Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/C816F1F0D82211F1A0067701CF1D38B0.roa
File:                     C816F1F0D82211F1A0067701CF1D38B0.roa (raw, json)
Hash identifier:          r7Rt7DfF0WqHwRHvDT/qGN9RjGA27rhpQ0MqROBugkE=
Subject key identifier:   0A:1F:16:18:73:37:8A:6F:D6:72:F7:45:DE:42:D4:1D:1B:91:A2:1B
Certificate issuer:       /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial:       0787
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/C816F1F0D82211F1A0067701CF1D38B0.roa
Signing time:             Wed 04 Nov 2026 07:38:52 +0000
ROA not before:           Wed 04 Nov 2026 07:38:48 +0000
ROA not after:            Tue 01 Nov 2033 07:38:48 +0000
asID:                     60171
IP address blocks:        102.200.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C86AF, serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
        Validity
            Not Before: Nov  4 07:38:48 2026 GMT
            Not After : Nov  1 07:38:48 2033 GMT
        Subject: CN=6aeae10c-e8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:9e:74:db:74:e2:fb:a3:42:29:67:fb:07:
                    1e:e7:c0:98:cd:43:39:ea:6a:8e:c1:77:d6:ba:ff:
                    36:e7:4f:6a:f7:ab:0f:63:82:e3:83:9c:3a:40:b5:
                    c9:0d:68:b5:6d:84:02:be:5a:bd:31:98:22:02:1c:
                    1a:34:6c:89:ef:e0:5e:32:d9:33:5a:65:fd:77:d9:
                    ad:f6:1b:22:be:bb:df:f4:95:18:fd:a6:d3:3c:31:
                    eb:08:77:a4:d7:8c:db:ed:ea:33:07:5f:8b:bd:40:
                    9f:0a:28:3a:df:11:12:8d:db:68:b4:48:f3:33:bc:
                    86:f1:f4:ac:d0:9d:8d:e9:bb:70:35:82:c3:6a:65:
                    77:a4:18:fa:36:45:9b:ff:53:22:31:55:da:0b:7a:
                    dc:65:2f:85:63:02:18:86:60:61:1f:a2:2d:45:a1:
                    ff:c1:2d:13:5e:9d:ea:49:b1:b9:f7:76:9f:e6:24:
                    79:b7:a5:53:d4:23:47:d9:f8:6b:52:c8:31:0a:75:
                    cb:21:72:83:8f:92:f2:24:c3:0c:8e:06:ea:f0:cf:
                    e9:6f:34:2b:fb:7b:ca:93:0e:b2:9f:54:32:4d:ee:
                    5a:ea:25:01:a9:c4:43:e8:8f:bd:f1:bb:90:ad:55:
                    cb:7b:b1:43:9f:36:c1:98:aa:ca:7d:dd:b9:8b:ae:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:16:18:73:37:8A:6F:D6:72:F7:45:DE:42:D4:1D:1B:91:A2:1B
            X509v3 Authority Key Identifier:
                keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/C816F1F0D82211F1A0067701CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.200.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:a2:8c:cf:90:e1:13:b8:a7:ba:fc:b8:7e:04:f0:4b:d7:41:
         5d:6b:be:c8:5f:b8:d0:41:f9:09:c0:80:23:28:98:ba:e4:52:
         ab:79:e0:9a:c4:9d:7d:96:b0:27:b6:93:9c:0e:39:87:3d:c4:
         ee:7b:6f:80:01:bb:b1:a6:93:9c:52:c2:ff:cd:ee:96:40:fe:
         fb:1d:98:cb:4d:d3:82:30:be:74:f3:e6:13:cc:70:71:29:ad:
         fd:ae:cb:dd:18:9f:1a:f8:e8:58:f4:fc:fd:5b:8b:3f:e4:55:
         8a:d0:c4:b7:d9:04:90:e4:05:89:92:14:7d:99:d6:be:04:48:
         df:6c:cf:01:c4:f7:32:e9:6c:7c:10:ab:d5:a5:91:37:6d:1e:
         9f:e4:f6:b0:4a:71:25:c5:49:9b:a2:a5:6c:f7:81:88:93:d0:
         d6:0a:75:2c:9c:26:de:f8:17:28:12:47:93:ac:d2:38:bd:56:
         35:2f:98:b2:47:17:de:60:62:59:30:24:84:21:9e:c8:43:1d:
         67:72:5d:11:8c:53:e0:fb:26:3e:13:d1:44:e7:cf:4c:36:3a:
         99:81:04:16:42:06:78:6e:75:4e:81:1a:d3:27:8c:17:4e:6f:
         ea:3e:c9:c5:61:73:33:e0:0a:fc:6a:c4:65:89:01:2d:84:44:
         37:b5:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----