Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/60F2D4AE9CDF11F182826801CF1D38B0.roa
File:                     60F2D4AE9CDF11F182826801CF1D38B0.roa (raw, json)
Hash identifier:          5jdWkPJIVEsx6JLNtRPmkv4TfL/Ck5yB9tdpZvkN57E=
Subject key identifier:   B0:B8:F3:BD:BE:24:BC:7B:32:BA:BB:75:F0:17:03:F3:0B:EB:6B:2D
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       09BA
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/60F2D4AE9CDF11F182826801CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 21:37:45 +0000
ROA not before:           Thu 20 Aug 2026 21:37:41 +0000
ROA not after:            Mon 31 Dec 2040 21:37:41 +0000
asID:                     37061
IP address blocks:        105.160.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 01:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Aug 20 21:37:41 2026 GMT
            Not After : Dec 31 21:37:41 2040 GMT
        Subject: CN=6a8773a9-31a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:05:9d:16:ee:2c:7e:39:de:85:e6:57:68:
                    e2:ee:4d:37:15:d5:c6:c5:74:a7:15:b9:ae:2b:8b:
                    de:67:30:4d:b5:9b:c1:e7:b2:ef:4e:29:3d:88:02:
                    6f:5a:88:59:9a:c0:6a:e6:28:c3:bb:37:d7:73:73:
                    5f:2c:86:4a:5e:c8:de:ac:43:5f:7f:61:18:82:22:
                    c3:d4:53:8a:44:60:ba:07:ab:12:5c:dd:df:85:7c:
                    58:0b:14:ae:4b:3c:a3:cb:33:49:ee:46:fc:6e:75:
                    79:ef:33:9e:97:e9:6a:e8:61:ac:c4:d9:87:9a:44:
                    f4:36:4e:e7:12:9e:24:50:0b:a6:cd:02:16:2d:1f:
                    f0:02:ac:59:34:5f:67:ac:c2:89:8c:c3:cd:74:50:
                    a8:2b:ef:76:97:11:39:2c:f0:f7:6c:71:46:01:2d:
                    ed:04:e8:03:29:87:69:bc:ba:eb:25:fe:0c:c6:0e:
                    2e:b0:52:9e:14:d4:7d:99:22:f6:e2:9f:3a:bd:dd:
                    6a:d1:01:db:3b:4d:ac:e5:5a:6a:a1:65:ae:30:a7:
                    2b:ba:b2:b3:ad:8f:d9:9d:76:a7:b7:09:3c:e3:19:
                    49:43:bd:21:22:ff:67:2b:7d:ad:83:9b:11:c4:c4:
                    46:ff:64:86:83:b8:36:4c:2d:8e:a3:a1:c6:27:a3:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:F3:BD:BE:24:BC:7B:32:BA:BB:75:F0:17:03:F3:0B:EB:6B:2D
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/60F2D4AE9CDF11F182826801CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:60:59:f1:e3:a9:60:df:9f:4d:f1:b9:4d:40:b1:fc:82:
         14:7e:0a:b6:93:46:60:12:0e:1e:b8:1a:2c:dc:e2:61:be:a7:
         f5:27:23:4e:fb:b6:6f:5a:31:d6:6b:cd:02:b1:df:27:89:a1:
         0b:c8:d2:70:af:a3:bb:4c:b0:b3:47:f5:ca:7f:6e:35:a0:06:
         fd:5e:30:19:36:c5:41:cf:2a:0c:05:78:fc:67:bb:32:12:8e:
         91:e0:ac:94:0b:11:15:19:ec:39:72:e6:94:e7:2a:c7:5a:81:
         ec:86:8e:5a:b9:57:23:32:f0:c8:bd:05:04:03:2d:0f:ed:bf:
         00:79:d4:48:f2:42:4f:79:d7:f4:b6:20:66:68:bf:be:34:08:
         ac:c0:7e:1f:83:81:30:a8:b4:95:96:82:d0:7d:dd:81:cb:43:
         0b:07:a8:09:9c:29:55:f0:e8:9b:5b:5e:fd:9e:bd:c3:29:48:
         64:53:ff:ce:6e:e4:d2:8e:72:4e:65:0d:60:e3:63:b9:fb:67:
         b8:3f:02:1b:e7:96:d9:23:9e:40:6a:75:93:db:e4:cc:0f:ee:
         a9:46:96:5c:3c:2e:74:03:f6:ea:d0:b2:19:a4:bf:4a:d9:08:
         06:d4:d4:52:cc:f2:7b:bb:1b:1f:7c:cc:7a:61:60:8b:ec:da:
         f5:28:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----