Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F09BB43AB5A411F18F650B12CF1D38B0.roa
File:                     F09BB43AB5A411F18F650B12CF1D38B0.roa (raw, json)
Hash identifier:          tC8f1Xk5ssbE+F1MeuJXFvnNrCzE6X4fD1AuX8iSR/E=
Subject key identifier:   44:AB:65:D5:80:2E:14:0D:15:C0:44:65:FD:03:24:69:1D:02:AD:DC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21F2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F09BB43AB5A411F18F650B12CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:12:24 +0000
ROA not before:           Mon 21 Sep 2026 10:12:20 +0000
ROA not after:            Thu 21 Sep 2028 10:12:20 +0000
asID:                     834
IP address blocks:        154.16.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8690 (0x21f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 10:12:20 2026 GMT
            Not After : Sep 21 10:12:20 2028 GMT
        Subject: CN=6ab10308-d272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:ef:d5:9c:76:f4:55:3a:b8:d9:fa:fa:23:
                    24:78:01:5a:43:9b:90:16:4e:1f:3a:9e:0c:9c:81:
                    16:e0:f5:a1:16:73:b3:a9:62:22:a5:31:16:af:34:
                    e6:11:7c:1c:f2:55:39:52:40:b9:2c:61:67:d8:41:
                    96:f8:b1:cb:68:72:ff:4d:91:b8:44:09:c0:77:30:
                    ef:b9:27:ad:aa:af:cb:ca:b9:83:50:25:54:ca:b0:
                    e9:9a:38:52:f5:7e:06:f5:44:80:6f:92:28:d7:54:
                    d7:bb:b3:62:a5:0d:9b:f6:f7:1f:97:b2:68:8f:33:
                    48:06:db:e4:24:50:58:ad:c5:e0:18:0e:2c:ef:2c:
                    81:3e:a3:0d:7d:e3:3d:63:7b:fe:d6:82:97:fe:d4:
                    0b:21:1b:e0:74:7a:37:68:6b:b6:41:2c:bd:4d:37:
                    40:a9:5d:5b:c5:5f:3a:cf:4d:f2:59:eb:5f:40:a4:
                    18:da:1c:1a:1d:73:ed:ab:d1:6c:54:d8:59:54:95:
                    28:3f:89:4b:55:7a:72:78:b3:09:5b:ce:ca:d6:d4:
                    79:b3:59:20:b2:81:1d:0f:33:78:f7:ff:06:fd:df:
                    63:f0:2e:12:89:5d:c3:dc:c9:32:7d:30:76:e7:7a:
                    5b:be:8e:d9:80:6f:76:17:53:f4:46:90:94:92:7f:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:65:D5:80:2E:14:0D:15:C0:44:65:FD:03:24:69:1D:02:AD:DC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F09BB43AB5A411F18F650B12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:18:80:82:ba:fb:fb:7b:08:c6:fe:69:14:e3:0b:8a:26:
         d7:4c:3e:21:25:fc:1d:35:43:ae:c4:1a:9f:9f:11:8a:05:dc:
         39:a0:96:69:cf:f4:d0:3b:e8:ea:b2:3f:e5:62:ee:8a:7d:8c:
         58:70:c9:02:b1:82:da:5d:ea:70:ce:cf:0b:ff:36:ab:eb:52:
         6e:08:74:00:11:75:3b:31:f9:d3:87:59:7f:ef:b1:b7:e8:0f:
         15:ec:59:ad:05:d9:fe:c8:01:7e:67:ba:50:19:ad:e8:37:52:
         5c:d7:24:fc:fa:a8:77:00:7a:bc:59:e6:a7:4a:89:1b:fa:b0:
         cd:94:c4:c1:98:79:6c:47:be:c3:78:3f:96:a1:8d:dc:56:4c:
         aa:23:c3:e1:37:df:bf:1f:dd:be:fc:8e:7e:57:9b:01:06:7b:
         1c:1f:70:f5:c8:7b:90:08:13:3f:51:a2:c6:05:5d:19:1b:4e:
         66:86:cb:39:74:a9:71:2c:dd:53:de:4a:99:d2:41:3f:09:d8:
         84:eb:29:8d:78:3b:11:ef:6f:d2:75:ae:24:ef:ea:ba:b8:62:
         37:f4:7b:69:96:bf:42:85:e5:77:fe:b6:e0:fe:05:b5:cd:fc:
         45:8f:1d:66:ed:fd:63:6d:22:fe:15:57:6c:54:ff:e4:e9:93:
         5f:5d:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----