Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38C35CF8924211F1B23DA3B8CE1D38B0.roa
File:                     38C35CF8924211F1B23DA3B8CE1D38B0.roa (raw, json)
Hash identifier:          anb9j6OzwQjtwuNuk+FyU3gci8A50rl0/hg5Q/Mp2KE=
Subject key identifier:   02:E9:C4:53:6A:42:CB:5D:79:2B:39:15:2E:4A:94:ED:88:3D:14:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38C35CF8924211F1B23DA3B8CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 09:27:35 +0000
ROA not before:           Fri 07 Aug 2026 09:27:31 +0000
ROA not after:            Sun 06 Sep 2026 09:27:31 +0000
asID:                     40115
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Aug 2026 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122217 (0x1dd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  7 09:27:31 2026 GMT
            Not After : Sep  6 09:27:31 2026 GMT
        Subject: CN=6a75a506-8afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:0e:e1:fa:12:6e:f7:be:40:f9:bf:c3:f1:
                    31:71:74:73:ba:97:6e:a4:cc:4f:a0:a5:0a:57:aa:
                    d7:10:55:a9:9e:76:6c:93:0f:91:cd:a8:32:1b:63:
                    a0:e9:8f:8a:53:9b:6a:b3:23:f4:fc:26:e1:8a:aa:
                    0b:eb:aa:2b:5a:59:5d:0b:ab:54:21:85:98:53:8b:
                    6d:0b:97:2b:95:df:d5:5b:69:4d:70:cc:f2:48:97:
                    a8:0b:b9:a9:f8:7d:3b:f1:b4:45:d5:a4:62:e3:11:
                    b4:57:b2:5a:f1:45:0d:1b:3c:25:ea:31:6c:10:9f:
                    e9:19:0a:d9:52:3d:04:f9:11:4d:86:19:5d:55:39:
                    6f:9c:db:82:93:27:b7:87:6a:52:e9:90:06:7c:b0:
                    85:2a:ce:13:65:25:74:17:5f:f3:c0:ae:7f:84:20:
                    35:27:00:a4:d0:a5:d3:0f:08:bd:23:f6:95:80:07:
                    d6:87:25:20:1c:ee:31:b7:cb:a3:fa:83:5d:25:7c:
                    fa:e7:d2:0e:8e:34:8d:5d:90:ee:48:e5:d2:9a:23:
                    34:6e:41:11:37:7c:03:18:6c:2d:16:25:9e:04:c1:
                    8e:f9:fe:71:4d:fa:a7:2c:88:3d:56:8a:35:66:5c:
                    6f:cf:ab:ed:56:5c:18:50:a1:99:88:4c:4a:dd:74:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:C4:53:6A:42:CB:5D:79:2B:39:15:2E:4A:94:ED:88:3D:14:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38C35CF8924211F1B23DA3B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:29:6b:3b:4e:ea:f3:27:29:77:ea:78:c3:8b:61:72:9f:d1:
         57:92:a9:f1:a5:ae:d3:d1:10:34:95:e1:7d:88:77:b2:9a:70:
         d2:38:cf:2f:03:d3:97:b4:0b:4b:79:7e:1e:68:05:8e:b8:fc:
         a3:8d:68:cd:c3:ac:05:85:a4:aa:d4:7a:eb:d2:16:46:4e:61:
         75:80:77:d9:f3:d4:ac:ed:6a:5d:07:15:4c:ad:90:e0:40:e4:
         9d:d0:1a:7e:4f:34:6b:f1:b1:0c:39:5f:ec:08:7a:78:3e:86:
         ff:63:67:9d:db:08:39:8a:e4:28:10:0c:8d:02:9e:44:b0:cc:
         2b:b1:2f:e5:57:73:f9:21:00:df:70:b8:79:48:bf:d8:34:80:
         dc:a8:31:97:7b:48:61:2f:59:74:45:95:83:44:82:67:a7:aa:
         33:a9:42:56:0e:d8:4b:23:53:9d:94:64:f3:f4:d4:a6:6e:c8:
         6e:2e:f5:df:20:7e:6c:a9:86:03:bd:fd:e8:90:73:2e:d1:2c:
         b3:23:ec:ed:95:09:63:c6:96:79:b9:21:20:c6:0c:f3:ab:56:
         d9:75:2c:7a:64:5b:3e:12:5c:b8:31:ff:f5:da:d3:19:1f:d6:
         d6:d5:b2:b6:60:d2:df:2c:da:fe:c0:e1:7e:62:bb:f9:70:38:
         7d:37:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:29 2026 by rpki-client