Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9383DEBEB0D411F197713DB1CE1D38B0.roa
File:                     9383DEBEB0D411F197713DB1CE1D38B0.roa (raw, json)
Hash identifier:          H1Svkk7Nf+WISSve/VSF8ErWEKKX3CoDU4aigwzmDiU=
Subject key identifier:   64:3D:33:9C:48:DB:1D:90:7E:00:21:0D:62:95:44:7E:18:E2:9A:08
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21DD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9383DEBEB0D411F197713DB1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:10:48 +0000
ROA not before:           Tue 15 Sep 2026 07:10:44 +0000
ROA not after:            Sat 16 Sep 2028 07:10:44 +0000
asID:                     61317
IP address blocks:        154.16.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 17 Sep 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8669 (0x21dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 15 07:10:44 2026 GMT
            Not After : Sep 16 07:10:44 2028 GMT
        Subject: CN=6aa8ef78-572c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:1f:5d:fa:11:44:6a:03:bf:6c:88:2f:01:
                    df:bb:33:b9:4f:c5:85:8a:28:0a:84:65:24:5d:0f:
                    5a:0b:7d:e0:fe:03:83:24:17:de:0c:bb:8b:ac:e7:
                    6a:d8:57:c3:95:01:fc:78:cf:49:72:5d:cc:3f:8a:
                    6d:d5:ce:19:90:d1:c9:23:28:68:9b:5c:6b:3a:0b:
                    15:7b:e1:0d:fc:e6:87:e8:5c:79:e2:99:5d:f1:bf:
                    fb:26:37:f5:f4:fd:ec:1b:bc:2f:6e:8f:8b:81:2f:
                    44:6c:20:be:51:9a:82:10:be:ed:93:08:2a:dd:ad:
                    fe:13:07:82:63:78:94:88:78:82:80:6d:44:b4:01:
                    09:16:34:1a:39:ca:ab:c8:e2:6a:f1:08:f2:c4:45:
                    8a:9e:49:63:c8:8c:17:c3:eb:6b:9a:d2:e4:db:39:
                    cc:83:05:c8:fe:ab:b0:0a:df:68:46:74:d9:2d:c5:
                    96:38:84:12:2e:d0:c6:5f:1d:c5:15:b6:1c:f4:3c:
                    f7:87:6f:2b:03:ab:99:92:c0:e3:a5:fc:08:20:7f:
                    3e:64:a5:7d:26:c4:fa:79:80:75:9a:1f:6b:94:c5:
                    23:9e:3c:33:1a:3b:ca:f2:88:65:56:8a:37:e8:4d:
                    01:06:c6:78:42:3b:bc:f2:43:22:ad:2d:08:0b:d3:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:33:9C:48:DB:1D:90:7E:00:21:0D:62:95:44:7E:18:E2:9A:08
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9383DEBEB0D411F197713DB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c1:14:34:0b:01:62:64:8b:73:ca:ce:5c:5f:0d:05:b7:4b:
         71:ad:ca:fc:73:ff:80:a6:cd:ba:3d:3a:9e:d6:de:10:08:d7:
         34:d6:32:c0:de:a1:c8:4f:34:5e:ad:9d:0a:86:68:b2:9b:7d:
         fe:7d:9b:0f:8a:f6:2d:40:fb:13:0c:89:c9:ff:4b:7f:16:54:
         0c:62:5e:36:5c:b6:51:0c:d3:e0:b1:f5:40:28:b7:79:93:23:
         c1:45:48:03:7d:47:6f:6d:a8:cd:e3:e1:d6:26:33:cd:1a:4f:
         a6:c7:d2:3d:34:03:c7:20:1a:af:78:13:dc:26:3f:6a:4b:cc:
         b7:5c:3e:be:df:0a:9c:7a:f7:62:00:30:15:ae:5d:01:bc:59:
         e8:14:f1:3d:f2:c7:75:75:4e:1f:e2:64:26:34:62:af:05:ff:
         ea:84:e0:d0:e4:8a:4c:70:ff:76:f3:c0:dc:6d:ad:c5:85:a5:
         66:5e:24:be:4f:98:bc:42:5f:61:0a:91:1c:2b:de:77:34:0d:
         3a:e2:4c:ed:b2:46:74:6d:37:3c:4d:c8:f6:63:3d:72:48:62:
         0d:ce:02:f7:a0:27:19:61:ac:fa:1f:55:e8:8e:3e:fe:db:c8:
         17:b1:7a:a7:cc:4c:17:15:ee:f1:61:b6:d3:bf:06:5d:3b:0e:
         97:9a:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----