Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/6748080C60AC11F1928CA7C9CE1D38B0.roa
File:                     6748080C60AC11F1928CA7C9CE1D38B0.roa (raw, json)
Hash identifier:          aiq8sw3U5IVlccJ2GnivuZdBAxpg4+7vp5rz3mmOjQc=
Subject key identifier:   41:CB:9C:8E:A5:1C:F7:2F:A1:A9:7C:FD:D9:AA:B5:24:91:CB:48:8B
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       0894
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/6748080C60AC11F1928CA7C9CE1D38B0.roa
Signing time:             Fri 05 Jun 2026 07:01:41 +0000
ROA not before:           Fri 05 Jun 2026 07:01:36 +0000
ROA not after:            Sat 05 Jun 2032 07:01:36 +0000
asID:                     37239
IP address blocks:        154.70.224.0/24 maxlen: 24
                          154.70.225.0/24 maxlen: 24
                          154.70.226.0/24 maxlen: 24
                          154.70.227.0/24 maxlen: 24
                          154.70.228.0/24 maxlen: 24
                          154.70.229.0/24 maxlen: 24
                          154.70.230.0/24 maxlen: 24
                          154.70.231.0/24 maxlen: 24
                          154.70.232.0/24 maxlen: 24
                          154.70.233.0/24 maxlen: 24
                          154.70.234.0/24 maxlen: 24
                          154.70.235.0/24 maxlen: 24
                          154.70.236.0/24 maxlen: 24
                          154.70.237.0/24 maxlen: 24
                          154.70.238.0/24 maxlen: 24
                          154.70.239.0/24 maxlen: 24
                          154.70.240.0/24 maxlen: 24
                          154.70.241.0/24 maxlen: 24
                          154.70.242.0/24 maxlen: 24
                          154.70.243.0/24 maxlen: 24
                          154.70.244.0/24 maxlen: 24
                          154.70.245.0/24 maxlen: 24
                          154.70.246.0/24 maxlen: 24
                          154.70.247.0/24 maxlen: 24
                          154.70.248.0/24 maxlen: 24
                          154.70.249.0/24 maxlen: 24
                          154.70.250.0/24 maxlen: 24
                          154.70.251.0/24 maxlen: 24
                          154.70.252.0/24 maxlen: 24
                          154.70.253.0/24 maxlen: 24
                          154.70.254.0/24 maxlen: 24
                          154.70.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: Jun  5 07:01:36 2026 GMT
            Not After : Jun  5 07:01:36 2032 GMT
        Subject: CN=6a227455-0b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:50:79:c4:ca:29:dd:64:eb:9f:f4:02:a8:
                    5e:91:b9:66:09:31:52:c5:bf:ca:23:53:33:74:b9:
                    42:6a:ac:1d:5d:5d:30:27:d9:81:15:12:1a:58:27:
                    2a:d2:39:20:53:3e:fa:04:73:30:e4:cf:c5:01:6f:
                    f6:42:77:e2:71:3e:d4:e5:22:1d:8e:d4:d5:2a:ed:
                    01:6b:a7:b2:b6:90:e4:5d:1b:e4:e9:be:8d:a7:b6:
                    45:9a:99:43:e2:6e:ef:44:96:89:58:f4:ee:9f:68:
                    d0:2d:28:a2:e0:79:c6:46:7d:c6:95:66:a7:a2:18:
                    bc:83:47:10:02:b8:72:98:90:49:fa:5d:13:67:57:
                    e5:38:e7:cc:2e:b7:e3:62:b2:48:8a:92:51:af:8f:
                    e0:6f:ab:d5:2f:d4:58:21:7a:67:eb:1c:f3:5d:ec:
                    f8:c4:40:84:1b:60:d7:5e:44:41:52:86:b7:64:8f:
                    86:4c:85:10:1b:64:d6:e2:d9:c8:cb:77:e0:4a:f8:
                    92:ee:6f:a4:1a:4b:83:58:b0:8e:37:13:8e:3d:9c:
                    9b:fb:5c:89:ee:9a:57:d9:57:e2:de:77:06:34:3a:
                    ae:b9:3d:c1:93:9e:43:87:0d:95:e4:f6:7e:40:ec:
                    91:0b:b0:ab:00:86:59:81:b8:be:02:90:1f:ad:aa:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:9C:8E:A5:1C:F7:2F:A1:A9:7C:FD:D9:AA:B5:24:91:CB:48:8B
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/6748080C60AC11F1928CA7C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.70.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:a6:86:9a:8e:f7:26:55:89:35:56:60:17:1b:12:a6:5f:
         3b:9d:d9:da:61:59:9a:22:4e:22:65:e4:bb:dd:c2:7b:06:7b:
         7c:a7:72:77:14:48:c7:d1:17:60:c6:a5:e7:8b:59:e5:ba:51:
         37:52:5b:58:24:b5:2d:be:5a:ac:47:79:be:4e:f8:a4:7c:42:
         03:e9:30:16:34:12:7b:3b:df:4f:a9:d7:a0:5a:df:e1:6b:39:
         6e:05:e4:97:43:9c:3f:8d:c4:39:49:cc:be:31:a1:e4:78:26:
         a0:e8:95:87:fb:a6:da:7b:81:1a:b8:2c:e5:55:67:d2:72:ab:
         9a:28:cc:55:23:54:9e:a6:ac:14:5d:32:b5:e8:b6:b7:c6:be:
         ce:0d:6d:26:dd:97:ad:fe:c2:6a:c7:81:25:ab:16:7b:b6:2b:
         48:52:11:03:75:14:a3:21:75:2b:6e:a5:c4:6b:27:2b:7e:29:
         8a:54:5b:59:03:59:80:85:18:69:b6:58:b5:42:11:e5:a1:0b:
         3f:4e:53:a3:47:68:91:c2:69:59:53:e2:ce:98:75:ad:8a:e5:
         90:3d:9b:ec:7e:3f:80:66:4a:54:6d:ac:68:6a:f9:7a:b1:f8:
         ad:e8:ce:8a:3e:05:08:fa:86:9a:e9:6c:55:96:06:1a:37:67:
         86:fd:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:03 2026 by rpki-client