Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1778270503811F195A094B0CE1D38B0.roa
File:                     A1778270503811F195A094B0CE1D38B0.roa (raw, json)
Hash identifier:          Az++0yghe5T59/iujCwFiCnWlGpuIokmxl8BBXHdTOM=
Subject key identifier:   12:A0:79:D0:8F:C3:83:EB:1E:42:10:42:28:11:2E:DE:9B:14:11:62
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1F49
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1778270503811F195A094B0CE1D38B0.roa
Signing time:             Fri 15 May 2026 08:32:38 +0000
ROA not before:           Fri 15 May 2026 08:32:33 +0000
ROA not after:            Mon 15 May 2028 08:32:33 +0000
asID:                     834
IP address blocks:        154.16.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 19 May 2026 00:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8009 (0x1f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 15 08:32:33 2026 GMT
            Not After : May 15 08:32:33 2028 GMT
        Subject: CN=6a06da26-f243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:53:97:38:e3:37:70:7e:1e:44:c7:4a:fd:
                    53:ac:73:fd:79:5d:d3:8a:45:b0:ca:c9:b8:30:31:
                    c5:c5:8b:11:23:99:91:42:ed:cc:eb:1f:90:89:db:
                    11:a3:85:3f:dc:84:ca:ba:45:0f:e0:9b:3d:30:60:
                    11:49:83:25:c7:2c:6c:29:cc:af:92:e1:7b:8b:9c:
                    dc:21:a2:f8:37:4d:17:65:99:46:d1:27:a8:7a:49:
                    4e:38:c4:c9:20:c2:c6:59:82:79:aa:5e:0c:94:e5:
                    cd:d8:68:f8:66:3b:78:19:09:06:cb:ea:85:79:00:
                    b1:dc:fa:71:6d:9d:b8:f6:57:b2:6f:26:ea:39:d4:
                    21:05:49:89:a5:b1:87:bf:4b:23:9a:5f:68:1e:c9:
                    c6:50:8a:50:1c:0a:d1:d4:cb:87:21:e0:b4:38:1b:
                    6c:34:3c:9a:10:3e:ae:79:04:a2:6a:92:29:85:b4:
                    78:7b:eb:a5:81:90:e8:51:5b:4e:37:c4:3d:8e:33:
                    99:1f:e2:ce:91:60:37:94:46:5c:a5:61:9b:a2:14:
                    ed:21:2f:87:31:67:36:d5:e8:cd:2a:61:1a:c2:23:
                    84:54:4c:c4:1d:6d:fa:8f:4d:34:9c:77:cb:eb:7c:
                    93:60:81:5c:0e:f4:80:b2:0a:7c:3c:ff:c0:09:f3:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:79:D0:8F:C3:83:EB:1E:42:10:42:28:11:2E:DE:9B:14:11:62
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1778270503811F195A094B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:56:12:02:e5:d9:e8:07:ed:1c:e6:9a:6f:a6:88:6c:68:27:
         9e:af:10:01:ac:f0:b9:d0:41:3e:d9:d6:e6:b3:db:53:4d:fe:
         5e:c2:c6:80:07:5c:8d:5a:4d:b4:00:a1:49:74:72:f4:77:07:
         ee:a7:fe:83:d8:5b:0b:a0:42:fa:76:be:10:6f:f6:29:ad:b1:
         3f:7b:8c:26:c7:91:d5:d0:7a:9e:ca:da:15:f2:48:25:a9:2c:
         7f:ea:a9:39:2c:53:6f:39:b2:bd:c1:f7:58:28:38:e3:8a:7f:
         e0:3b:75:fa:5b:f1:7c:dd:df:00:a5:41:f0:ad:da:74:bb:0d:
         64:95:7f:aa:2a:5a:7a:24:7c:9d:81:83:b6:46:3a:d0:e0:2b:
         6a:a1:99:f5:5d:69:2f:a3:80:9f:86:f0:40:8d:e5:fb:f4:95:
         0d:67:73:3b:dd:e8:88:9b:81:2b:b5:60:eb:8d:a6:9c:d7:c3:
         60:b8:75:e7:77:43:14:8c:cc:e9:a8:cb:ec:41:c2:29:4f:98:
         ac:f9:bb:3d:32:22:cd:42:89:45:3c:9a:3e:18:e4:f2:40:70:
         d0:6c:a1:1b:72:fa:b9:49:d1:60:a5:ec:0c:cf:a2:3f:41:cc:
         70:29:03:99:8f:1a:30:69:f3:c5:3c:2f:eb:42:93:e2:85:b4:
         18:f0:68:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH0kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA1MTUwODMyMzNaFw0yODA1MTUwODMyMzNaMBgxFjAU
BgNVBAMTDTZhMDZkYTI2LWYyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5T1OXOOM3cH4eRMdK/VOsc/15XdOKRbDKybgwMcXFixEjmZFC7czrH5CJ
2xGjhT/chMq6RQ/gmz0wYBFJgyXHLGwpzK+S4XuLnNwhovg3TRdlmUbRJ6h6SU44
xMkgwsZZgnmqXgyU5c3YaPhmO3gZCQbL6oV5ALHc+nFtnbj2V7JvJuo51CEFSYml
sYe/SyOaX2geycZQilAcCtHUy4ch4LQ4G2w0PJoQPq55BKJqkimFtHh766WBkOhR
W043xD2OM5kf4s6RYDeURlylYZuiFO0hL4cxZzbV6M0qYRrCI4RUTMQdbfqPTTSc
d8vrfJNggVwO9ICyCnw8/8AJ82VxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEqB5
0I/Dg+seQhBCKBEu3psUEWIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0ExNzc4MjcwNTAzODExRjE5NUEwOTRCMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAwwDQYJKoZIhvcNAQEL
BQADggEBAENWEgLl2egH7Rzmmm+miGxoJ56vEAGs8LnQQT7Z1uaz21NN/l7CxoAH
XI1aTbQAoUl0cvR3B+6n/oPYWwugQvp2vhBv9imtsT97jCbHkdXQep7K2hXySCWp
LH/qqTksU285sr3B91goOOOKf+A7dfpb8Xzd3wClQfCt2nS7DWSVf6oqWnokfJ2B
g7ZGOtDgK2qhmfVdaS+jgJ+G8ECN5fv0lQ1nczvd6IibgSu1YOuNppzXw2C4ded3
QxSMzOmoy+xBwilPmKz5uz0yIs1CiUU8mj4Y5PJAcNBsoRty+rlJ0WCl7AzPoj9B
zHApA5mPGjBp88U8L+tCk+KFtBjwaA8=
-----END CERTIFICATE-----
Generated at Sun May 17 19:19:03 2026 by rpki-client