Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6F2F73CD46F11F1A4FDA6CECE1D38B0.roa
File:                     A6F2F73CD46F11F1A4FDA6CECE1D38B0.roa (raw, json)
Hash identifier:          F4iGlgb1g7Z1DzK0FLsyNgc+9nXYxK7X1vc7IuJ1f+c=
Subject key identifier:   60:3C:E2:AB:C1:24:14:E8:6B:41:BF:52:5E:D9:B6:11:06:4B:F8:E1
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       06F0
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6F2F73CD46F11F1A4FDA6CECE1D38B0.roa
Signing time:             Fri 30 Oct 2026 14:39:04 +0000
ROA not before:           Fri 30 Oct 2026 14:38:59 +0000
ROA not after:            Sun 31 Oct 2027 14:38:59 +0000
asID:                     402447
IP address blocks:        66.251.172.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Oct 30 14:38:59 2026 GMT
            Not After : Oct 31 14:38:59 2027 GMT
        Subject: CN=6ae4ac07-9984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:8a:f7:3e:25:fb:4b:9c:2f:ed:21:3e:c5:
                    18:30:7e:f2:0e:4a:8b:e4:98:d9:c8:4c:ec:6b:1d:
                    34:d1:5e:a2:90:d8:78:7c:fe:da:e1:a7:58:22:8a:
                    64:13:f6:d4:5b:85:3e:8f:be:20:8f:1f:54:66:8d:
                    5b:59:40:11:d6:b8:d2:d8:e3:35:4c:ad:fb:d3:44:
                    6c:71:3f:18:df:c5:0b:7c:67:1e:de:dc:8b:84:70:
                    ee:ab:e2:e0:c8:44:a7:3c:04:bf:45:a2:12:ad:f9:
                    c1:d5:c5:27:56:45:85:9e:0a:04:8c:ce:e8:d7:ff:
                    5e:a9:e8:39:9e:21:e4:d8:9c:f6:63:13:fa:96:6a:
                    61:7b:c2:68:a6:84:7e:7a:bd:fe:28:b7:af:30:cd:
                    f3:ec:dd:0b:fd:90:28:c7:5d:9d:8d:e2:4a:fc:ee:
                    ac:ad:8e:28:56:33:c8:9b:53:74:f8:25:86:1c:99:
                    90:3e:3b:49:ac:10:42:af:eb:d9:b2:99:a8:45:c8:
                    71:cf:ad:14:21:2e:b9:ab:c0:8a:7f:e3:a0:f5:58:
                    1f:a3:d5:82:0d:c1:9c:89:46:f7:ad:4e:71:e9:ec:
                    0b:fb:6e:8b:59:4c:51:66:d7:ea:9f:fe:46:6a:01:
                    97:7e:b9:71:36:41:ae:76:4b:c3:44:b4:12:12:03:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3C:E2:AB:C1:24:14:E8:6B:41:BF:52:5E:D9:B6:11:06:4B:F8:E1
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6F2F73CD46F11F1A4FDA6CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.251.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:55:aa:24:59:08:2f:e5:fc:70:8d:7e:f0:44:5d:63:52:3a:
         db:ed:7d:dd:d3:f7:06:6c:e4:4c:1f:7e:9c:aa:39:be:5d:07:
         d9:6e:98:6b:01:a4:d2:e5:b1:10:f5:5f:67:ea:7c:8f:7b:d3:
         7d:ff:8e:61:ea:04:41:7e:77:a5:d1:54:86:03:92:98:a9:1e:
         4e:f6:72:81:6f:10:39:a8:dd:a2:4b:8b:c6:48:d9:f6:3d:d3:
         ac:11:ca:03:e6:91:14:73:80:53:a1:85:02:3e:2a:a5:9c:00:
         cd:82:1e:4e:23:39:94:21:0f:74:73:0a:0b:4a:9e:06:59:5d:
         50:f0:7e:7a:09:eb:86:0a:24:51:6c:22:57:c0:a0:dc:f2:fc:
         7b:12:db:03:0b:21:7e:a8:9f:9f:db:53:e5:7d:62:a9:82:7f:
         86:c7:02:b9:2b:30:af:7b:c9:e6:c5:e8:ab:52:c2:de:94:3c:
         a9:34:cb:50:38:d1:df:36:de:b3:6d:1a:29:69:fa:9b:83:74:
         63:41:a8:3e:db:27:de:e1:b6:b0:9a:8a:ca:71:80:bc:8c:67:
         86:be:f7:6d:53:4e:0f:c2:c4:ec:db:10:67:32:00:43:9a:00:
         c1:ec:e2:db:a0:f7:2a:52:49:fd:9c:87:e1:a8:bc:80:4d:63:
         e1:4b:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----