Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51F0045CA1D711F1A6123AF3CE1D38B0.roa
File:                     51F0045CA1D711F1A6123AF3CE1D38B0.roa (raw, json)
Hash identifier:          M0f+McNHErYV2PIYPKPQ+FiO1Lgw6v6o9ss9AlLlLyI=
Subject key identifier:   CD:D2:6E:9D:1E:CB:1F:02:BB:E4:A8:49:A7:5D:52:F9:0B:E9:C7:AF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2166
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51F0045CA1D711F1A6123AF3CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 05:22:39 +0000
ROA not before:           Thu 27 Aug 2026 05:22:35 +0000
ROA not after:            Sun 27 Aug 2028 05:22:35 +0000
asID:                     214483
IP address blocks:        154.16.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8550 (0x2166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 27 05:22:35 2026 GMT
            Not After : Aug 27 05:22:35 2028 GMT
        Subject: CN=6a8fc99f-6e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:5f:ef:f9:44:ac:6a:54:93:f3:05:2f:28:
                    c4:6a:29:29:50:c5:f5:29:3c:9c:90:6f:a4:09:3f:
                    0b:22:66:bd:96:d9:68:68:80:0d:a5:a1:db:86:32:
                    2a:87:69:e1:1c:b2:9c:e6:f4:b7:dc:64:7e:a8:09:
                    de:ad:d2:27:a3:d3:43:a3:c4:c2:f6:10:91:10:18:
                    27:c8:90:ac:06:1e:c6:6a:82:fe:cf:89:64:49:b7:
                    d2:c3:58:49:42:96:97:af:df:31:d6:23:d2:66:ea:
                    c7:04:65:f0:e1:37:69:94:15:91:90:20:0e:29:4a:
                    3e:e4:4a:23:b9:f5:58:69:9e:fd:ea:15:90:55:eb:
                    0d:1e:88:03:9f:5e:7d:0a:87:be:1a:26:ba:64:18:
                    50:2b:cd:57:2d:78:5c:df:14:e7:e1:46:21:44:05:
                    e3:e6:54:38:08:d3:29:ca:c2:04:ab:9f:a3:9e:44:
                    17:69:d9:cd:2d:c6:3b:b5:35:d0:91:f5:a7:de:e7:
                    08:eb:4d:1e:b5:ac:78:f1:3e:b6:39:fa:9f:4d:89:
                    ee:0c:d8:ac:59:83:3c:91:97:af:d7:e3:8d:38:1b:
                    e5:d5:d8:65:f6:c2:47:5c:17:dc:61:81:1a:a6:33:
                    bf:89:b9:8d:ba:66:01:53:ad:d9:d1:52:79:5c:59:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D2:6E:9D:1E:CB:1F:02:BB:E4:A8:49:A7:5D:52:F9:0B:E9:C7:AF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51F0045CA1D711F1A6123AF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:8c:23:fc:b5:fa:e0:89:60:62:91:ba:9a:22:f7:20:a6:
         e6:93:a0:3d:09:56:f3:b1:02:67:58:27:8f:63:d1:ad:73:ea:
         3f:fb:fc:df:df:e0:28:da:d8:35:8b:8d:ac:bb:0f:72:8b:3d:
         dc:3c:d9:77:df:fd:19:1d:2e:74:7c:d2:1e:ce:69:fb:1b:2b:
         60:de:f6:91:dc:78:e6:ac:9b:b7:53:90:b5:36:85:36:72:a2:
         b3:f6:d7:82:5e:8a:02:b4:f3:e5:bc:09:81:e0:25:a8:62:d1:
         a8:31:0f:f6:1b:09:14:63:4e:97:8f:00:04:82:7b:e8:17:26:
         d4:bc:37:3a:77:74:f1:d2:4d:19:94:f5:74:67:8a:b1:aa:c5:
         12:15:95:f2:9e:ef:ca:d6:99:d1:c8:9c:4e:9a:94:30:f2:a4:
         74:7e:49:38:d2:54:71:97:39:e6:22:5e:63:aa:1a:d3:57:3e:
         6e:ef:2a:e1:0a:ec:54:18:b8:31:97:01:4c:b0:32:0e:23:85:
         15:ae:66:dc:d4:9c:b7:c9:c7:9f:7a:28:55:b0:c4:f1:b9:eb:
         b1:39:1a:fa:50:9c:f8:2b:f2:ed:ba:62:fc:b8:b0:0a:d6:99:
         c2:30:1f:de:18:4c:d8:1e:9c:96:60:9f:04:b7:8c:4c:fd:21:
         a8:cd:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----