Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC06E82C9EBF11F18B5BB3BACE1D38B0.roa
File:                     AC06E82C9EBF11F18B5BB3BACE1D38B0.roa (raw, json)
Hash identifier:          oXO9Mny52GTPd8VqHRXX5UiBaIT9cE7qhIXgcyMoA2k=
Subject key identifier:   74:1F:73:89:A8:09:1E:C1:C0:1A:9B:F7:D6:E0:4E:17:34:96:78:54
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       214B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC06E82C9EBF11F18B5BB3BACE1D38B0.roa
Signing time:             Sun 23 Aug 2026 06:55:49 +0000
ROA not before:           Sun 23 Aug 2026 06:55:45 +0000
ROA not after:            Wed 23 Aug 2028 06:55:45 +0000
asID:                     214234
IP address blocks:        154.16.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8523 (0x214b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 23 06:55:45 2026 GMT
            Not After : Aug 23 06:55:45 2028 GMT
        Subject: CN=6a8a9975-9165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:f8:aa:ab:36:f0:ce:40:0d:29:e2:d5:78:
                    3b:4e:a6:93:c7:87:9a:d6:55:8f:23:20:29:79:4e:
                    4c:c9:c9:2e:01:31:a8:4b:bf:6d:6b:08:5e:04:cc:
                    2b:c4:af:fb:b1:84:8a:a6:0f:98:75:84:0e:ad:8c:
                    74:17:c0:84:e3:43:c9:07:4a:ef:e4:97:0f:04:64:
                    f7:ee:38:57:01:69:0c:8f:6c:b1:0e:ad:cd:fd:a4:
                    bb:28:b7:2d:ac:8b:af:4b:62:1c:8e:75:b2:04:86:
                    ef:99:6e:64:f9:3d:66:77:1a:ce:76:60:4b:87:8d:
                    a4:9a:ce:97:4a:e5:76:bf:6e:47:9b:39:b2:27:24:
                    e6:19:89:3d:37:17:88:1d:38:a2:67:8f:2a:09:d8:
                    04:df:03:75:d7:53:22:cf:c8:f9:23:87:15:1c:1d:
                    f9:fb:6d:30:22:53:c1:55:a3:9a:ed:21:f0:34:fd:
                    2a:30:f2:07:d8:54:b6:08:b3:29:3c:7e:7d:ee:bb:
                    aa:14:a2:da:70:98:93:96:4f:99:4f:d9:c7:16:a4:
                    cd:f9:c5:e7:68:9c:e0:1d:26:82:78:ba:99:ce:3c:
                    b1:43:a2:44:44:5b:64:12:15:49:83:d3:be:f0:0d:
                    ff:d8:d0:6a:85:06:2e:0d:cd:bf:26:c9:0e:09:93:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:73:89:A8:09:1E:C1:C0:1A:9B:F7:D6:E0:4E:17:34:96:78:54
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC06E82C9EBF11F18B5BB3BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:04:73:b9:df:88:7d:f9:b1:8d:0d:37:ec:9a:0c:16:6d:
         a0:02:48:9c:f1:eb:af:87:6a:53:3a:2e:57:b4:97:8f:fe:34:
         c8:8d:78:36:87:e1:d9:d5:f6:84:fe:86:67:59:7f:c1:1d:74:
         2d:2b:21:22:49:34:4e:97:ea:2c:65:ec:e3:06:11:77:74:4f:
         9a:0d:7d:8f:fd:5d:3b:4f:4f:b5:61:41:fa:9f:e4:8a:2c:35:
         e7:42:67:aa:ba:88:5c:56:35:bd:0d:e4:e0:33:a5:d3:98:45:
         c4:f3:9a:3f:98:91:6d:0c:f3:23:e2:de:cb:79:ac:1a:fd:49:
         0e:5d:47:ff:33:5e:ff:d4:c4:c7:a5:61:20:56:26:5c:b8:36:
         c8:73:41:08:57:52:00:e2:07:eb:2d:13:87:f9:bc:4c:11:82:
         84:c5:6d:d2:78:fb:f1:ee:82:6e:06:54:c5:af:4e:cd:9d:51:
         c4:b0:c8:39:7c:c6:07:e2:af:6a:9d:ce:7d:ab:46:9e:9b:23:
         80:7e:24:65:6e:73:b1:eb:64:10:85:44:b6:57:2f:a1:c9:99:
         17:94:19:34:31:d0:de:0e:4a:d4:74:5d:2c:d9:4d:1c:2a:09:
         bc:cf:77:6e:6c:27:0e:23:67:5a:65:d5:eb:1c:d0:34:5c:13:
         a1:83:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----