Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03B95F06A9D711F1A4A22CD8CE1D38B0.roa
File:                     03B95F06A9D711F1A4A22CD8CE1D38B0.roa (raw, json)
Hash identifier:          29TQeym2LSmnUKGY2gpeTV17BF3Jb2Tdk4HuUnzx/yo=
Subject key identifier:   47:6A:26:5D:D9:24:E7:80:9D:06:76:7E:44:9F:1B:DF:56:6B:B0:1C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21B6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03B95F06A9D711F1A4A22CD8CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 09:40:37 +0000
ROA not before:           Sun 06 Sep 2026 09:40:33 +0000
ROA not after:            Wed 06 Sep 2028 09:40:33 +0000
asID:                     834
IP address blocks:        154.16.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Sep 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8630 (0x21b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  6 09:40:33 2026 GMT
            Not After : Sep  6 09:40:33 2028 GMT
        Subject: CN=6a9d3515-e31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:2d:26:f5:a5:f4:e2:0d:8d:77:19:da:33:
                    65:ae:66:91:b3:49:7b:0c:35:89:d8:85:38:6e:3c:
                    c4:8b:17:fd:ad:17:ce:f0:38:b6:d1:ee:d8:88:4a:
                    e9:3d:9d:43:53:6f:11:9e:47:7f:5f:68:3d:b8:63:
                    4b:35:60:e5:c1:6e:75:1b:2b:1e:8d:20:9a:61:c1:
                    61:d6:8e:4c:5c:08:87:36:37:7d:8d:e6:7c:d9:7b:
                    60:ff:c0:b2:9b:e4:61:44:73:e9:30:28:d5:4d:85:
                    9c:e6:e7:e0:47:0f:aa:6a:0c:67:d2:04:44:4e:14:
                    b7:18:a4:2b:52:00:2c:3b:0f:1c:3d:58:b4:6b:d4:
                    72:f6:a4:9f:26:18:16:dd:7c:96:52:30:1e:61:9d:
                    a0:53:85:0a:ed:ea:5f:fe:6c:81:61:8b:2a:70:02:
                    23:3c:09:75:6d:3d:fb:67:d9:b1:6e:10:e7:25:9f:
                    80:11:38:ed:88:9d:74:04:96:6a:3c:84:8c:d1:cf:
                    5f:d3:df:25:f4:7f:2a:31:f4:b8:c9:fd:94:89:65:
                    3a:e5:49:48:22:f8:cb:41:a2:16:89:29:85:0e:7d:
                    f9:f0:f4:11:9e:c0:35:e3:93:20:32:3a:22:cd:2a:
                    15:83:86:6c:b5:8e:04:d9:bc:4a:26:5e:37:90:16:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:26:5D:D9:24:E7:80:9D:06:76:7E:44:9F:1B:DF:56:6B:B0:1C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03B95F06A9D711F1A4A22CD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:9d:96:19:74:75:32:e2:66:af:ab:98:1c:3a:0e:82:6c:e3:
         c5:64:ea:b4:c4:7a:74:5a:d7:ea:73:6b:60:fd:53:4c:c4:d3:
         20:c8:67:a9:ff:7a:7b:c5:1c:27:a9:34:62:b0:d4:f5:52:74:
         d9:45:94:30:1b:dc:44:7d:67:63:e4:f7:ec:4c:39:40:9c:73:
         40:ab:fe:b9:91:8f:16:4a:a4:ce:d4:ca:2b:48:bf:e4:ff:19:
         c8:a1:95:1c:d4:30:e5:32:9e:fe:fb:bf:83:93:82:6d:86:12:
         65:03:1b:8e:1b:08:de:da:83:27:f4:db:60:64:2e:a6:39:52:
         74:22:89:92:33:4a:d3:77:96:5f:25:5e:94:3e:40:82:9e:6a:
         a9:e2:5f:3c:4a:de:4c:e2:4a:64:8b:dd:5a:6f:59:c2:58:7a:
         06:ad:82:da:fc:51:95:fc:62:30:12:89:f8:de:c1:f2:fe:0d:
         ff:d2:95:0d:03:e0:73:1f:be:e7:9a:76:a2:f9:69:c7:0c:35:
         09:1e:0f:29:c2:92:cb:70:9a:06:26:b5:33:eb:51:ea:5b:86:
         fc:83:5f:7f:42:14:ec:09:58:bb:c1:53:0d:3d:88:bb:ae:9b:
         5f:c2:9d:40:50:d2:34:7a:a3:94:fe:38:b3:cd:91:1f:c7:72:
         ee:1f:3f:64
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MDYwOTQwMzNaFw0yODA5MDYwOTQwMzNaMBgxFjAU
BgNVBAMTDTZhOWQzNTE1LWUzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHfy0m9aX04g2NdxnaM2WuZpGzSXsMNYnYhThuPMSLF/2tF87wOLbR7tiI
Suk9nUNTbxGeR39faD24Y0s1YOXBbnUbKx6NIJphwWHWjkxcCIc2N32N5nzZe2D/
wLKb5GFEc+kwKNVNhZzm5+BHD6pqDGfSBEROFLcYpCtSACw7Dxw9WLRr1HL2pJ8m
GBbdfJZSMB5hnaBThQrt6l/+bIFhiypwAiM8CXVtPftn2bFuEOcln4AROO2InXQE
lmo8hIzRz1/T3yX0fyox9LjJ/ZSJZTrlSUgi+MtBohaJKYUOffnw9BGewDXjkyAy
OiLNKhWDhmy1jgTZvEomXjeQFpShAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUR2om
Xdkk54CdBnZ+RJ8b31ZrsBwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzAzQjk1RjA2QTlENzExRjFBNEEyMkNEOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPEwDQYJKoZIhvcNAQEL
BQADggEBANOdlhl0dTLiZq+rmBw6DoJs48Vk6rTEenRa1+pza2D9U0zE0yDIZ6n/
envFHCepNGKw1PVSdNlFlDAb3ER9Z2Pk9+xMOUCcc0Cr/rmRjxZKpM7UyitIv+T/
GcihlRzUMOUynv77v4OTgm2GEmUDG44bCN7agyf022BkLqY5UnQiiZIzStN3ll8l
XpQ+QIKeaqniXzxK3kziSmSL3VpvWcJYegatgtr8UZX8YjASifjewfL+Df/SlQ0D
4HMfvueadqL5accMNQkeDynCkstwmgYmtTPrUepbhvyDX39CFOwJWLvBUw09iLuu
m1/CnUBQ0jR6o5T+OLPNkR/Hcu4fP2Q=
-----END CERTIFICATE-----