Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB84AD324ADE11F19846B9A4CE1D38B0.roa
File:                     BB84AD324ADE11F19846B9A4CE1D38B0.roa (raw, json)
Hash identifier:          nLNjdJcxLGv0YmNi7l/YXTqbPJFSzTPFjcZfNv56VyI=
Subject key identifier:   52:96:82:BF:02:68:F5:11:88:DB:F8:87:30:E4:6B:3D:92:69:1C:F6
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       096B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB84AD324ADE11F19846B9A4CE1D38B0.roa
Signing time:             Fri 08 May 2026 13:06:32 +0000
ROA not before:           Fri 08 May 2026 13:06:27 +0000
ROA not after:            Sat 30 May 2026 13:06:27 +0000
asID:                     22724
IP address blocks:        102.177.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: May  8 13:06:27 2026 GMT
            Not After : May 30 13:06:27 2026 GMT
        Subject: CN=69fddfd8-f195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:67:fb:07:28:68:36:25:d2:c2:17:c4:6b:
                    64:1a:94:e4:5c:a7:51:f6:ed:36:c6:41:fa:66:5e:
                    c5:89:65:f9:25:b4:54:55:d9:0a:f8:a7:66:9e:ed:
                    f4:d1:80:20:2f:4c:a0:ba:df:49:6e:6a:40:5f:2e:
                    58:88:85:dd:92:ef:ef:70:76:58:91:89:29:5d:db:
                    68:c5:99:d5:f1:3f:0e:d6:13:46:a5:dd:88:a5:bf:
                    25:b8:a3:dc:3e:00:4c:a4:38:93:d8:25:6f:9b:51:
                    28:e3:07:33:b7:8c:cc:bc:2b:0b:c8:5d:cf:48:02:
                    6c:f8:0f:4b:5d:f2:34:c7:97:c6:e4:05:36:99:0b:
                    c1:e9:f2:6b:7c:ef:5d:78:2f:ad:ee:8e:6d:c4:7a:
                    40:fe:29:ac:59:c8:2d:be:4b:72:ee:c4:6a:ee:68:
                    0a:62:df:21:ac:c0:dc:6d:4b:c1:02:d4:aa:79:df:
                    b7:ea:2b:c7:6e:38:cd:02:b7:ac:78:f7:06:dd:88:
                    c2:75:c8:b1:9c:a2:bf:4e:05:5b:30:e9:e3:3a:79:
                    f4:55:a7:18:db:5c:15:13:ec:4a:d9:c9:10:91:87:
                    e8:32:85:c2:c7:61:17:20:e7:87:d1:e6:3b:2f:7a:
                    3b:3e:5e:1a:e9:96:9b:80:cb:ce:e8:7f:cf:77:83:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:82:BF:02:68:F5:11:88:DB:F8:87:30:E4:6B:3D:92:69:1C:F6
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB84AD324ADE11F19846B9A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:24:8b:c5:0f:8b:75:62:6b:3d:d4:b1:c1:9e:7b:53:83:66:
         6f:c5:19:c0:7d:b3:ab:90:9a:35:4f:15:bc:9e:47:2b:f8:0c:
         e1:15:1e:fb:1d:44:ae:00:50:a2:d6:6e:cd:74:1f:ed:26:2c:
         73:92:3a:ee:d1:73:dc:82:94:5d:b8:41:8b:dc:33:61:50:7b:
         15:3d:e9:4f:5b:0c:8b:e2:b5:e3:6a:dc:9e:a3:5f:e6:56:c2:
         38:b2:99:a1:bc:75:a2:12:cd:19:41:91:1a:91:0d:a3:8c:fd:
         ac:5d:b3:24:21:b2:0d:a9:14:ec:16:ec:04:fb:80:87:8d:c1:
         93:8b:98:fb:0b:0f:db:61:6b:ef:9c:8c:45:f5:4d:a7:37:2f:
         28:45:bb:09:3f:9e:95:c6:1d:e4:a1:82:11:d2:a2:d5:f5:60:
         82:d2:2b:b3:e2:31:21:b5:2f:ca:d2:71:ff:da:25:a2:1b:ed:
         9a:7d:7a:1a:14:f1:7f:b4:34:e6:6a:8a:3c:30:01:f3:6d:bf:
         a9:1a:aa:ad:8e:ae:ce:af:f9:ee:62:85:f2:37:94:fa:79:38:
         a2:f5:eb:99:f4:73:79:90:00:a9:ce:07:01:43:5e:b5:17:4c:
         b7:0f:25:93:04:44:39:bf:72:25:36:61:3d:d4:6b:92:23:d9:
         ec:a5:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:21 2026 by rpki-client