Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/E4FD77E4B1CB11F1AD817706CF1D38B0.roa
File:                     E4FD77E4B1CB11F1AD817706CF1D38B0.roa (raw, json)
Hash identifier:          uICGBeopa56mAEq4BBSjya2Wk/H4T/vpIlsV1cTfWho=
Subject key identifier:   25:E0:E4:87:BF:06:BD:A1:19:C9:52:61:21:73:0D:ED:ED:56:2F:85
Certificate issuer:       /CN=F3657C0DAF/serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
Certificate serial:       02
Authority key identifier: 19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/E4FD77E4B1CB11F1AD817706CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 12:41:11 +0000
ROA not before:           Wed 16 Sep 2026 12:41:07 +0000
ROA not after:            Fri 31 Dec 2032 12:41:07 +0000
asID:                     329749
IP address blocks:        102.202.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657C0DAF, serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
        Validity
            Not Before: Sep 16 12:41:07 2026 GMT
            Not After : Dec 31 12:41:07 2032 GMT
        Subject: CN=6aaa8e67-52a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:a7:3b:b5:aa:1e:62:22:6e:4a:7d:55:20:
                    07:10:45:18:13:e6:fe:40:72:37:5a:1f:37:74:7c:
                    b0:10:80:cb:40:0b:b1:b4:af:54:91:95:48:d5:08:
                    3a:84:2d:f0:70:11:d9:e1:41:10:49:27:86:16:d7:
                    52:9a:c9:dd:3e:3b:e8:39:d5:7b:56:b9:45:ea:66:
                    b4:f5:f7:14:eb:22:01:f3:e6:ed:5c:9f:14:1a:99:
                    6a:7d:56:6c:f8:eb:be:1e:ee:92:94:58:60:bf:5f:
                    d3:fc:04:25:46:30:c3:b9:14:a7:aa:1f:e5:32:3b:
                    11:f5:af:51:67:b7:66:88:58:b9:c1:a4:97:79:eb:
                    52:25:08:67:f4:be:f8:65:f3:26:21:40:d9:5b:26:
                    9f:fc:fe:72:26:46:c1:16:41:2d:be:20:21:51:69:
                    75:23:06:cf:1b:c6:56:f5:74:43:13:eb:e1:79:ee:
                    d8:bb:14:87:94:ac:e6:27:0a:8b:7d:3b:33:05:f1:
                    ef:f5:95:4b:21:7c:9a:87:7d:be:af:ec:b3:ae:0d:
                    81:e9:fb:4d:ce:3a:a9:d2:b1:d6:29:03:e3:67:70:
                    85:cf:d2:9b:59:c1:d1:53:eb:ec:5e:44:7b:0b:bf:
                    7f:13:e6:07:ef:ab:ab:16:88:d0:4b:0b:81:4c:b4:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:E4:87:BF:06:BD:A1:19:C9:52:61:21:73:0D:ED:ED:56:2F:85
            X509v3 Authority Key Identifier:
                keyid:19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/E4FD77E4B1CB11F1AD817706CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:08:b4:dd:df:c5:a8:28:59:3b:b7:88:54:a5:f1:dd:2b:
         1e:b5:d6:4d:b3:e0:1d:51:2d:43:da:d6:26:cf:ee:62:6e:82:
         2d:30:25:f9:1a:a6:65:5b:6e:c7:a6:80:79:8e:a4:4f:95:65:
         5c:f0:f0:00:1a:89:e9:79:ed:de:a3:65:4e:31:83:51:ab:fa:
         94:34:83:2c:64:91:b4:26:ff:a5:14:dc:0b:ba:57:5e:3a:a0:
         f8:a0:b6:83:0a:42:42:1d:7c:83:d9:ae:a5:45:1f:ec:5b:ec:
         70:49:79:39:49:1a:0c:a3:78:63:7b:6f:3e:75:fd:3a:f8:a2:
         96:da:9a:ee:31:aa:86:b6:32:1e:fe:69:b1:90:24:67:ee:4c:
         f8:81:72:92:17:14:0a:1c:4e:85:b5:73:e3:53:67:64:0b:06:
         53:76:bd:26:77:4c:24:44:d2:10:c1:5f:ae:c1:61:50:29:5f:
         9c:32:4e:38:d9:91:aa:a9:d5:b5:f7:4f:dd:c0:06:9d:02:93:
         08:ee:f5:d7:b4:78:f8:5b:d8:b0:59:0c:9f:4b:0d:84:49:0d:
         71:3d:13:5a:81:ba:56:61:e6:94:83:21:c6:76:1f:eb:28:00:
         c3:d6:57:d7:4a:83:05:12:fe:0b:cc:25:11:28:87:bf:9c:92:
         b2:ef:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----