Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34EC7E10BB4211F1BFA31CADCE1D38B0.roa
File:                     34EC7E10BB4211F1BFA31CADCE1D38B0.roa (raw, json)
Hash identifier:          efkLqIMZ8yl5pt2cbt7HvrFbXtKjjeSTy8qgJWJrULI=
Subject key identifier:   C7:9D:0E:AB:B2:1C:85:70:7D:F7:C7:2E:81:C8:85:B2:7F:B4:9A:C1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2230
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34EC7E10BB4211F1BFA31CADCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 13:40:46 +0000
ROA not before:           Mon 28 Sep 2026 13:40:42 +0000
ROA not after:            Thu 28 Sep 2028 13:40:42 +0000
asID:                     9009
IP address blocks:        154.16.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 01:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8752 (0x2230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 28 13:40:42 2026 GMT
            Not After : Sep 28 13:40:42 2028 GMT
        Subject: CN=6aba6e5e-6ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:3f:21:dd:8f:cf:42:80:50:10:10:5b:eb:
                    54:11:21:9c:5b:02:b2:39:46:de:18:ef:11:e6:3c:
                    26:29:47:5d:b1:c1:0a:2a:dd:a2:a2:80:65:87:b6:
                    2e:33:b0:c7:68:a5:81:2c:e8:4b:7f:f0:d1:32:65:
                    e3:cf:22:7f:6f:61:27:88:25:53:eb:87:44:df:3d:
                    fb:2b:9e:be:8f:fb:3c:09:bd:ff:59:8c:25:28:44:
                    e4:93:fc:29:47:f3:60:b0:bb:07:6c:b3:95:dd:ed:
                    35:a4:64:62:14:66:16:63:ba:3f:7f:56:b1:a4:b3:
                    f2:26:56:b8:10:49:90:c0:ae:28:87:dc:12:f9:c7:
                    4e:85:af:c9:b5:1a:9b:ed:5e:23:d1:50:d2:3b:7d:
                    c8:62:cd:02:e7:b0:58:41:3f:69:fe:ba:18:24:15:
                    a1:33:f9:06:3a:54:21:3a:d3:6c:87:bd:b7:f9:e2:
                    30:04:b8:a4:45:f2:32:51:75:e6:2a:69:8b:96:01:
                    62:e6:b0:f7:2e:14:aa:9a:37:1c:85:c1:a0:60:c1:
                    68:59:98:1b:d4:87:5b:e7:40:ec:57:e9:a5:4c:40:
                    26:e6:16:a1:f1:5e:dd:3a:44:05:46:9d:58:e2:9d:
                    a0:76:6e:cf:b8:9d:22:66:1a:a7:88:2f:a6:ab:3a:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:0E:AB:B2:1C:85:70:7D:F7:C7:2E:81:C8:85:B2:7F:B4:9A:C1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34EC7E10BB4211F1BFA31CADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:4f:72:91:3b:bb:54:19:bc:01:6e:95:86:f9:ea:ca:84:
         56:4d:b8:9a:0a:7f:b2:f3:c4:70:2d:6d:02:85:c5:51:36:52:
         14:e5:48:ec:56:02:c9:47:16:f4:c1:39:ee:fd:12:d1:25:59:
         5f:d7:8b:20:54:69:61:81:b2:82:67:e8:87:03:78:64:92:21:
         4f:fc:93:0b:28:73:cc:e1:de:ee:6a:fd:74:d7:da:be:ae:8d:
         0f:d5:3a:f8:c7:b9:7e:70:01:9d:5a:21:81:e3:82:a7:90:64:
         e7:bb:2e:cd:ed:a5:a2:1e:1f:3b:e6:68:ab:98:50:08:97:3e:
         7f:bb:7f:64:a2:7d:a2:6d:e3:be:aa:6a:c0:2b:9a:8b:2e:39:
         d4:af:75:b3:94:48:bf:c2:ba:b1:7b:ee:98:e4:50:72:f1:34:
         0a:f6:be:22:82:3b:1f:d5:dd:0f:45:d7:7d:50:3c:a5:39:81:
         fc:79:f5:1e:69:90:9b:48:ce:a1:44:97:8f:35:56:d1:45:ab:
         8e:d3:ed:e7:58:53:cf:9c:46:5a:85:ca:ed:ef:df:78:85:6d:
         3c:93:14:79:30:13:22:e0:aa:4c:84:cf:f5:21:ee:39:3b:1f:
         f3:24:f6:eb:f8:77:67:83:4b:46:52:5a:1f:2c:ac:aa:71:df:
         5b:e1:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----