Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/66B4A4A48C9911F1BCD0C4DACE1D38B0.roa
File:                     66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (raw, json)
Hash identifier:          1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=
Subject key identifier:   83:A2:4A:1F:88:D2:F9:C3:FB:74:4A:2B:B8:76:10:81:E0:A4:AF:7A
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       08F4
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/66B4A4A48C9911F1BCD0C4DACE1D38B0.roa
Signing time:             Fri 31 Jul 2026 04:36:31 +0000
ROA not before:           Fri 31 Jul 2026 04:36:27 +0000
ROA not after:            Sun 10 Aug 2031 04:36:27 +0000
asID:                     37468
IP address blocks:        197.149.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 11 Aug 2026 00:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292 (0x8f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Jul 31 04:36:27 2026 GMT
            Not After : Aug 10 04:36:27 2031 GMT
        Subject: CN=6a6c264f-1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:47:e6:25:94:30:ac:40:62:97:b8:49:83:
                    58:1e:80:8f:c3:09:09:a7:4d:f9:3c:41:3f:8e:8f:
                    4d:bc:11:f6:1b:16:ff:66:5a:32:e3:e6:7e:e5:b3:
                    a7:11:e6:b4:0a:25:d5:a5:5e:51:ba:6c:34:74:8d:
                    5a:17:09:1b:7a:9b:cc:a5:c8:eb:e6:c2:d3:35:3c:
                    d6:fd:62:7e:81:c3:91:b7:43:78:47:a4:23:e8:48:
                    1b:b4:42:ab:d5:37:a8:04:a6:b7:92:5e:19:66:36:
                    8e:c2:f8:0b:9c:12:56:5e:eb:66:1b:9b:0a:bb:e9:
                    cc:fd:ab:36:64:75:8a:20:26:fa:96:53:89:eb:74:
                    0a:d7:40:0f:63:0b:e5:77:79:2d:65:68:d9:42:6f:
                    f2:fb:07:9b:4d:2f:1d:75:09:a3:a4:32:67:9c:0b:
                    8b:5f:3e:f9:39:78:a5:63:2c:f4:cf:a2:c8:3e:df:
                    6f:f3:65:00:4b:28:85:38:cb:41:f6:96:1b:a1:dc:
                    d3:aa:fc:11:22:4e:37:d9:f5:bb:d6:0e:27:86:f3:
                    e3:b7:8b:52:24:43:62:0d:f9:a6:a3:9f:2f:74:99:
                    c6:33:10:55:49:f9:84:fe:e0:72:ae:37:4d:08:ed:
                    1b:19:bd:a0:fa:19:9b:06:e1:59:2d:61:25:93:4e:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:4A:1F:88:D2:F9:C3:FB:74:4A:2B:B8:76:10:81:E0:A4:AF:7A
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/66B4A4A48C9911F1BCD0C4DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.149.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:ae:66:a7:a2:29:fb:27:72:0d:5c:52:de:c7:9c:5c:98:
         d8:1f:50:60:2c:8e:72:85:6b:79:05:62:d4:46:4a:df:49:08:
         59:6a:8b:96:aa:b6:8b:82:2a:ae:f7:85:63:e7:41:fe:65:55:
         a7:0d:28:f7:65:2b:d4:39:ed:0f:e8:48:22:5d:40:0e:f6:ea:
         c3:05:53:08:85:ec:53:8f:e3:b3:c2:a8:d4:fd:5f:bc:d5:4a:
         c8:02:8b:18:8d:b1:e1:2b:27:33:e9:91:3d:44:55:8d:9d:1c:
         33:a6:ea:1d:4d:35:eb:b1:d3:a0:b2:84:ab:69:eb:8f:22:c2:
         9e:4f:67:50:a4:05:1b:75:15:ee:9d:5c:29:9a:71:6b:36:a6:
         67:4c:1d:a6:c0:fa:ef:94:12:30:54:89:91:3a:fe:cc:61:ad:
         aa:ca:f1:6d:1c:5c:9f:f2:eb:88:df:52:2e:15:b0:ab:bb:ac:
         ea:70:c1:fb:84:a4:78:1d:d0:2d:5c:98:95:5e:b9:98:32:55:
         ca:74:4b:96:72:9e:21:03:a3:78:85:3a:9f:6d:4f:09:c6:7a:
         cd:44:d1:dc:83:47:6c:75:f6:2b:26:16:ab:e0:41:98:69:22:
         2c:bb:f1:0c:94:04:4d:e6:72:63:7c:3d:b2:30:cf:fe:98:90:
         f6:a7:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 16:46:11 2026 by rpki-client