Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FDC0843011F18671C2FCCE1D38B0.roa
File:                     E2D4FDC0843011F18671C2FCCE1D38B0.roa (raw, json)
Hash identifier:          hoGmG3v5ZT5aislX3add+g72d8jG0WIed/4WtNv2bG8=
Subject key identifier:   D2:CB:7F:1B:83:20:13:1A:02:50:A0:34:04:E3:94:F0:2D:5B:B8:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DA1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FDC0843011F18671C2FCCE1D38B0.roa
Signing time:             Mon 20 Jul 2026 11:48:13 +0000
ROA not before:           Mon 20 Jul 2026 11:48:09 +0000
ROA not after:            Thu 27 Aug 2026 11:48:09 +0000
asID:                     63139
IP address blocks:        154.93.67.0/24 maxlen: 24
                          154.93.68.0/24 maxlen: 24
                          154.93.69.0/24 maxlen: 24
                          154.93.70.0/24 maxlen: 24
                          154.93.71.0/24 maxlen: 24
                          154.93.72.0/24 maxlen: 24
                          154.93.73.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121372 (0x1da1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 20 11:48:09 2026 GMT
            Not After : Aug 27 11:48:09 2026 GMT
        Subject: CN=6a5e0afd-fe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:70:7d:25:0c:14:77:6c:13:6e:0c:3d:b9:
                    f4:ec:1c:bb:4b:ca:aa:77:ec:ba:d6:dc:e9:ff:5e:
                    13:c2:68:90:fd:a3:76:a6:8d:28:5b:57:80:c2:96:
                    05:c7:4b:46:99:5b:e3:35:d3:fa:49:9a:b8:0e:98:
                    42:4e:3a:62:c4:0c:2d:4f:b5:9e:2f:b2:49:23:85:
                    69:ac:4f:76:be:88:21:bf:24:53:a1:21:68:44:a5:
                    40:25:bb:26:62:22:3a:e8:a8:38:0a:21:6e:49:bc:
                    59:82:14:b1:dc:c7:67:ae:4d:bc:c8:01:7a:1a:b7:
                    e3:b8:f4:62:81:65:f2:85:1a:33:9c:7e:e0:44:25:
                    91:9e:b1:72:76:76:5d:7c:ee:74:6b:14:31:f3:1d:
                    e3:2e:88:c7:02:1d:cb:ad:ad:f0:c6:09:53:00:ee:
                    2c:8b:db:01:ab:21:d2:ec:82:d2:fc:5d:ff:ba:82:
                    79:84:26:6a:a9:34:52:1c:94:2d:3c:35:92:9b:11:
                    a0:9c:68:bf:19:8c:c4:c5:f6:1a:fe:f0:f9:8c:9e:
                    b5:2c:31:6b:d7:8e:2e:a4:f2:cf:90:ab:94:6a:ef:
                    67:8f:03:c7:d5:12:19:a7:e5:36:c5:93:1a:a5:d5:
                    c5:5b:98:9d:ba:c7:7b:ca:98:f5:51:36:45:4b:2c:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:7F:1B:83:20:13:1A:02:50:A0:34:04:E3:94:F0:2D:5B:B8:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FDC0843011F18671C2FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.67.0-154.93.76.255

    Signature Algorithm: sha256WithRSAEncryption
         44:80:c3:12:6b:dc:62:1a:7c:ab:e8:e1:c1:20:f3:d7:22:0a:
         f8:38:4a:94:14:ac:c1:b5:78:ed:a8:28:4d:c9:8f:0b:07:07:
         9f:e6:2f:52:79:f0:6c:07:bc:40:f1:8f:5a:d7:31:98:40:89:
         ff:04:8a:2a:38:06:77:67:35:0e:4f:52:b8:fa:06:12:98:d6:
         87:7d:d0:40:44:73:a6:24:df:d6:17:96:c3:56:a0:fe:d0:10:
         22:f4:1d:df:a2:bd:b0:bb:06:f6:6f:90:42:a7:fd:53:2e:9f:
         71:c4:95:d9:66:c5:43:f5:6c:00:a9:8e:8f:f0:a9:f6:ef:7c:
         e0:ff:ae:c4:a8:3d:0b:e9:25:e6:84:25:32:3e:ce:8c:25:b0:
         e5:73:af:f2:3d:21:ec:1b:6b:19:db:8c:fc:30:45:6c:06:78:
         3b:6f:73:33:51:03:00:73:9b:c6:04:1d:84:0e:40:97:77:68:
         fa:55:3a:02:82:07:62:f3:11:88:7e:b6:ff:bd:be:79:6c:30:
         8c:c0:fe:cd:ee:46:e4:18:f2:ee:4b:3b:ce:8a:d0:ee:17:7b:
         1b:12:b7:30:40:28:3c:96:a9:94:49:3b:34:5c:b3:3d:e4:37:
         d5:cf:c7:df:7c:52:6b:b6:9b:84:96:9f:52:f1:4a:f9:62:97:
         e9:21:b8:11
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdocMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIwMTE0ODA5WhcNMjYwODI3MTE0ODA5WjAYMRYw
FAYDVQQDEw02YTVlMGFmZC1mZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRdwfSUMFHdsE24MPbn07By7S8qqd+y61tzp/14TwmiQ/aN2po0oW1eA
wpYFx0tGmVvjNdP6SZq4DphCTjpixAwtT7WeL7JJI4VprE92voghvyRToSFoRKVA
JbsmYiI66Kg4CiFuSbxZghSx3Mdnrk28yAF6GrfjuPRigWXyhRoznH7gRCWRnrFy
dnZdfO50axQx8x3jLojHAh3Lra3wxglTAO4si9sBqyHS7ILS/F3/uoJ5hCZqqTRS
HJQtPDWSmxGgnGi/GYzExfYa/vD5jJ61LDFr144upPLPkKuUau9njwPH1RIZp+U2
xZMapdXFW5idusd7ypj1UTZFSyzbyQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNLL
fxuDIBMaAlCgNATjlPAtW7iJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMkQ0RkRDMDg0MzAxMUYxODY3MUMyRkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXUMDBACaXUwwDQYJ
KoZIhvcNAQELBQADggEBAESAwxJr3GIafKvo4cEg89ciCvg4SpQUrMG1eO2oKE3J
jwsHB5/mL1J58GwHvEDxj1rXMZhAif8Eiio4BndnNQ5PUrj6BhKY1od90EBEc6Yk
39YXlsNWoP7QECL0Hd+ivbC7BvZvkEKn/VMun3HEldlmxUP1bACpjo/wqfbvfOD/
rsSoPQvpJeaEJTI+zowlsOVzr/I9IewbaxnbjPwwRWwGeDtvczNRAwBzm8YEHYQO
QJd3aPpVOgKCB2LzEYh+tv+9vnlsMIzA/s3uRuQY8u5LO86K0O4XexsStzBAKDyW
qZRJOzRcsz3kN9XPx998Umu2m4SWn1LxSvlil+khuBE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:42 2026 by rpki-client