Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A79126551411F191107DBECE1D38B0.roa
File:                     35A79126551411F191107DBECE1D38B0.roa (raw, json)
Hash identifier:          pZvp9X6UijSHO2jwsyljiBDidsYQuNXTs8KIzwYgVNk=
Subject key identifier:   59:42:4F:EC:1A:BA:2C:99:97:B9:45:FF:5F:23:77:A0:96:90:73:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01CD60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A79126551411F191107DBECE1D38B0.roa
Signing time:             Thu 21 May 2026 12:54:32 +0000
ROA not before:           Thu 21 May 2026 12:54:27 +0000
ROA not after:            Wed 19 Aug 2026 12:54:27 +0000
asID:                     18013
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.212.132.0/22 maxlen: 24
                          154.212.135.0/24 maxlen: 24
                          154.215.2.0/23 maxlen: 24
                          154.221.2.0/23 maxlen: 24
                          154.221.8.0/21 maxlen: 24
                          154.222.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118112 (0x1cd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 21 12:54:27 2026 GMT
            Not After : Aug 19 12:54:27 2026 GMT
        Subject: CN=6a0f0087-ecb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:67:69:b4:25:81:6d:13:96:80:e4:2d:7a:
                    f8:1d:57:ba:c1:79:68:3a:7c:c2:10:76:fd:1b:38:
                    4e:d8:3d:0b:95:5e:7c:85:31:1b:40:ea:f6:e3:ee:
                    31:9b:7c:c4:44:d4:96:cd:75:e9:02:59:6d:fa:db:
                    be:59:28:5d:0a:44:3d:cb:45:15:7e:4a:0c:7c:da:
                    a3:cf:71:b1:4f:ec:2c:ec:bc:75:30:58:32:e3:5a:
                    a3:9b:5b:e3:59:49:98:ae:a2:30:00:09:30:c3:5a:
                    3a:fc:c5:38:9f:2c:26:2b:1c:94:34:35:b2:98:75:
                    ab:05:b3:34:3a:20:46:74:65:2f:f8:99:97:4d:b3:
                    05:73:6b:55:d3:0d:94:36:06:32:4b:08:9f:93:73:
                    23:72:31:30:c0:80:3e:54:76:33:c7:4b:f9:1a:c5:
                    83:cb:d2:af:57:02:68:ea:05:65:8b:7f:e5:46:71:
                    52:4e:9a:7d:e8:f2:fb:16:49:1f:8c:c6:8e:cc:6b:
                    71:4f:02:7c:68:b0:63:26:6b:ac:c9:15:f4:72:5e:
                    5e:a3:1d:9e:e0:7b:c3:20:2a:9e:9a:9f:bf:fd:9d:
                    30:a2:fb:2e:c5:d9:00:13:93:8e:b0:e5:a2:1d:0e:
                    14:f0:a4:45:70:5d:ec:20:d0:c1:fa:15:cf:11:38:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:42:4F:EC:1A:BA:2C:99:97:B9:45:FF:5F:23:77:A0:96:90:73:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A79126551411F191107DBECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.212.132.0/22
                  154.215.2.0/23
                  154.221.2.0/23
                  154.221.8.0/21
                  154.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:14:61:93:f5:67:1b:e4:eb:f1:df:51:d2:45:92:a1:35:
         4c:66:c7:c2:f7:17:bb:cf:b3:61:20:ab:0a:fd:fb:e5:dc:d6:
         32:bb:89:2f:a0:10:09:21:f3:0b:a1:70:08:a7:f8:dc:7a:67:
         30:7d:8e:5a:d6:f1:05:bb:fd:cf:d2:a8:b2:91:26:ed:f2:45:
         c2:1c:72:7c:b0:cc:a2:f5:6c:02:e1:8a:94:af:ec:66:1b:8b:
         8d:b9:23:6f:53:89:bd:f8:84:84:7e:21:6e:ca:0b:2f:07:7c:
         9d:59:48:41:d3:56:9c:5d:73:17:8d:e4:2d:11:d8:47:77:8d:
         bc:12:42:31:e0:76:7d:f7:dc:43:eb:b6:2f:e4:16:26:75:91:
         2f:88:5f:77:6f:c4:e9:ee:3a:b3:ce:36:8e:73:05:90:13:7f:
         21:29:3a:05:34:64:95:3c:7f:ef:e7:07:e3:d9:99:8c:29:f1:
         6e:21:7f:de:de:a5:88:6b:b9:e7:d0:29:26:a9:90:07:61:bd:
         7e:28:54:2a:d4:ea:3e:5e:d8:56:60:26:90:f5:2d:ad:d2:d6:
         45:4f:14:71:f4:c6:a9:3e:e1:9d:59:b2:c3:1a:e6:83:0e:b1:
         c5:58:a0:8c:55:64:bd:47:e8:e3:de:80:7c:da:22:71:cf:a5:
         62:36:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:47 2026 by rpki-client