Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02869080B5A411F189EE650BCF1D38B0.roa
File:                     02869080B5A411F189EE650BCF1D38B0.roa (raw, json)
Hash identifier:          Yom/5Quv2pSe4PY6heePg7PfxbWniJU8ClY3bxEWnq8=
Subject key identifier:   F7:EA:55:E1:E2:23:CB:F0:99:B6:AA:2B:EE:08:66:0D:CA:B1:94:FB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21EC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02869080B5A411F189EE650BCF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:05:45 +0000
ROA not before:           Mon 21 Sep 2026 10:05:41 +0000
ROA not after:            Thu 21 Sep 2028 10:05:41 +0000
asID:                     834
IP address blocks:        154.16.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8684 (0x21ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 10:05:41 2026 GMT
            Not After : Sep 21 10:05:41 2028 GMT
        Subject: CN=6ab10179-4b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:15:9f:c7:88:e3:46:aa:c8:47:e4:b9:e9:
                    47:32:a9:b7:a2:e4:87:d4:91:67:77:ac:9a:da:4e:
                    8c:29:38:77:c9:8e:da:14:97:69:fe:b8:df:87:68:
                    f5:4e:94:a1:9f:97:b8:3b:6d:65:88:da:c2:79:4b:
                    6e:60:c6:57:75:4d:7f:55:06:8f:88:dd:1d:f2:e3:
                    25:cd:a4:6f:1f:fb:fb:c9:67:96:46:70:57:4d:4a:
                    21:c9:1a:25:f9:3f:68:dc:6c:1f:4b:96:d3:19:fb:
                    f1:11:a6:86:69:8a:96:2c:ae:53:f9:c8:92:42:2b:
                    e7:67:8c:54:3f:58:02:1b:98:ae:5e:c6:7f:f1:5e:
                    cf:d9:33:9a:ab:43:01:77:98:d6:d9:60:1a:c0:f7:
                    2e:3b:11:b9:89:fa:a8:21:8c:84:04:e9:71:69:7c:
                    2c:b0:54:59:a3:af:d3:d1:d9:9d:18:d7:86:e8:56:
                    52:21:e7:1f:eb:93:0b:cc:6a:89:08:8b:04:85:06:
                    f6:ef:43:cc:4c:1b:b8:08:1d:61:8b:bd:49:c6:aa:
                    7a:65:68:10:3b:7f:e2:34:6b:d0:75:33:ac:9f:36:
                    3a:29:5a:d3:5d:1f:35:58:20:dc:44:dc:d4:1e:78:
                    29:d7:8c:f6:81:30:c3:56:d0:5e:7a:34:be:57:5a:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:55:E1:E2:23:CB:F0:99:B6:AA:2B:EE:08:66:0D:CA:B1:94:FB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02869080B5A411F189EE650BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:fb:dc:a7:58:e6:4d:3a:40:29:61:b1:87:9b:e2:0e:35:99:
         d7:6b:dd:e3:17:e9:80:a1:e8:2b:83:36:53:07:5e:d3:9a:9a:
         cb:43:92:d6:c7:e3:bd:5d:b0:69:34:c8:12:ea:50:e0:ba:1f:
         1c:19:d5:02:9f:d9:0c:1a:bc:d8:07:73:f5:4d:d7:51:46:22:
         5c:62:eb:63:08:5a:2e:bb:16:c3:5a:63:6a:12:ea:79:94:e9:
         5e:69:6c:64:43:c4:47:a1:28:7e:18:2b:e9:1c:10:ca:8c:01:
         8a:10:39:f4:6b:37:4d:5b:3c:61:d9:b0:37:61:54:5c:cf:bc:
         82:2e:15:60:fe:b4:67:ec:32:fb:37:4c:e0:ec:35:f6:9b:ed:
         0e:80:95:9b:30:19:c4:e7:6b:bf:66:63:e6:87:f1:1d:91:cf:
         eb:2b:aa:46:9a:ea:c8:48:89:e1:10:d8:af:9b:f5:37:87:41:
         de:be:e5:09:d3:66:63:70:2b:b3:c1:8b:be:ea:6f:0d:a0:54:
         d4:28:8f:78:3b:bd:cc:7a:00:8d:16:c4:71:e4:96:dd:74:78:
         c6:f3:0e:dc:34:eb:b5:2c:29:be:c2:98:0f:20:9b:3f:4e:ee:
         87:00:12:0b:ac:e6:e5:e4:c9:00:05:62:8f:bb:4e:ba:60:7f:
         3e:35:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----