2d:25:40:
                    56:b3:bc:23:ec:70:f0:76:23:33:8b:b4:7a:af:c9:
                    ba:41:d1:e5:7f:c3:79:9f:38:09:63:a8:32:f4:cd:
                    9a:0b:35:3d:e1:26:85:13:5f:bb:7b:7a:a3:7d:79:
                    5b:69:fb:75:7f:57:9c:0d:9e:9d:85:35:25:24:00:
                    b6:ba:fd:8b:24:0b:14:fa:0f:d5:f2:1e:dd:9d:24:
                    9c:9a:5d:d0:9e:de:35:9e:a1:63:be:dd:68:35:e4:
                    b4:b9:34:6b:34:1f:cd:5e:ef:51:cb:5d:a2:37:7c:
                    84:27:37:af:56:0b:cd:42:9a:d1:42:d0:b5:a5:b2:
                    75:c5:35:c0:5b:0e:81:b5:95:6e:05:7e:b6:ef:a5:
                    e3:54:76:38:66:f6:80:23:19:51:0d:05:be:3a:13:
                    ce:45:53:db:fb:90:a4:44:bb:8b:0a:07:eb:db:7a:
                    9d:94:78:a3:42:de:f6:72:8a:54:92:b2:06:70:8d:
                    12:fb:16:43:60:20:a8:d0:7f:50:3c:05:d0:30:55:
                    4c:8c:d2:19:13:51:a8:a0:42:e2:50:72:ea:e9:e4:
                    48:88:c0:5a:b0:e4:c8:10:2f:f2:bb:07:9b:24:e2:
                    65:92:0a:b5:ee:09:c4:f3:cb:12:5a:2f:14:b1:f0:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:D8:CF:49:F1:2D:1A:F3:08:FA:EE:10:07:FE:7A:C9:C4:99:FB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4B65E264F8D11F1AF65461DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:53:0b:28:4a:2e:6e:a9:89:3a:15:ba:35:5f:56:24:5c:
         85:70:8c:35:71:bc:48:74:f8:7a:e7:8a:9d:21:f8:2d:f4:98:
         25:ec:c4:62:a0:1f:ee:8a:9b:5b:80:8d:d8:86:af:ae:fc:7c:
         0f:9b:fe:5b:49:40:e7:90:1a:34:d5:39:39:4e:31:95:57:e0:
         dd:66:25:2b:5a:32:cc:cc:b5:12:b2:24:29:e5:17:10:7b:ca:
         97:53:fb:c1:db:33:2d:1b:1d:f9:11:f0:cb:a8:fa:4e:6f:5c:
         a5:0c:36:0a:94:96:0b:0f:46:57:d7:58:0e:a6:4e:aa:25:6c:
         50:00:b8:37:55:1d:9b:05:9e:22:f7:13:4e:00:53:63:a3:f2:
         d0:7e:1b:ec:41:1d:d2:c5:0d:02:db:cd:6d:e3:ef:db:0d:f1:
         9a:c2:50:7f:71:84:c9:b0:7e:ea:28:5b:47:f1:c4:6d:20:4e:
         59:93:ed:e8:6b:73:53:91:d5:de:5f:1b:f5:83:a5:68:0d:f6:
         f5:d3:a7:b8:05:e9:d4:84:84:8f:b4:cb:ab:2a:6d:8d:26:c1:
         bf:32:d9:4a:5f:53:8c:15:f6:72:eb:34:ca:ee:5b:f5:94:11:
         44:7f:00:15:ae:92:47:f4:eb:7a:f2:68:31:0f:7d:87:19:73:
         13:c7:5b:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcueMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE0MTIxMDQ5WhcNMjYwNzAzMTIxMDQ5WjAYMRYw
FAYDVQQDEw02YTA1YmJjZS1kYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAst+xAo732ivcxrItJUBWs7wj7HDwdiMzi7R6r8m6QdHlf8N5nzgJY6gy
9M2aCzU94SaFE1+7e3qjfXlbaft1f1ecDZ6dhTUlJAC2uv2LJAsU+g/V8h7dnSSc
ml3Qnt41nqFjvt1oNeS0uTRrNB/NXu9Ry12iN3yEJzevVgvNQprRQtC1pbJ1xTXA
Ww6BtZVuBX6276XjVHY4ZvaAIxlRDQW+OhPORVPb+5CkRLuLCgfr23qdlHijQt72
copUkrIGcI0S+xZDYCCo0H9QPAXQMFVMjNIZE1GooELiUHLq6eRIiMBasOTIEC/y
uwebJOJlkgq17gnE88sSWi8UsfA/HwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKVf
2M9J8S0a8wj67hAH/nrJxJn7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNEI2NUUyNjRGOEQxMUYxQUY2NTQ2MURDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4BMA0GCSqGSIb3DQEB
CwUAA4IBAQAcpVMLKEoubqmJOhW6NV9WJFyFcIw1cbxIdPh654qdIfgt9Jgl7MRi
oB/uiptbgI3Yhq+u/HwPm/5bSUDnkBo01Tk5TjGVV+DdZiUrWjLMzLUSsiQp5RcQ
e8qXU/vB2zMtGx35EfDLqPpOb1ylDDYKlJYLD0ZX11gOpk6qJWxQALg3VR2bBZ4i
9xNOAFNjo/LQfhvsQR3SxQ0C281t4+/bDfGawlB/cYTJsH7qKFtH8cRtIE5Zk+3o
a3NTkdXeXxv1g6VoDfb106e4BenUhISPtMurKm2NJsG/MtlKX1OMFfZy6zTK7lv1
lBFEfwAVrpJH9Ot68mgxD32HGXMTx1un
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:03 2026 by rpki-client