Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D003C669AB11F1A73972ECCE1D38B0.roa
File:                     E4D003C669AB11F1A73972ECCE1D38B0.roa (raw, json)
Hash identifier:          rzwVSuQBf3VcPp0XuvZoySF2Lv6QBQNRHXewTXPypwY=
Subject key identifier:   2F:08:46:24:F2:63:D4:D4:82:AB:16:DD:74:33:C4:0C:21:99:6A:E1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01D377
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D003C669AB11F1A73972ECCE1D38B0.roa
Signing time:             Tue 16 Jun 2026 17:50:43 +0000
ROA not before:           Tue 16 Jun 2026 17:50:38 +0000
ROA not after:            Wed 22 Jul 2026 17:50:38 +0000
asID:                     141159
IP address blocks:        154.94.228.0/22 maxlen: 24
                          154.94.228.0/24 maxlen: 24
                          154.94.229.0/24 maxlen: 24
                          154.94.230.0/24 maxlen: 24
                          154.94.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Jun 2026 14:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119671 (0x1d377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 16 17:50:38 2026 GMT
            Not After : Jul 22 17:50:38 2026 GMT
        Subject: CN=6a318cf3-6ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:a9:e3:0a:0a:03:a4:26:7a:38:1b:0d:70:
                    41:e3:5b:96:00:de:c2:07:20:93:af:05:33:5f:ff:
                    58:f9:34:68:77:40:c6:50:d7:2b:b0:76:8e:f9:bf:
                    7d:1c:fa:4a:53:f7:b0:0a:74:dc:d7:e4:d3:c4:73:
                    b6:ef:ff:0f:6a:e9:a7:fd:68:1c:3a:d9:52:c7:05:
                    33:75:06:0b:7a:ac:8c:34:0d:f7:8e:54:49:12:f0:
                    a5:d0:b4:77:97:d1:6b:ad:64:61:f5:b5:9d:99:94:
                    87:ab:90:c6:f5:51:96:9a:35:76:de:78:ed:16:3f:
                    8c:3a:1e:20:4a:db:61:54:5a:0e:d7:f1:8f:93:0a:
                    b9:2e:58:d4:5d:72:02:57:61:07:43:13:10:2e:ee:
                    f1:af:b2:40:bd:b8:c6:ff:78:c2:82:9c:9d:61:67:
                    1b:7b:50:4f:9e:5b:de:3f:fd:08:b7:61:8b:f2:49:
                    12:69:7d:56:7f:9f:78:9a:a4:06:54:94:07:45:99:
                    c3:a2:70:4e:0e:cd:e1:3d:47:e5:80:cb:9d:b1:ae:
                    da:a9:6a:94:0e:20:93:d2:be:41:ae:5a:3d:e6:c0:
                    bd:dc:f2:66:f5:4d:55:eb:9b:18:49:42:d3:a1:fe:
                    e3:6a:58:16:f1:93:40:f7:ae:69:29:16:9a:8a:99:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:46:24:F2:63:D4:D4:82:AB:16:DD:74:33:C4:0C:21:99:6A:E1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D003C669AB11F1A73972ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:40:10:f8:23:5e:96:f9:19:2b:46:21:4c:cb:94:93:c4:65:
         98:40:22:69:77:b4:f9:e4:12:ab:36:3b:4f:e5:46:14:83:bf:
         03:13:15:ea:f6:4e:20:13:73:f9:1e:a5:31:32:55:c7:19:f0:
         25:34:e5:6e:e7:de:5c:84:64:af:9f:42:22:7b:e8:d1:65:67:
         c4:41:41:de:0b:2a:5a:9a:f8:67:c8:e6:de:06:4e:d0:75:bd:
         ff:75:ec:37:e0:ee:b8:76:35:4a:b7:60:65:7f:af:1e:5f:22:
         fd:17:71:5d:07:e3:d7:b3:10:d3:d8:0f:12:d1:17:40:b6:df:
         b9:8a:25:aa:a9:41:1c:d5:69:ff:87:99:81:43:58:f9:c8:48:
         9f:cd:12:39:d3:d2:62:5e:69:1d:ac:c9:52:1d:1e:d9:0d:2e:
         b2:e1:0e:1d:29:fa:7e:46:9f:b7:a4:3b:ac:70:aa:48:8b:c9:
         1c:ae:df:48:8b:d5:c9:c6:78:d5:77:48:56:f2:80:89:9f:3a:
         48:fb:70:fc:62:f8:ec:e0:05:0d:00:b4:1d:50:51:6c:9e:f3:
         af:af:a4:08:38:04:be:3d:ae:ae:e8:42:f2:13:0d:47:5c:63:
         8e:9d:6b:75:95:f1:2d:38:16:f3:f5:e9:ca:47:17:e7:a8:16:
         92:00:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:54 2026 by rpki-client