Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ED9BCEC484211F1AFAFA0C4CE1D38B0.roa
File:                     0ED9BCEC484211F1AFAFA0C4CE1D38B0.roa (raw, json)
Hash identifier:          QRW5W2GAx5Jye0z19Jmdvl+aXL4kxqLEJgSg4wl94Lc=
Subject key identifier:   9C:A9:C4:C0:38:75:AF:90:C0:5D:FF:FA:78:E6:E5:33:BB:6D:CF:81
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1F07
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ED9BCEC484211F1AFAFA0C4CE1D38B0.roa
Signing time:             Tue 05 May 2026 05:19:58 +0000
ROA not before:           Tue 05 May 2026 05:19:53 +0000
ROA not after:            Fri 05 May 2028 05:19:53 +0000
asID:                     834
IP address blocks:        154.16.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 May 2026 00:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7943 (0x1f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May  5 05:19:53 2026 GMT
            Not After : May  5 05:19:53 2028 GMT
        Subject: CN=69f97dfe-f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:83:26:d5:9c:0e:f5:b0:46:45:c0:fc:9b:
                    19:6e:09:31:7e:68:69:40:42:93:23:1e:9d:17:22:
                    02:67:6c:5a:68:20:ae:63:58:07:8f:7c:a7:f8:8b:
                    84:f9:d6:12:9c:16:02:4b:01:16:66:44:77:2c:4a:
                    5a:76:08:09:34:97:6c:23:ce:4b:17:c6:a0:60:31:
                    47:bb:5d:20:5b:5d:86:86:0a:a3:59:3d:42:ed:1f:
                    06:6c:39:a7:9b:6a:78:4b:47:91:e3:7a:42:4e:fb:
                    d6:3e:01:2d:cd:98:85:bf:98:b7:04:04:a8:92:80:
                    45:66:ab:ce:01:85:16:53:e8:11:7c:59:ab:b8:f9:
                    39:f9:90:29:e3:66:3d:4f:40:fd:57:20:b3:54:d1:
                    8c:fe:62:61:cc:ec:f2:b3:57:47:2c:4d:56:b2:27:
                    0d:92:94:31:18:39:e3:90:10:dc:f0:3a:75:f2:7e:
                    8b:f9:e2:45:2e:4c:8d:40:be:08:b0:d1:f1:32:e4:
                    36:b2:d3:0b:f9:a7:05:fa:f0:e4:e4:2d:bc:cb:cf:
                    ed:eb:73:23:8d:6d:29:87:60:3b:e9:38:01:55:e1:
                    e2:c1:98:93:e5:e6:4d:32:44:b1:08:f0:e9:56:78:
                    91:98:06:26:fe:89:fb:a3:83:3a:56:aa:c7:b1:25:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A9:C4:C0:38:75:AF:90:C0:5D:FF:FA:78:E6:E5:33:BB:6D:CF:81
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ED9BCEC484211F1AFAFA0C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:76:3f:e5:ec:5a:45:b9:85:86:ad:9d:6b:44:0b:b1:4d:
         b7:5b:d3:63:4d:89:dd:1b:e3:4e:b6:5d:a3:8d:cd:25:7f:a8:
         74:f7:ca:64:19:2d:65:da:99:a9:d4:97:d5:ff:5a:1c:35:80:
         01:78:4f:2d:15:8e:d5:0d:56:83:7e:3a:d3:21:6a:05:dc:9a:
         69:76:0d:da:09:e6:95:ae:c3:5d:ab:70:cd:1d:70:3d:89:35:
         eb:77:99:dd:f2:09:36:8d:5f:1c:27:7e:e1:b0:1b:1e:af:52:
         c8:ca:6a:8d:9f:3f:c3:a4:ee:75:b7:3b:cb:41:96:26:6f:ba:
         c5:5c:db:2f:95:25:a2:13:03:f8:04:bf:6a:06:0f:e6:f9:a8:
         73:42:50:66:fd:d6:f4:b6:49:05:62:06:45:08:cd:ee:3e:64:
         29:8d:a8:91:63:a4:cd:ce:eb:53:98:69:6d:98:ff:89:3e:ba:
         51:52:27:9f:23:e5:7f:bb:d6:a4:2b:31:e8:f3:59:59:43:22:
         0a:1a:69:1b:a4:24:3d:96:21:3e:a6:50:83:5b:d7:9a:92:6c:
         79:83:76:e4:fd:cd:31:5d:ff:aa:3c:d4:8f:e0:05:36:90:44:
         81:0a:ed:1e:ed:9d:e6:17:e3:99:a7:35:bc:6c:f8:e7:37:d5:
         1c:f5:dc:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHwcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA1MDUwNTE5NTNaFw0yODA1MDUwNTE5NTNaMBgxFjAU
BgNVBAMTDTY5Zjk3ZGZlLWY1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqH4Mm1ZwO9bBGRcD8mxluCTF+aGlAQpMjHp0XIgJnbFpoIK5jWAePfKf4
i4T51hKcFgJLARZmRHcsSlp2CAk0l2wjzksXxqBgMUe7XSBbXYaGCqNZPULtHwZs
OaebanhLR5HjekJO+9Y+AS3NmIW/mLcEBKiSgEVmq84BhRZT6BF8Wau4+Tn5kCnj
Zj1PQP1XILNU0Yz+YmHM7PKzV0csTVayJw2SlDEYOeOQENzwOnXyfov54kUuTI1A
vgiw0fEy5Day0wv5pwX68OTkLbzLz+3rcyONbSmHYDvpOAFV4eLBmJPl5k0yRLEI
8OlWeJGYBib+ifujgzpWqsexJX95AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnKnE
wDh1r5DAXf/6eOblM7ttz4EwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzBFRDlCQ0VDNDg0MjExRjFBRkFGQTBDNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIIwDQYJKoZIhvcNAQEL
BQADggEBAGWsdj/l7FpFuYWGrZ1rRAuxTbdb02NNid0b4062XaONzSV/qHT3ymQZ
LWXamanUl9X/Whw1gAF4Ty0VjtUNVoN+OtMhagXcmml2DdoJ5pWuw12rcM0dcD2J
Net3md3yCTaNXxwnfuGwGx6vUsjKao2fP8Ok7nW3O8tBliZvusVc2y+VJaITA/gE
v2oGD+b5qHNCUGb91vS2SQViBkUIze4+ZCmNqJFjpM3O61OYaW2Y/4k+ulFSJ58j
5X+71qQrMejzWVlDIgoaaRukJD2WIT6mUINb15qSbHmDduT9zTFd/6o81I/gBTaQ
RIEK7R7tneYX45mnNbxs+Oc31Rz13M8=
-----END CERTIFICATE-----
Generated at Wed May 6 04:03:34 2026 by rpki-client