Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
File:                     FB7CF2F64ADD11F18486DD1ECF1D38B0.roa (raw, json)
Hash identifier:          6fN3u3ah5rOO+tByL1KmT52742oHmYmIOzjSF5T4kO4=
Subject key identifier:   EE:BF:04:B1:F2:F7:66:02:1E:B7:70:2C:00:B5:7F:3A:53:9F:D2:25
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0963
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
Signing time:             Fri 08 May 2026 13:01:10 +0000
ROA not before:           Fri 08 May 2026 13:01:05 +0000
ROA not after:            Sat 30 May 2026 13:01:05 +0000
asID:                     22724
IP address blocks:        102.177.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: May  8 13:01:05 2026 GMT
            Not After : May 30 13:01:05 2026 GMT
        Subject: CN=69fdde95-cb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:6f:87:4b:e3:bd:a6:0e:f3:99:1a:89:33:
                    de:c6:7a:3a:31:48:e8:95:db:d9:10:99:0a:c8:f0:
                    95:b1:7a:33:b2:f4:97:c1:bb:54:6e:c3:bd:d3:51:
                    12:d1:d5:56:bf:f2:01:90:d6:ff:af:f3:bf:86:8a:
                    be:60:ff:e1:b4:21:6b:fb:97:82:9c:50:c2:a4:f0:
                    21:1f:a5:72:c6:35:e4:8d:37:64:91:6f:0f:b4:4f:
                    2f:1e:e1:75:2b:44:64:74:04:4e:b7:a6:25:03:b5:
                    21:74:d0:cb:50:3f:73:c5:f7:27:23:ec:5d:d1:29:
                    64:e0:87:94:b4:b8:82:9d:61:61:46:e1:a2:ef:91:
                    69:25:eb:5b:d3:d9:bd:ef:2c:f7:ef:0e:45:76:ec:
                    4b:17:44:6e:58:c6:89:41:ad:bf:e7:cc:c0:43:77:
                    69:51:c7:eb:12:c6:41:0c:f6:b8:97:c9:cd:9b:87:
                    02:a0:bd:42:69:b2:d6:99:e8:60:ae:3e:ff:63:ee:
                    96:6b:5d:f6:37:c4:59:b3:9d:f1:98:0f:79:ad:fd:
                    83:45:d2:08:ab:6b:2a:4c:1d:3d:9a:91:ca:c6:26:
                    a7:8f:8a:2b:27:2c:34:4b:2b:27:f4:ee:78:da:4d:
                    cc:14:30:40:fd:ba:b0:61:38:3b:2e:e2:77:13:35:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:04:B1:F2:F7:66:02:1E:B7:70:2C:00:B5:7F:3A:53:9F:D2:25
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:6d:70:f1:a7:89:4a:c2:87:6d:e3:86:01:bd:e5:85:fb:
         ca:2e:cf:67:5d:92:68:7a:b5:7a:57:38:88:2f:44:21:2b:10:
         19:62:a9:c1:f3:64:ec:2c:97:3f:5c:c7:ab:a1:0a:d1:4b:95:
         0e:a0:cc:5d:b9:76:2b:06:62:b2:5f:be:81:f3:27:0a:9d:c9:
         ab:2e:67:71:c5:3c:16:8e:21:6b:78:f6:a3:50:e6:34:68:d6:
         41:bb:8a:f9:01:a9:22:5b:83:c1:ae:f9:28:01:9b:9a:3c:cb:
         6e:90:a3:49:62:cb:26:4a:c0:b4:f3:35:b7:ab:83:9b:05:af:
         5b:8d:e5:54:ad:36:2c:1b:b8:54:b2:5f:bd:5f:eb:46:92:10:
         66:52:d7:b3:04:f9:3a:b2:33:1d:1b:b1:cc:3d:63:97:eb:88:
         14:2b:95:ce:15:20:0a:68:6c:cf:c5:9a:06:fb:ac:30:3e:44:
         f5:f8:67:56:45:d3:f0:d5:8c:80:09:a5:f9:fa:92:b3:a6:3b:
         3c:8e:26:c5:c1:87:25:5a:62:0b:1d:16:2d:22:e7:c6:2e:e4:
         a1:a8:4e:56:6d:c7:5a:10:69:c7:f6:c2:ab:8c:79:e7:31:c1:
         ea:12:d3:1c:b7:03:a6:2f:c2:11:73:70:b6:78:6e:c2:4a:19:
         2f:ae:71:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA1MDgxMzAxMDVaFw0yNjA1MzAxMzAxMDVaMBgxFjAU
BgNVBAMTDTY5ZmRkZTk1LWNiMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYwm+HS+O9pg7zmRqJM97GejoxSOiV29kQmQrI8JWxejOy9JfBu1Ruw73T
URLR1Va/8gGQ1v+v87+Gir5g/+G0IWv7l4KcUMKk8CEfpXLGNeSNN2SRbw+0Ty8e
4XUrRGR0BE63piUDtSF00MtQP3PF9ycj7F3RKWTgh5S0uIKdYWFG4aLvkWkl61vT
2b3vLPfvDkV27EsXRG5YxolBrb/nzMBDd2lRx+sSxkEM9riXyc2bhwKgvUJpstaZ
6GCuPv9j7pZrXfY3xFmznfGYD3mt/YNF0giraypMHT2akcrGJqePiisnLDRLKyf0
7njaTcwUMED9urBhODsu4ncTNSwvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7r8E
sfL3ZgIet3AsALV/OlOf0iUwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0ZCN0NGMkY2NEFERDExRjE4NDg2REQxRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsaswDQYJKoZIhvcNAQEL
BQADggEBABnubXDxp4lKwodt44YBveWF+8ouz2ddkmh6tXpXOIgvRCErEBliqcHz
ZOwslz9cx6uhCtFLlQ6gzF25disGYrJfvoHzJwqdyasuZ3HFPBaOIWt49qNQ5jRo
1kG7ivkBqSJbg8Gu+SgBm5o8y26Qo0liyyZKwLTzNberg5sFr1uN5VStNiwbuFSy
X71f60aSEGZS17ME+TqyMx0bscw9Y5friBQrlc4VIApobM/Fmgb7rDA+RPX4Z1ZF
0/DVjIAJpfn6krOmOzyOJsXBhyVaYgsdFi0i58Yu5KGoTlZtx1oQacf2wquMeecx
weoS0xy3A6YvwhFzcLZ4bsJKGS+ucf8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:29 2026 by rpki-client