Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD7336A9B311F18B088206CF1D38B0.roa
File:                     FBCD7336A9B311F18B088206CF1D38B0.roa (raw, json)
Hash identifier:          w86NzWIsU8Ghz5wjWB1Q2jtE9DZ7d7gOMVA9iNaZ/CA=
Subject key identifier:   A2:C2:61:B2:9D:5C:57:01:F9:D6:31:3A:D4:E9:80:52:C0:22:CE:0A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21AD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD7336A9B311F18B088206CF1D38B0.roa
Signing time:             Sun 06 Sep 2026 05:29:52 +0000
ROA not before:           Sun 06 Sep 2026 05:29:48 +0000
ROA not after:            Wed 06 Sep 2028 05:29:48 +0000
asID:                     834
IP address blocks:        154.16.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Sep 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8621 (0x21ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  6 05:29:48 2026 GMT
            Not After : Sep  6 05:29:48 2028 GMT
        Subject: CN=6a9cfa50-1f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:55:00:4f:69:df:8f:c2:09:fb:e7:9f:ba:
                    9c:a1:a3:48:6a:e9:fc:cc:b3:c8:d8:2d:0a:27:78:
                    18:5c:04:e5:b5:e2:21:3e:bd:80:e4:08:de:6f:bd:
                    a9:61:a0:26:6a:59:02:15:cb:18:a3:05:30:dc:02:
                    99:ee:5c:60:bc:4d:92:c8:77:3c:fd:1d:01:9c:b1:
                    51:b6:52:06:db:e4:b3:05:5c:f6:55:bc:e1:03:a6:
                    01:aa:21:58:7f:49:eb:56:7c:8e:c2:4a:a1:9e:f9:
                    7d:ff:2d:34:e7:43:f8:d2:64:dd:61:5a:1d:8c:a2:
                    6b:a5:93:19:cc:fd:8e:cc:3e:33:04:d6:05:c4:1e:
                    29:48:7f:b3:6e:da:97:4d:4c:e5:ee:f7:ce:67:8b:
                    04:8e:ae:75:8a:b6:e3:95:ee:b2:de:b5:b7:72:8e:
                    7b:63:38:67:6c:ba:b6:58:41:1b:8e:34:9e:3c:b6:
                    a2:e9:c0:0a:2e:0a:9a:0e:1e:2e:43:a7:c6:97:5a:
                    01:e6:9d:31:ee:2b:95:82:bf:83:f2:82:e1:00:a4:
                    8f:8b:e1:2b:c3:56:bc:da:3f:ed:98:a0:52:59:86:
                    51:7e:39:ec:e4:99:fc:1d:7f:e0:87:2b:99:12:29:
                    b1:b2:5f:2a:35:b7:1f:26:7f:3d:6e:34:6c:4a:c9:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C2:61:B2:9D:5C:57:01:F9:D6:31:3A:D4:E9:80:52:C0:22:CE:0A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD7336A9B311F18B088206CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9d:2c:36:1a:44:a8:a8:69:99:4e:a9:b7:5a:9c:5e:34:66:
         10:67:21:b5:95:e1:f9:31:da:5a:fe:07:47:80:7b:f8:a3:20:
         bc:95:cd:03:f1:91:b6:2a:fe:4c:86:b7:3b:ae:7b:05:2e:6c:
         5d:7c:42:d1:53:1e:5e:00:72:1b:f6:d9:79:33:ad:64:5d:82:
         82:db:74:94:35:3b:11:0c:22:7b:00:0e:24:e7:4d:06:eb:c5:
         27:77:85:9d:db:cc:f8:30:a9:c6:df:3b:59:f9:31:64:0c:83:
         dd:bb:85:e1:20:a4:89:5b:a0:af:dd:d4:66:20:6c:ae:75:e4:
         ef:04:15:4d:2b:c3:8a:9e:dd:88:92:8f:d4:e7:64:9e:6f:2b:
         26:ba:22:6d:fe:4e:68:60:f1:90:2d:7d:3b:ad:d4:ee:03:71:
         b4:fe:5f:5c:92:4f:26:b5:02:11:0d:3a:47:2a:42:69:c4:e2:
         bb:14:19:d0:6e:7e:0a:76:62:01:45:fa:37:c8:af:af:0d:fa:
         bf:17:a3:4a:bc:32:c4:07:49:aa:99:19:6b:c2:04:a3:21:35:
         a6:ac:65:9c:d7:c2:a5:a8:c4:7b:61:5b:5f:ba:2f:78:f7:bb:
         a3:c5:80:22:51:d8:f3:99:07:5c:a0:46:af:88:33:0e:7a:29:
         ae:a4:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----