Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6AA1B3A554311F19CFE68DACE1D38B0.roa
File:                     F6AA1B3A554311F19CFE68DACE1D38B0.roa (raw, json)
Hash identifier:          ZUjPVef4kVfgoUOKqqbdE2XOLLe3T1144awmGdP76Sw=
Subject key identifier:   59:FA:EB:45:33:1F:F5:BE:28:69:94:16:E8:A2:59:1D:17:91:3C:1C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CDAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6AA1B3A554311F19CFE68DACE1D38B0.roa
Signing time:             Thu 21 May 2026 18:36:22 +0000
ROA not before:           Thu 21 May 2026 18:36:17 +0000
ROA not after:            Fri 26 Jun 2026 18:36:17 +0000
asID:                     63139
IP address blocks:        154.94.69.0/24 maxlen: 24
                          154.94.70.0/24 maxlen: 24
                          154.94.71.0/24 maxlen: 24
                          154.94.72.0/24 maxlen: 24
                          154.94.73.0/24 maxlen: 24
                          154.94.74.0/24 maxlen: 24
                          154.94.75.0/24 maxlen: 24
                          154.94.76.0/24 maxlen: 24
                          154.94.77.0/24 maxlen: 24
                          154.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118189 (0x1cdad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 21 18:36:17 2026 GMT
            Not After : Jun 26 18:36:17 2026 GMT
        Subject: CN=6a0f50a6-482c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:b6:38:79:c1:19:de:b9:7e:90:15:b3:86:
                    91:b0:08:31:6e:7d:1a:1c:26:cb:ec:44:e3:3e:38:
                    7b:41:2a:9e:3a:8a:87:37:c6:06:08:dd:bf:8f:51:
                    d0:ec:45:91:ce:54:7e:35:94:07:b5:c1:54:9b:c1:
                    ff:66:3a:89:bc:7f:96:62:a7:c9:e3:31:a0:3a:35:
                    b3:d0:86:68:66:48:ed:94:2d:b8:f8:e4:91:b2:ae:
                    d6:24:f6:db:d6:0d:a8:5f:d0:25:ef:46:7a:5a:98:
                    a6:ae:c6:1c:71:8b:92:de:cd:92:40:20:58:46:14:
                    c0:71:ee:49:46:f0:07:65:ab:1e:77:7d:fa:4d:ac:
                    ab:40:84:31:60:6a:30:9f:0c:c3:59:30:88:32:cf:
                    3d:44:22:22:b9:b7:a1:af:a1:1f:0f:6d:ab:cd:72:
                    ad:46:bb:16:87:e1:fb:c8:95:e0:e6:72:59:50:a2:
                    84:39:dc:50:24:f7:84:d4:9a:39:7f:15:8e:3c:df:
                    9b:68:c4:6b:59:a4:1c:11:87:f0:1c:26:66:ba:2d:
                    22:2c:a5:8e:d2:b9:b0:13:0f:c2:d8:8f:0b:61:cb:
                    d8:20:7f:d7:67:60:04:4f:c6:85:7c:22:5f:be:82:
                    5a:85:51:91:f1:7a:ec:d1:4c:dc:4b:e9:7d:42:1f:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:EB:45:33:1F:F5:BE:28:69:94:16:E8:A2:59:1D:17:91:3C:1C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6AA1B3A554311F19CFE68DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.69.0-154.94.78.255

    Signature Algorithm: sha256WithRSAEncryption
         d7:85:8e:6c:8d:1b:e9:bf:bf:25:54:db:22:a4:37:7d:ce:47:
         d4:b9:7c:be:f5:c9:67:8d:7d:5d:21:84:c0:ed:83:2d:ee:ab:
         ef:38:d7:89:cd:dc:62:3e:f3:6a:bb:4f:11:08:15:26:ce:f0:
         32:90:60:cc:97:d4:f6:ac:81:02:9c:9a:91:47:85:01:7b:ea:
         58:7b:8c:5f:57:4a:2b:e3:a1:18:54:56:53:60:28:1a:d6:a7:
         2f:b7:bc:1b:65:d7:45:9f:6b:da:3c:d0:49:fb:30:8f:28:0d:
         0c:18:c1:25:ad:2a:65:ef:46:d0:73:5c:87:c8:ad:9d:07:14:
         e8:c8:ab:e8:7d:24:6c:41:bc:44:c4:42:62:17:f9:e0:80:32:
         82:6e:a9:b1:6e:db:04:ba:e7:d0:b7:35:78:1d:cc:ec:66:e3:
         1c:b3:46:85:26:17:a5:75:d9:ff:f5:7b:5e:93:2f:09:18:2f:
         60:9a:2b:af:36:2a:e6:bf:30:22:33:73:a3:fe:a9:c3:0d:a7:
         0a:9c:be:e3:f9:08:40:3f:40:50:fa:50:4b:83:c4:df:be:62:
         da:6f:d1:66:b5:a7:ce:54:3b:dc:2d:f8:7c:5c:c5:ab:0d:6c:
         5f:24:cb:77:3f:b6:5b:7b:34:df:c2:5f:d5:73:e8:aa:52:ac:
         3d:38:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:59 2026 by rpki-client