Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1BED8AF8B68311F1B8C667B9CE1D38B0.roa
File:                     1BED8AF8B68311F1B8C667B9CE1D38B0.roa (raw, json)
Hash identifier:          covh3WoN2tvbYfQMfmyfyzjkX92GLbpiiBumDEeOSgM=
Subject key identifier:   12:74:8B:9A:C9:8A:99:9C:7E:B7:54:BE:97:1B:8C:AA:A4:9B:43:73
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       220E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1BED8AF8B68311F1B8C667B9CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 12:42:45 +0000
ROA not before:           Tue 22 Sep 2026 12:42:41 +0000
ROA not after:            Sat 22 Sep 2029 12:42:41 +0000
asID:                     146813
IP address blocks:        154.16.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8718 (0x220e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 22 12:42:41 2026 GMT
            Not After : Sep 22 12:42:41 2029 GMT
        Subject: CN=6ab277c5-7d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:16:ef:00:99:c3:ea:25:ac:c5:6c:5b:64:
                    53:9e:ce:d1:ed:8d:45:87:51:a5:a0:cf:b3:5e:09:
                    df:fd:7a:ab:cc:1b:df:85:0d:7f:fe:ec:ff:cc:2b:
                    d1:f5:63:07:9c:5f:31:31:98:16:bd:92:e4:77:b6:
                    6a:ff:a0:75:0c:fd:70:2a:2a:16:c7:72:5e:fe:0e:
                    90:91:f3:3f:e3:e5:2e:ff:4e:ee:08:6a:bf:be:7c:
                    50:da:48:39:b1:f8:c7:25:c7:37:2e:4e:e7:18:6c:
                    4e:9e:2d:55:c5:a3:4e:8a:a2:dc:23:5e:0d:03:4e:
                    3f:a9:bd:90:d8:6f:ae:32:79:9c:5d:7b:f9:80:72:
                    bf:82:4c:4d:8e:30:bd:48:a1:57:2d:d3:92:c6:b8:
                    0a:2e:f7:91:47:7b:00:db:b8:00:86:7f:4f:0d:63:
                    12:0e:c8:ca:b0:a3:86:91:e0:9b:5a:b1:7e:2c:9b:
                    32:22:36:51:66:94:0f:1f:4b:7f:62:2f:c7:cb:64:
                    85:c5:a8:f5:46:93:1d:19:bf:06:24:34:ef:de:e1:
                    99:18:9f:6e:16:d9:49:12:a5:62:26:cf:42:19:94:
                    67:f9:f2:d9:f2:cf:11:38:04:66:a5:45:1f:02:57:
                    a0:bc:b2:ae:b4:87:94:f5:56:c5:ac:1b:51:f4:e5:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:8B:9A:C9:8A:99:9C:7E:B7:54:BE:97:1B:8C:AA:A4:9B:43:73
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1BED8AF8B68311F1B8C667B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:41:e5:3c:82:8d:14:43:dc:37:7b:74:6a:dc:ee:4b:29:10:
         0c:25:0b:2b:24:62:7e:6c:8a:86:e9:48:3c:f8:6c:ea:6b:06:
         48:ff:82:5b:17:96:3e:16:7b:69:38:0a:0c:ad:6e:d4:0e:1d:
         65:52:34:a8:0e:09:f2:c8:04:29:b8:2e:ac:d2:1a:43:a3:64:
         bd:29:ca:f1:00:19:ac:42:81:c2:3d:e4:53:35:34:34:b7:2d:
         f4:aa:6e:1b:77:7f:55:76:74:db:3a:d6:28:54:97:d9:ad:bf:
         b1:d0:90:97:a5:1c:2a:5f:d1:22:c9:6c:68:d9:02:5d:e4:a0:
         1d:bf:89:18:4f:14:d6:e8:e8:6d:43:b7:23:bf:ae:fb:6c:af:
         33:3c:61:58:8d:2b:1e:53:ca:ee:3a:86:cf:38:46:d1:3a:6f:
         16:34:5a:92:c2:bc:2d:8a:5f:0a:03:10:f9:c4:be:b5:cc:ed:
         3c:7f:45:c1:a8:80:3c:d6:21:29:5e:21:9f:47:0c:e5:8f:0e:
         d9:1f:56:2a:75:ab:22:7f:8f:f3:9d:5f:bd:42:d1:36:8f:24:
         f3:a8:66:b9:b3:b8:b6:52:df:85:ce:df:55:1a:ae:57:15:51:
         49:a4:32:8d:b2:e6:57:2d:c1:51:fe:3b:02:e7:54:d8:44:d6:
         35:af:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----