Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3C6F716A11D11F185E12A0BCF1D38B0.roa
File:                     D3C6F716A11D11F185E12A0BCF1D38B0.roa (raw, json)
Hash identifier:          6+X7QD8dnyD+V/9YrZA8+9arXhf+cPGFgwri8CwcPtY=
Subject key identifier:   0E:C1:22:AC:51:30:96:EB:E0:BD:0C:D1:E0:D2:4D:AE:75:0E:D6:67
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       08B2
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3C6F716A11D11F185E12A0BCF1D38B0.roa
Signing time:             Wed 26 Aug 2026 07:14:51 +0000
ROA not before:           Wed 26 Aug 2026 07:14:47 +0000
ROA not after:            Mon 26 Aug 2030 07:14:47 +0000
asID:                     142240
IP address blocks:        102.215.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 02:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Aug 26 07:14:47 2026 GMT
            Not After : Aug 26 07:14:47 2030 GMT
        Subject: CN=6a8e926b-f806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:ed:02:1a:c6:a0:3c:71:e5:7a:8c:f5:06:
                    dd:db:14:1d:5a:bc:96:c9:be:af:7b:2d:55:5a:3d:
                    1b:ab:15:59:85:15:cb:55:95:39:ee:be:93:ac:54:
                    b8:50:e2:f7:a7:5b:37:d8:4a:67:59:2a:90:5b:09:
                    9f:90:9d:d5:ff:98:87:e0:30:b1:91:65:ba:69:cf:
                    3f:d5:e6:cd:79:e3:a5:c2:d4:30:16:dd:38:2c:e4:
                    dd:f3:78:d6:c4:68:bf:62:4e:ac:c0:16:fc:ca:b5:
                    5b:02:53:e5:d1:6d:e0:24:6f:4b:4f:da:51:6b:ac:
                    b2:2f:d1:bb:69:b4:b8:0e:cf:84:2a:fd:7b:91:53:
                    33:ab:0f:98:bc:fd:c3:ad:d9:aa:97:82:e2:d2:c2:
                    06:87:83:2c:81:e2:f4:52:c6:e3:86:fb:6a:75:3e:
                    c9:7c:c5:5e:d4:38:7a:d3:b6:0e:3b:01:ae:1a:39:
                    ac:3c:35:3a:07:e6:22:87:46:97:79:82:40:f3:87:
                    21:00:5c:71:56:a0:18:85:a2:e6:e7:36:c6:fa:87:
                    ba:39:79:1e:dc:5d:aa:7d:b0:3c:c8:6a:20:7d:c2:
                    1f:d7:c3:b2:8c:27:20:77:3e:84:37:35:19:da:f2:
                    f8:7b:ea:7e:98:5c:04:9e:91:30:cb:e7:43:02:aa:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C1:22:AC:51:30:96:EB:E0:BD:0C:D1:E0:D2:4D:AE:75:0E:D6:67
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3C6F716A11D11F185E12A0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:b4:93:8f:a3:76:8b:27:2e:59:b5:90:10:9f:2f:d4:05:
         26:e4:22:f6:62:f5:af:2d:02:bf:f1:53:ae:02:c5:07:7c:3a:
         55:32:33:20:c5:41:37:51:fb:65:ce:e8:1b:20:3b:ed:fc:68:
         b0:d9:7a:14:20:cb:c4:a0:b2:04:c6:1a:e8:c5:55:cb:37:d9:
         4c:6a:91:fa:39:1d:be:e8:9d:2a:63:ec:fd:0a:b0:9b:12:28:
         17:63:a8:40:98:c2:08:63:f3:41:7d:f0:9b:af:6b:87:14:0f:
         de:b3:11:41:57:89:4a:27:82:c7:18:e3:08:49:61:91:a7:0d:
         98:11:0f:e9:49:cc:1e:df:cd:41:4a:87:b6:46:53:75:73:91:
         25:ad:42:2a:33:fd:79:5b:27:55:f6:c1:0b:44:ca:32:08:be:
         0f:e8:57:e2:57:6b:1f:d1:d9:12:df:7b:83:4d:60:a3:55:e2:
         36:b2:54:54:1d:49:63:1b:af:bc:bc:22:af:00:b8:18:ce:0e:
         48:c1:2d:03:3c:37:a4:de:0b:37:8f:53:27:bf:92:07:4d:69:
         83:fb:9f:bb:0e:aa:75:89:39:d3:f0:d2:01:94:20:8b:c7:5f:
         29:06:5d:03:33:18:f4:26:24:b3:6b:69:0d:93:6c:e7:61:6a:
         67:4e:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----