Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/817DEDCE9D7C11F19D4477C5CE1D38B0.roa
File:                     817DEDCE9D7C11F19D4477C5CE1D38B0.roa (raw, json)
Hash identifier:          3rIhATpyrsY7XRaR07p2/bejz6NtnktSRwREn6uuRpQ=
Subject key identifier:   4C:86:0E:3F:0A:3D:48:4F:65:84:47:84:89:ED:39:6F:9D:D8:02:2B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2140
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/817DEDCE9D7C11F19D4477C5CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 16:22:30 +0000
ROA not before:           Fri 21 Aug 2026 16:22:26 +0000
ROA not after:            Mon 21 Aug 2028 16:22:26 +0000
asID:                     402265
IP address blocks:        154.16.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8512 (0x2140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 21 16:22:26 2026 GMT
            Not After : Aug 21 16:22:26 2028 GMT
        Subject: CN=6a887b46-37e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:9d:18:9b:a8:56:30:18:22:a6:8a:19:87:
                    5f:f2:c1:aa:a9:50:5f:ab:75:92:f3:b7:6f:fe:bf:
                    16:bc:cd:ba:e2:1f:20:9c:14:13:14:dc:dd:64:28:
                    2a:cf:79:81:de:84:50:29:7d:f3:10:ca:42:09:36:
                    3b:14:67:df:70:4b:10:b9:da:8c:37:db:cb:e6:aa:
                    34:7a:0c:7a:01:1d:b3:ce:1a:52:fc:16:c3:71:65:
                    d9:59:ce:55:4e:24:7e:cb:de:f6:f9:06:4a:24:a3:
                    c4:1a:cd:b4:4e:5c:bb:d5:d2:fc:ee:61:2b:42:e3:
                    24:34:1c:2d:c6:bc:af:91:4b:24:80:09:c7:6b:b9:
                    21:5f:93:2e:71:8f:d9:b6:76:50:94:66:c1:fd:14:
                    46:f5:9f:94:d9:81:cc:50:f8:4f:d0:40:21:89:a0:
                    f3:40:dc:88:6d:95:9e:50:1d:f6:03:a9:c8:a4:ce:
                    0a:d1:27:4b:ab:48:6e:3f:5f:e1:f6:2c:68:9a:38:
                    55:6c:05:23:d6:d7:13:6b:5b:fa:43:b4:71:ac:6f:
                    e7:db:a4:c0:b7:5b:3f:c5:9d:fa:44:d0:50:3d:df:
                    cf:4d:2b:2e:8b:c4:04:de:bd:27:45:4b:42:27:af:
                    be:10:1a:df:d4:6c:5b:c3:f2:e6:57:c3:07:04:95:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:0E:3F:0A:3D:48:4F:65:84:47:84:89:ED:39:6F:9D:D8:02:2B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/817DEDCE9D7C11F19D4477C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:e7:f4:e4:48:92:a5:2b:61:9b:7a:38:37:ee:0a:d4:09:
         32:4c:db:4b:76:da:e0:a0:4c:fc:4d:5e:1a:37:8a:32:ca:5f:
         a7:3c:2d:4d:43:ba:f1:dc:37:27:f7:81:6f:81:fc:08:49:af:
         78:0b:3d:ac:90:b5:cb:90:42:c2:7f:d9:3b:56:ac:9a:d1:a1:
         2a:8e:21:b0:ac:d5:83:89:30:e1:1f:9a:a6:71:2e:f0:c7:b7:
         d2:14:3c:ea:c5:25:ab:29:6e:03:42:8a:ae:cb:a8:a0:45:03:
         ae:8b:e5:1b:7b:86:65:38:df:f9:fc:bc:9d:c0:4d:52:0c:25:
         84:ce:47:5e:4d:39:b0:7f:7e:97:f1:27:94:a3:ba:4a:79:51:
         c0:13:c7:5d:96:f9:a9:4d:f5:f5:b1:93:22:c5:7f:31:87:18:
         b6:37:da:45:22:71:5a:b4:69:56:39:57:49:57:36:7c:d4:d9:
         ce:e4:9c:c6:dc:a8:e3:2f:f6:4d:5e:20:92:03:bf:65:8b:98:
         7a:8b:d6:9a:15:0b:dd:33:17:4c:68:69:cc:f2:0d:4b:d6:83:
         b1:ee:91:c7:b4:e7:08:29:92:da:a4:94:d0:d4:60:d0:3a:cb:
         5d:02:22:f9:d8:73:52:42:92:34:48:7c:c0:3e:cf:8b:63:2a:
         11:f0:b6:c9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MjExNjIyMjZaFw0yODA4MjExNjIyMjZaMBgxFjAU
BgNVBAMTDTZhODg3YjQ2LTM3ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLD50Ym6hWMBgipooZh1/ywaqpUF+rdZLzt2/+vxa8zbriHyCcFBMU3N1k
KCrPeYHehFApffMQykIJNjsUZ99wSxC52ow328vmqjR6DHoBHbPOGlL8FsNxZdlZ
zlVOJH7L3vb5Bkoko8QazbROXLvV0vzuYStC4yQ0HC3GvK+RSySACcdruSFfky5x
j9m2dlCUZsH9FEb1n5TZgcxQ+E/QQCGJoPNA3IhtlZ5QHfYDqcikzgrRJ0urSG4/
X+H2LGiaOFVsBSPW1xNrW/pDtHGsb+fbpMC3Wz/FnfpE0FA9389NKy6LxATevSdF
S0Inr74QGt/UbFvD8uZXwwcElfg9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTIYO
Pwo9SE9lhEeEie05b53YAiswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgxN0RFRENFOUQ3QzExRjE5RDQ0NzdDNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMwwDQYJKoZIhvcNAQEL
BQADggEBACYK5/TkSJKlK2Gbejg37grUCTJM20t22uCgTPxNXho3ijLKX6c8LU1D
uvHcNyf3gW+B/AhJr3gLPayQtcuQQsJ/2TtWrJrRoSqOIbCs1YOJMOEfmqZxLvDH
t9IUPOrFJaspbgNCiq7LqKBFA66L5Rt7hmU43/n8vJ3ATVIMJYTOR15NObB/fpfx
J5Sjukp5UcATx12W+alN9fWxkyLFfzGHGLY32kUicVq0aVY5V0lXNnzU2c7knMbc
qOMv9k1eIJIDv2WLmHqL1poVC90zF0xoaczyDUvWg7Hukce05wgpktqklNDUYNA6
y10CIvnYc1JCkjRIfMA+z4tjKhHwtsk=
-----END CERTIFICATE-----