Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9956FD14A1D711F192618EF3CE1D38B0.roa
File:                     9956FD14A1D711F192618EF3CE1D38B0.roa (raw, json)
Hash identifier:          REsb1yKZ0gFRVixzTK1BSsbpglBXLE/putgbROb5BNA=
Subject key identifier:   99:09:C1:BB:DE:8B:0A:85:AD:93:7C:A4:B1:CA:FE:D5:FF:2A:A0:E3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2168
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9956FD14A1D711F192618EF3CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 05:24:39 +0000
ROA not before:           Thu 27 Aug 2026 05:24:35 +0000
ROA not after:            Sun 27 Aug 2028 05:24:35 +0000
asID:                     214483
IP address blocks:        154.16.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8552 (0x2168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 27 05:24:35 2026 GMT
            Not After : Aug 27 05:24:35 2028 GMT
        Subject: CN=6a8fca17-c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:23:b0:6f:1c:33:78:ca:31:ec:64:22:39:
                    1d:ba:ae:a7:1c:5e:c0:8c:31:4d:3d:2e:da:93:72:
                    a6:52:5e:6e:67:51:6c:0f:7e:69:8c:95:2c:d7:1c:
                    d0:86:6e:46:1d:b8:dc:a2:c9:ff:41:bb:3d:55:02:
                    08:4c:fd:b6:a8:d7:92:49:e9:88:e4:83:47:1e:6a:
                    88:2b:e8:ae:94:df:5d:16:a2:dd:c5:6b:55:dd:e2:
                    a6:c9:6d:35:66:44:88:cf:c9:e7:e0:1e:be:5d:55:
                    3a:d3:47:55:2c:65:be:85:2d:8f:fe:ad:1b:0f:d4:
                    10:e3:d1:45:80:97:25:2f:11:b6:b4:80:e3:b1:c7:
                    d2:2b:0f:ec:8f:01:7e:46:bb:2c:94:1b:51:ff:8a:
                    84:be:92:69:ba:fb:e1:fe:00:81:c6:4d:4c:bd:0c:
                    73:b5:c1:07:ff:5b:df:85:ec:15:d6:59:06:c4:84:
                    83:52:0f:7f:6d:1b:ee:ee:47:28:87:85:fe:10:06:
                    05:da:51:fa:1d:1c:f2:33:1a:1a:29:45:a8:98:28:
                    b0:dd:68:63:d0:32:a5:c2:5e:96:3a:85:2a:ca:f8:
                    6a:98:fe:ab:c6:bf:8b:d0:6c:3e:6f:50:1a:84:17:
                    f5:40:6b:c9:57:5e:db:60:a0:b2:f4:73:7d:35:33:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:C1:BB:DE:8B:0A:85:AD:93:7C:A4:B1:CA:FE:D5:FF:2A:A0:E3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9956FD14A1D711F192618EF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:4e:4b:c8:b0:bf:18:80:72:d5:c1:ce:f1:24:95:a7:48:
         68:5e:48:59:f8:7a:83:29:a7:db:a8:f4:6d:8f:36:65:f9:ff:
         01:e4:b2:d1:fe:c8:49:52:1b:ce:88:b8:eb:a7:ea:c0:8c:94:
         36:03:92:8b:a0:4d:75:0e:a5:28:4c:ae:ab:4f:5c:0d:8a:2d:
         4f:e6:5e:dd:25:cd:64:7a:34:b5:2e:61:6c:4a:bf:87:36:27:
         93:a0:96:5e:a3:1f:c7:d3:98:ec:9a:50:5c:8d:3c:b7:88:f1:
         61:e7:1a:6c:42:18:a1:c1:49:9d:01:f0:56:4f:34:15:3b:7b:
         d0:6d:c8:96:f2:e6:b5:bd:a7:49:dd:49:e8:6e:2a:fa:fc:36:
         8c:cd:af:2d:fe:58:d8:f9:24:1a:07:6b:b1:0c:67:b9:3a:2f:
         08:65:9c:24:ba:72:1f:d0:d7:b5:ce:46:83:92:43:4b:5b:ca:
         d4:da:44:b1:43:f3:87:96:ff:1e:7c:98:a5:66:ca:68:3f:31:
         60:c0:e4:cb:46:cb:a4:bc:fb:f5:03:0e:0c:02:cd:b2:48:a3:
         45:8d:33:ce:fc:b5:4d:c8:e1:b2:4f:9b:b5:29:9d:d0:23:22:
         36:cc:9a:98:e6:d9:f7:5f:7d:03:3d:28:51:76:b0:90:20:8c:
         8d:5a:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----