Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E4F70916A11F19894D31BCF1D38B0.roa
File:                     034E4F70916A11F19894D31BCF1D38B0.roa (raw, json)
Hash identifier:          4/EpM2SDUMcwVpkjaWTuoXxTrBOzz6grfRobtIR9xHU=
Subject key identifier:   B9:7E:ED:F4:D3:41:A9:BF:F8:7E:29:3B:7C:28:4B:F7:55:44:FD:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DCD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E4F70916A11F19894D31BCF1D38B0.roa
Signing time:             Thu 06 Aug 2026 07:39:54 +0000
ROA not before:           Thu 06 Aug 2026 07:39:50 +0000
ROA not after:            Sun 16 Aug 2026 07:39:50 +0000
asID:                     140227
IP address blocks:        154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122071 (0x1dcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  6 07:39:50 2026 GMT
            Not After : Aug 16 07:39:50 2026 GMT
        Subject: CN=6a743a49-9570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:be:66:fb:01:10:63:77:aa:7a:88:77:c7:
                    b3:44:cd:89:26:52:54:fe:d2:68:6c:c7:2a:8b:30:
                    00:46:b3:32:bf:fe:22:8e:3b:ba:cd:0c:4d:7e:99:
                    c8:27:5f:e9:ce:d2:a7:1f:ff:7d:c1:ae:8c:50:4a:
                    13:92:a3:7c:d7:3c:fb:0c:42:97:8c:d3:30:82:48:
                    cd:79:64:78:6f:12:b9:34:f1:28:c5:da:87:0a:73:
                    70:91:47:e5:38:0d:8d:9f:07:f0:c1:ac:f8:91:25:
                    35:12:a3:02:05:94:21:4f:62:f3:2f:1b:57:38:f7:
                    5a:7d:bb:00:4b:63:58:5f:84:22:df:3c:4a:a1:b7:
                    e3:78:a7:6b:42:a0:61:d5:cc:83:bb:07:36:56:ac:
                    b7:ca:f0:ad:08:cd:fd:6c:05:80:aa:14:68:57:83:
                    61:ec:4d:f7:dc:d0:99:73:77:35:57:8b:7e:ff:c2:
                    dd:4c:0b:40:79:c6:40:13:6f:41:dc:f6:50:73:26:
                    62:c1:e7:fe:b3:ff:f1:39:90:d4:9f:9b:4d:e0:7c:
                    33:34:04:14:e1:6a:97:86:94:88:46:44:e6:21:b8:
                    53:7f:bc:2c:a0:23:e2:a9:74:c1:6e:3e:3d:48:3d:
                    56:ab:a5:51:13:73:fa:6e:c7:82:ec:e7:0d:a0:e1:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7E:ED:F4:D3:41:A9:BF:F8:7E:29:3B:7C:28:4B:F7:55:44:FD:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E4F70916A11F19894D31BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0-154.86.20.255

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:ce:27:17:15:b3:33:c4:af:b6:9c:fe:3e:4e:35:a0:0b:
         6d:97:b6:c7:e8:01:4c:3d:20:5b:a5:c1:45:64:8d:20:c1:0a:
         52:4a:33:57:73:2e:ee:f3:1c:d0:51:94:c5:6f:15:e0:77:c5:
         0f:43:2d:74:c4:a2:fa:3c:da:f8:4d:c2:f3:6c:5a:9c:0f:8f:
         be:5d:d9:a5:fd:89:f5:1d:2d:54:38:1a:2a:9b:15:76:8c:cf:
         d1:76:35:2b:64:85:e7:28:2a:71:13:08:81:96:aa:6f:3d:4f:
         8b:c9:20:2b:f4:ac:f7:e3:11:90:d2:f4:37:85:28:a9:55:ba:
         8c:c9:31:15:bf:c5:19:be:70:fb:42:36:6a:62:25:8b:b5:ee:
         fa:eb:75:af:75:e9:0d:21:55:5f:3e:4d:d2:1f:88:58:72:17:
         fb:a3:cb:d9:e3:a9:56:ab:18:c2:8e:1e:15:54:77:14:e6:4e:
         3c:23:cc:f9:87:33:85:c4:e7:76:df:cf:6c:03:4d:5c:6b:4f:
         a3:18:ef:f8:12:ad:00:df:cc:c5:86:6b:c3:56:8a:88:55:96:
         d6:0a:7d:fd:76:fb:70:5b:f8:29:72:f2:99:1d:b5:b0:6f:9b:
         52:d1:37:fe:4a:40:be:c6:c2:91:8a:c7:72:cd:9e:02:0b:44:
         f4:7d:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:55 2026 by rpki-client