Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22CF37D89E0811F197920B1CCF1D38B0.roa
File:                     22CF37D89E0811F197920B1CCF1D38B0.roa (raw, json)
Hash identifier:          Z40Lj5GwVS1AUYgZ3aCO6mRda+oGu8yRnaIVLiXZhVs=
Subject key identifier:   A8:61:BE:D7:F3:09:49:4B:2D:12:F9:70:41:55:A0:01:C1:69:E1:6F
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2147
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22CF37D89E0811F197920B1CCF1D38B0.roa
Signing time:             Sat 22 Aug 2026 09:02:01 +0000
ROA not before:           Sat 22 Aug 2026 09:01:57 +0000
ROA not after:            Tue 22 Aug 2028 09:01:57 +0000
asID:                     834
IP address blocks:        154.16.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8519 (0x2147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 22 09:01:57 2026 GMT
            Not After : Aug 22 09:01:57 2028 GMT
        Subject: CN=6a896589-a962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:05:b2:52:5d:dd:13:76:1a:d0:b0:73:31:
                    38:73:54:74:d3:b5:96:ac:b6:71:5e:28:39:19:17:
                    2e:4f:e1:46:e2:9c:c3:6f:0b:4b:c5:91:16:4d:48:
                    a8:0e:40:c1:d3:cd:38:45:d0:56:be:60:77:ef:f8:
                    e0:b2:be:30:23:63:5c:a6:45:b5:17:4b:51:99:19:
                    43:04:3b:26:c7:30:40:d5:d2:9b:0b:6d:26:4e:f8:
                    a6:ac:95:5c:fa:0a:50:9f:5c:bf:07:7b:7e:92:02:
                    72:73:b0:ba:04:8d:37:09:92:c2:cc:82:8b:72:73:
                    06:c7:18:23:3e:55:f4:81:80:ff:75:6f:f8:95:f5:
                    67:36:91:9b:31:89:e4:35:66:c0:c6:8f:96:d0:48:
                    ba:30:36:c2:2f:ec:e4:eb:16:52:42:3b:70:cf:2e:
                    37:dd:e3:e3:32:c6:b8:54:8a:a8:d7:6f:37:be:5b:
                    6e:b5:42:62:92:76:50:7b:13:d4:42:05:ae:21:ce:
                    1b:0e:6a:69:e8:d5:20:ab:45:d4:94:ac:38:cd:94:
                    e2:da:cf:06:a7:1b:e8:52:07:bb:9e:eb:e0:84:82:
                    16:a7:b2:59:c3:33:4e:de:1c:ab:96:08:05:8c:12:
                    b7:8f:bf:d2:d6:24:38:3c:0d:fd:18:70:4f:65:68:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:61:BE:D7:F3:09:49:4B:2D:12:F9:70:41:55:A0:01:C1:69:E1:6F
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22CF37D89E0811F197920B1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:2d:27:25:3b:1f:e1:17:7d:16:b4:32:3e:60:4b:95:b9:
         24:ff:f4:05:b0:33:c5:af:a2:54:17:94:55:dd:ef:73:68:af:
         32:a0:68:73:81:0e:24:3e:36:a0:0a:bf:a5:aa:5c:38:ff:69:
         77:84:8b:5d:22:58:a1:30:99:eb:42:ca:f6:a6:8d:ed:6f:32:
         f0:63:3d:26:f3:ae:09:75:5e:b4:55:ab:00:ce:f6:15:4b:45:
         c5:7a:6c:da:a8:76:21:5f:61:9a:6a:43:b6:cb:39:61:8a:98:
         66:fa:46:bc:cb:d0:89:f1:9c:d5:56:32:e2:0f:a4:c3:58:d5:
         34:5d:d7:38:19:98:da:d6:7e:ee:4b:90:2f:fc:11:6b:ad:fa:
         da:79:37:14:52:d9:2a:44:70:cc:43:7f:ba:50:7a:34:56:7c:
         06:71:45:c1:7f:4a:14:12:d9:9b:79:2f:47:cb:be:21:e4:53:
         61:1c:7f:38:e0:4a:33:b7:65:99:62:6f:4a:51:d2:d9:70:63:
         57:f2:54:b3:be:fd:9c:51:2b:6f:13:13:1f:cc:d9:39:ae:23:
         8f:06:6a:11:3b:de:c4:27:1a:35:dd:da:07:05:23:a6:70:66:
         f8:55:e6:39:fc:78:cd:4e:17:a2:95:71:3e:ac:1c:e7:2a:0a:
         74:dd:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----