Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B02DE4A9D3C11F19901E9C9CE1D38B0.roa
File:                     7B02DE4A9D3C11F19901E9C9CE1D38B0.roa (raw, json)
Hash identifier:          2bOuyhCYgWMvdZBaw3OR/EpmdJO6Y4qJRrj3Dm+QGww=
Subject key identifier:   2F:BE:55:B2:D2:5A:BE:18:0B:27:F6:BB:83:A7:42:45:F2:41:E1:C9
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2133
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B02DE4A9D3C11F19901E9C9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:44:12 +0000
ROA not before:           Fri 21 Aug 2026 08:44:08 +0000
ROA not after:            Mon 21 Aug 2028 08:44:08 +0000
asID:                     219068
IP address blocks:        154.16.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8499 (0x2133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 21 08:44:08 2026 GMT
            Not After : Aug 21 08:44:08 2028 GMT
        Subject: CN=6a880fdb-37cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:6e:09:ef:6a:51:cd:21:80:a5:91:a9:1f:
                    5b:99:e3:67:c9:a9:50:17:95:e6:6f:1d:c2:e9:b3:
                    1b:79:a4:eb:76:dd:35:84:32:a7:d5:33:f7:20:67:
                    8b:04:f2:d8:69:aa:e6:0a:44:7c:b8:9f:df:cd:9a:
                    ed:11:ec:ec:6f:7b:ef:c4:6d:68:cc:f7:17:0e:48:
                    8e:18:6e:7d:94:bf:09:d6:a8:ad:8f:f9:eb:11:5b:
                    8f:51:8a:6a:89:f3:71:2b:73:3f:79:cd:46:32:0b:
                    35:37:0b:74:f2:c4:bf:04:cf:44:5f:73:c6:1a:4b:
                    1d:ec:00:8e:cf:a5:e2:9f:12:90:c2:25:d1:f6:42:
                    69:64:67:e6:92:eb:67:b2:42:47:d0:05:c4:d3:73:
                    44:40:7a:90:5b:1c:08:46:ae:f8:69:cf:e9:c1:85:
                    f7:66:09:0c:5d:a7:cb:74:b8:42:db:76:81:63:e1:
                    a6:e3:85:52:9e:e2:b9:bf:bb:e8:21:4c:95:bd:c3:
                    31:20:ef:31:4c:5d:c8:0e:95:b9:57:93:68:d3:cb:
                    d2:4b:9b:ec:6b:d5:ce:72:30:b7:c2:18:30:db:62:
                    48:36:f9:80:d0:31:7c:24:28:bc:34:53:b5:68:2c:
                    bd:e9:38:ae:bd:c0:73:01:2c:91:e4:87:88:7f:db:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BE:55:B2:D2:5A:BE:18:0B:27:F6:BB:83:A7:42:45:F2:41:E1:C9
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B02DE4A9D3C11F19901E9C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:77:ef:a5:6e:01:c1:2d:49:49:4d:c4:95:1b:30:45:be:
         64:b2:79:47:cc:8c:16:27:ee:2f:a1:1a:bd:c2:2a:19:b0:6d:
         00:d5:bc:72:6d:89:8d:ac:c8:e1:ff:03:67:a5:8f:ed:ce:b3:
         d0:f3:98:40:89:ee:5e:bd:0a:be:f6:18:76:46:54:35:f2:92:
         5a:2e:2b:65:d4:6a:40:a0:2c:7c:1f:2c:70:75:72:46:60:ec:
         a1:4e:78:58:e9:83:75:04:5f:03:0b:4c:2a:d7:ac:7e:59:6e:
         75:c4:51:42:83:76:e7:39:4f:a3:67:5a:91:50:e6:17:3a:ec:
         dd:9c:67:03:26:c9:20:20:ea:cd:20:12:b3:38:a5:e8:c7:ae:
         4c:07:9c:19:81:bf:26:99:86:7c:37:d7:28:2a:47:8e:f7:91:
         91:1b:41:20:2a:ca:4a:80:19:2c:43:e2:4a:99:94:cd:9e:12:
         19:88:b6:77:b1:a3:f2:9c:5a:13:37:39:75:60:be:96:58:ad:
         06:a3:e5:db:e6:ca:b9:d5:5d:b7:7c:03:e4:75:9e:94:0f:88:
         ba:d7:f1:c9:2b:78:04:a3:c4:1e:01:13:66:d9:cf:b8:19:7f:
         25:56:c8:ae:32:b6:57:f3:33:39:92:15:0a:27:04:5a:42:23:
         0d:cc:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----