Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC9C403CB0D211F18D7086A8CE1D38B0.roa
File:                     FC9C403CB0D211F18D7086A8CE1D38B0.roa (raw, json)
Hash identifier:          k/s9trJBhXvSkhlaYlXjKM/iM3/L2UyEaFR6oC3LEmQ=
Subject key identifier:   2E:BF:8B:CA:63:CE:5A:D7:22:57:E5:F9:1B:77:8A:E3:6E:06:96:0A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21D4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC9C403CB0D211F18D7086A8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 06:59:26 +0000
ROA not before:           Tue 15 Sep 2026 06:59:22 +0000
ROA not after:            Fri 15 Sep 2028 06:59:22 +0000
asID:                     212238
IP address blocks:        154.16.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 17 Sep 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8660 (0x21d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 15 06:59:22 2026 GMT
            Not After : Sep 15 06:59:22 2028 GMT
        Subject: CN=6aa8eccd-c97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:5a:dc:06:76:3c:7a:c3:d4:61:99:f5:81:
                    08:99:65:66:c6:f9:8e:6b:86:52:7a:95:11:3f:b6:
                    88:e6:3a:4c:05:47:3d:6c:d5:4a:71:ca:ee:79:17:
                    70:22:09:ac:1b:63:97:3b:6a:d9:34:95:cb:46:0d:
                    ca:a8:e8:dd:03:97:c9:1d:37:11:fa:a7:6c:ca:78:
                    a8:fd:e0:cc:97:be:8a:68:46:09:f8:72:97:39:f9:
                    a5:6a:46:b8:ad:36:26:b5:24:19:d9:9b:ee:2a:70:
                    46:5e:1a:8a:74:95:bd:a1:ec:f8:32:6e:31:ba:a3:
                    d2:ee:ad:11:0c:9a:46:f0:05:d5:21:c9:7a:7f:b9:
                    4f:eb:e0:0a:50:c4:d0:f8:40:2d:ec:72:1c:c5:7d:
                    2f:ba:ab:a1:26:d4:c6:14:e5:10:68:7c:51:a0:80:
                    c6:9c:ef:a5:77:e1:aa:1f:d8:ed:77:d5:2c:07:a5:
                    e2:bb:8d:9c:f5:9d:fe:47:33:ed:c7:4c:78:8a:d2:
                    57:87:c8:3d:d0:dd:20:12:f8:37:24:60:71:b1:22:
                    61:2f:e1:cb:85:c7:7a:2d:f9:ad:4a:56:df:63:13:
                    91:f9:f7:00:d7:80:a0:06:39:ef:79:43:bd:d7:94:
                    87:eb:f3:c6:b3:16:74:43:b7:b9:ae:ec:d0:70:b6:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BF:8B:CA:63:CE:5A:D7:22:57:E5:F9:1B:77:8A:E3:6E:06:96:0A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC9C403CB0D211F18D7086A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:6b:55:c9:6a:d7:8d:8e:91:80:47:b1:9c:36:b0:e2:f0:
         df:a7:c3:18:db:a4:cf:88:5d:31:1b:5c:b4:d6:ee:0d:54:5b:
         9e:e8:69:85:1f:d1:33:09:ef:a0:c1:75:30:41:18:a9:1d:40:
         be:e1:6d:34:cf:c2:6e:a1:66:2b:64:fc:43:81:de:61:68:d8:
         b6:d9:97:63:50:15:f6:d0:84:e3:83:8e:a9:b6:82:94:ae:47:
         48:71:3d:a0:b5:15:19:41:d0:86:1b:15:08:d2:30:5d:64:94:
         b5:d7:b1:43:08:7b:bc:f0:6b:b0:5e:6b:bb:17:92:2a:94:84:
         5c:ca:7d:05:11:c5:a6:23:fa:b9:45:03:01:04:68:59:22:b6:
         58:25:31:a3:30:7e:3a:6c:24:07:6f:9a:77:d5:f5:90:a1:42:
         33:91:e3:28:e3:8f:b5:43:87:70:c0:37:94:05:bc:f6:28:46:
         fd:25:7d:fc:d6:04:05:f9:9a:96:0f:15:96:ab:af:3b:6b:99:
         b1:aa:fb:5f:1c:68:8e:1f:7d:32:3d:c5:bf:8c:81:51:31:15:
         64:66:9f:29:f2:6a:62:97:e4:8b:30:71:a0:6b:07:4e:3e:04:
         6c:c1:0b:75:f1:cd:01:a3:d5:b7:27:9d:ef:cc:39:d3:61:1f:
         d4:a5:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----