Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2322FABB4211F1850256AFCE1D38B0.roa
File:                     6A2322FABB4211F1850256AFCE1D38B0.roa (raw, json)
Hash identifier:          +vCs3CdEZ5QV/cFFQ6bxGCfRTlRI3GX6eBM9gXEZZyI=
Subject key identifier:   A3:CE:7D:7F:91:A2:A0:A4:D1:DE:C8:0B:2F:2C:BB:15:19:8B:F8:1B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2232
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2322FABB4211F1850256AFCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 13:42:15 +0000
ROA not before:           Mon 28 Sep 2026 13:42:11 +0000
ROA not after:            Thu 28 Sep 2028 13:42:11 +0000
asID:                     9009
IP address blocks:        154.127.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8754 (0x2232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 28 13:42:11 2026 GMT
            Not After : Sep 28 13:42:11 2028 GMT
        Subject: CN=6aba6eb7-158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:a2:c8:a5:bf:53:45:86:98:0f:e9:17:c4:
                    05:5d:9c:3a:f1:f0:f7:16:23:8c:9e:06:9b:ef:15:
                    c6:38:be:0a:1d:f0:f7:17:8c:71:1a:9e:38:fa:b0:
                    f2:fe:65:42:30:d5:7d:fa:f1:6e:b8:da:ae:2c:f2:
                    bd:d0:28:ab:2d:13:80:07:64:5b:fb:e1:cd:50:6d:
                    6b:1d:51:37:79:e5:eb:2b:f9:84:51:d6:99:18:f0:
                    23:4d:c1:1f:d3:53:18:a0:58:0a:f3:a1:03:95:0c:
                    7a:fe:f1:b3:76:cb:65:10:69:43:ed:ce:d0:63:a8:
                    c7:75:0b:62:60:98:d5:a0:99:86:93:20:ed:43:89:
                    71:ee:d5:d9:a4:af:57:67:45:18:de:26:2e:56:f0:
                    19:f1:6c:1b:e1:f9:fe:f2:31:89:99:e4:b0:07:4a:
                    65:f0:62:fe:be:92:8d:9f:f2:12:24:9d:20:5b:50:
                    ba:ad:bf:18:0c:1d:c6:3b:27:5a:6e:40:fc:f9:22:
                    8d:a4:bc:bf:63:c5:dc:04:63:4c:25:41:2f:e2:d4:
                    0b:c6:ac:c2:02:ec:98:15:ca:23:97:48:69:f6:c5:
                    43:9c:6f:95:1c:34:17:9d:ce:75:3e:4c:2c:f0:a6:
                    eb:1f:e8:b9:b4:92:38:27:a6:77:7e:3e:3c:10:0c:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:7D:7F:91:A2:A0:A4:D1:DE:C8:0B:2F:2C:BB:15:19:8B:F8:1B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2322FABB4211F1850256AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9a:9b:56:df:f0:91:0e:8f:a4:d2:a1:fd:c0:01:f6:3f:e5:
         24:59:23:dc:4c:e7:72:6d:23:3d:b8:9a:b1:24:20:85:3d:33:
         6f:57:19:dc:e3:7e:d9:86:49:8d:72:10:8e:b5:fd:40:8d:f5:
         d9:21:89:cf:e1:18:90:df:8f:65:50:45:bd:fd:14:11:1c:b1:
         3c:02:eb:ed:2b:37:4e:44:36:35:b5:14:6a:7b:18:b7:cf:1b:
         b1:7e:ee:b4:68:00:4e:fb:06:72:f7:c8:1d:32:23:9a:0e:50:
         0d:ff:46:73:b3:92:e2:93:a3:a3:28:99:fd:df:7e:2b:49:11:
         11:57:37:17:56:92:29:32:23:12:c3:13:d3:52:89:1a:09:6e:
         e6:2d:fa:67:b7:88:71:cb:ff:1c:d9:94:1d:5a:6f:69:1e:3c:
         c4:57:95:43:d4:87:d8:0c:04:f6:54:d3:8b:7b:96:0a:c0:bf:
         72:d6:0c:f1:44:20:9f:d3:eb:ce:fd:28:a2:7e:1a:24:a1:bd:
         89:ae:51:09:e5:0e:78:51:3f:6a:e5:eb:f1:ce:51:aa:7d:e8:
         5e:fe:f2:99:ac:33:42:c6:a3:76:2f:d5:09:97:75:8e:a1:c6:
         4d:45:27:09:dc:da:d8:8b:11:b8:88:92:62:54:86:50:97:07:
         8f:e4:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----