Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B051012685B311F1B2C404BACE1D38B0.roa
File:                     B051012685B311F1B2C404BACE1D38B0.roa (raw, json)
Hash identifier:          gsurviu/0vLadN/mFZboxRzeVy9d+PPyQzDjF2WlsYI=
Subject key identifier:   06:6B:C4:9B:58:C0:8F:02:AC:33:CF:31:29:F5:D6:B5:97:41:31:D5
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2075
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B051012685B311F1B2C404BACE1D38B0.roa
Signing time:             Wed 22 Jul 2026 09:57:03 +0000
ROA not before:           Wed 22 Jul 2026 09:56:59 +0000
ROA not after:            Sat 22 Jul 2028 09:56:59 +0000
asID:                     202736
IP address blocks:        154.16.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 Jul 2026 12:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8309 (0x2075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 22 09:56:59 2026 GMT
            Not After : Jul 22 09:56:59 2028 GMT
        Subject: CN=6a6093ef-558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:37:e0:90:93:0f:be:d1:d8:61:fc:7f:d2:
                    2c:c9:82:5a:1c:8d:8d:3a:d7:30:59:a7:b0:05:fe:
                    52:26:d9:01:80:f9:89:65:e9:74:17:17:a6:8a:3d:
                    aa:90:37:e2:19:c9:56:f4:2a:0a:63:24:8c:46:9d:
                    2e:8b:de:cb:12:d9:ac:57:89:c6:c1:c4:cd:88:6d:
                    39:7d:b7:23:c0:03:64:24:be:47:d4:a3:f0:f6:42:
                    d5:ed:bb:02:94:1b:54:b6:54:96:9e:58:90:e0:02:
                    b7:92:84:52:04:32:58:81:c0:28:b2:9c:eb:94:9c:
                    a5:1d:02:4d:40:45:24:37:26:c1:1f:df:00:cd:8f:
                    e8:0e:d7:22:c1:78:84:2a:82:2d:ad:23:41:bb:61:
                    c9:34:c0:11:b3:a4:31:26:3d:b6:1c:fe:a0:3a:b0:
                    55:cb:b2:89:aa:13:ef:05:8f:82:33:3c:2d:4f:b7:
                    84:5d:71:5f:d4:7d:75:87:9e:e7:1b:57:b9:6b:bc:
                    0e:54:8a:28:25:fc:cd:97:6b:8c:93:f6:69:a1:07:
                    e1:fe:30:0a:c7:5a:f6:35:f3:89:c2:eb:4c:60:e8:
                    9a:7e:f0:df:75:83:43:48:01:62:e5:c3:95:cc:1e:
                    f6:85:a8:77:22:1f:01:17:b3:98:55:7b:db:ed:e3:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:C4:9B:58:C0:8F:02:AC:33:CF:31:29:F5:D6:B5:97:41:31:D5
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B051012685B311F1B2C404BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:40:e7:f0:65:d8:df:8f:e1:60:77:51:ed:06:07:b3:9b:
         66:91:fe:bf:12:79:d2:85:a5:e9:4c:c5:c7:4f:d9:97:2b:9c:
         d6:6a:10:d3:da:1b:92:72:ba:aa:4d:29:e1:1e:7d:78:fb:a1:
         56:fd:c1:90:0b:67:f7:5a:05:bd:71:88:af:06:34:77:aa:67:
         34:5d:f7:20:4e:dd:27:b2:b5:67:49:e3:7f:4c:4e:0b:e3:4e:
         a6:1e:4c:e7:a4:5b:9b:fd:a5:66:68:b1:83:77:e6:c2:59:c6:
         76:1c:c8:de:f2:36:a2:ee:2b:4d:2e:91:86:c6:a3:44:97:8d:
         10:04:ab:d3:f0:f2:e7:4e:eb:9a:0c:fe:1e:20:cd:4e:3d:c6:
         cf:be:12:57:57:08:ca:6b:40:49:3e:7a:b7:88:19:c0:54:14:
         fa:6c:8b:87:01:7c:1f:fb:72:f5:be:df:75:ee:e2:8d:c7:ea:
         cc:82:41:20:2a:2b:72:d2:f5:ea:10:26:2a:e6:f8:27:29:01:
         32:b9:6c:7f:ae:b8:82:fd:5d:74:6a:0e:bf:63:83:3f:56:3d:
         71:ae:10:32:89:29:50:3d:7c:cd:ce:f4:3a:47:4e:09:ae:d6:
         cb:a4:3e:ff:e1:56:a9:e7:be:bd:79:da:b6:d3:55:25:ab:62:
         e4:69:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:41 2026 by rpki-client