Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AC4278EA91811F1BF2C41D4CE1D38B0.roa
File:                     3AC4278EA91811F1BF2C41D4CE1D38B0.roa (raw, json)
Hash identifier:          3GpqYXPr2lR+l6f0uHeF2pccj+spmtlAOOQrOT/iGeI=
Subject key identifier:   BC:85:63:8D:51:84:4D:EB:82:2D:9B:D4:8E:75:51:07:97:5E:07:05
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       218B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AC4278EA91811F1BF2C41D4CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 10:54:56 +0000
ROA not before:           Sat 05 Sep 2026 10:54:52 +0000
ROA not after:            Tue 05 Sep 2028 10:54:52 +0000
asID:                     834
IP address blocks:        154.16.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8587 (0x218b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  5 10:54:52 2026 GMT
            Not After : Sep  5 10:54:52 2028 GMT
        Subject: CN=6a9bf500-c917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:f8:1b:5e:6b:39:ca:e0:a9:9a:62:7f:77:
                    18:5d:37:e7:ee:c3:c5:34:87:ce:73:9f:31:8e:75:
                    d2:0c:86:d1:aa:3e:34:69:c0:45:d3:23:9e:30:18:
                    f2:ca:b3:4d:ab:ca:d0:56:b0:1e:0d:d4:46:c3:b7:
                    53:ca:a2:f2:ba:8d:b6:12:bc:cf:6f:51:81:0d:10:
                    7a:5f:41:1d:36:eb:60:3a:9c:f1:96:fe:48:24:1a:
                    23:6c:9f:29:b0:34:e9:2d:2c:d9:e5:b4:be:78:f2:
                    b2:33:1d:d2:ae:b7:75:cd:5d:f8:c3:e6:6c:16:f3:
                    f9:e2:bf:cb:f2:5c:0b:df:8b:d0:ae:df:29:3d:69:
                    d7:d2:9a:37:d0:ee:c8:44:32:14:31:b3:16:20:4b:
                    7b:b0:04:dc:e2:60:b6:8c:09:aa:d6:56:4b:8b:ce:
                    10:02:be:76:06:cd:b7:0d:df:3e:65:f5:6e:ba:bb:
                    5f:25:86:b1:39:7b:74:ce:79:c1:28:44:2b:07:55:
                    b5:10:fb:7d:09:5a:ae:b4:9a:52:f9:f4:8f:0a:74:
                    f9:b1:dd:00:9a:c5:80:d0:f3:81:82:4d:8b:97:6f:
                    22:45:25:a8:25:2e:3b:3f:ff:b7:d9:d3:d0:e4:5e:
                    c3:0c:f2:e9:87:f2:45:33:f9:68:0f:af:77:f9:87:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:63:8D:51:84:4D:EB:82:2D:9B:D4:8E:75:51:07:97:5E:07:05
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AC4278EA91811F1BF2C41D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:2e:41:7c:98:39:ba:dc:fc:3c:03:43:05:c1:86:c4:d8:
         15:89:d3:77:27:a8:8f:89:17:80:c6:42:49:aa:41:14:51:87:
         2e:09:a7:4d:1b:46:15:2d:d0:d7:11:4c:89:c9:2d:81:01:4c:
         a2:91:4d:5c:91:f7:a5:01:51:2c:85:20:9f:9c:a7:cd:ca:9d:
         eb:9f:f4:41:24:a6:50:f9:f0:b1:1a:c5:29:b8:c7:9f:ab:80:
         57:33:7f:46:72:8c:98:c4:02:be:38:86:ac:28:a6:e2:fc:25:
         3d:6e:41:db:03:bc:ca:a2:9f:49:63:c7:29:bd:ca:86:4c:43:
         78:73:bb:e8:60:82:26:d9:dd:08:30:77:f8:a0:74:c7:e3:25:
         74:30:72:bb:35:2c:01:70:0b:03:7b:cb:6d:5e:2d:3b:39:03:
         36:06:53:b5:ff:e5:81:07:3d:43:f9:bc:53:c7:0b:ba:be:28:
         35:d8:98:51:d6:48:b4:4e:0a:a5:f9:32:7f:5d:8b:28:67:ce:
         fd:b4:b0:df:7d:2a:2f:7f:55:42:07:42:b7:a0:a1:7c:34:c7:
         82:1e:63:40:84:1e:74:2c:b3:93:98:78:30:97:07:58:33:3d:
         8d:da:8b:4d:4f:1a:aa:74:12:a1:b2:b9:d1:c9:61:9e:58:40:
         f0:1c:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----