Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F7AD8CE9D3D11F1A0990BCECE1D38B0.roa
File:                     1F7AD8CE9D3D11F1A0990BCECE1D38B0.roa (raw, json)
Hash identifier:          yFlHIzVWpYQ8BBz8T7af/GPW6mx4MEbQOzaG0tKu2Sc=
Subject key identifier:   59:29:EF:79:8A:8B:48:D9:1A:C6:DB:D5:86:3D:9B:59:11:58:AB:5B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2139
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F7AD8CE9D3D11F1A0990BCECE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:48:47 +0000
ROA not before:           Fri 21 Aug 2026 08:48:43 +0000
ROA not after:            Mon 21 Aug 2028 08:48:43 +0000
asID:                     219068
IP address blocks:        154.16.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8505 (0x2139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 21 08:48:43 2026 GMT
            Not After : Aug 21 08:48:43 2028 GMT
        Subject: CN=6a8810ef-fabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:da:08:bd:47:c9:7d:29:5d:62:c8:2c:0a:
                    38:70:4a:44:95:43:71:f1:0e:81:72:2e:e3:05:37:
                    f7:3a:43:e2:e8:fe:88:b6:4d:71:84:0a:05:de:f7:
                    81:6c:07:52:56:46:c9:0e:84:1c:11:c2:ff:7a:02:
                    06:b4:6d:ac:b5:9a:31:65:cb:9a:70:cd:5a:8c:45:
                    bb:9e:14:73:b8:ce:9b:11:3a:57:68:f0:65:d5:a4:
                    76:bb:cb:c0:1b:3c:c7:ea:24:df:0b:0b:dd:ab:08:
                    4f:39:a9:56:b2:25:7c:47:7b:34:61:da:7b:6b:3f:
                    81:71:78:61:47:5c:21:1e:ca:f8:a2:0e:6d:21:33:
                    98:0d:d6:59:3d:8f:de:c9:11:26:c4:ca:ab:78:24:
                    a0:6d:89:b6:42:8f:13:e1:99:5c:be:1d:f0:b5:bd:
                    18:5a:38:5f:80:4f:05:a7:de:8d:fa:7e:ff:73:11:
                    47:32:8a:6a:0d:5f:96:ca:af:86:06:88:0a:22:e8:
                    43:41:79:43:d7:9e:a6:77:de:47:f0:31:60:2b:25:
                    9c:8a:bd:49:ee:02:47:ac:f9:f6:9a:3b:c6:87:c7:
                    60:e8:ea:83:61:cb:97:19:43:96:ee:a5:e6:fc:34:
                    49:9b:6e:82:65:24:12:4d:73:95:3a:a9:5b:17:1d:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:29:EF:79:8A:8B:48:D9:1A:C6:DB:D5:86:3D:9B:59:11:58:AB:5B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F7AD8CE9D3D11F1A0990BCECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:de:5e:61:79:80:1a:67:2f:95:25:9c:c4:60:8c:85:ff:2e:
         65:10:a9:43:90:eb:66:53:e4:76:38:ec:d7:dd:97:bd:88:5d:
         b1:dc:20:12:b8:6f:71:5b:5a:c9:31:94:cd:95:35:f8:7c:1e:
         6c:ff:3e:c2:c2:4f:54:4f:ea:93:9c:bb:92:e9:8f:d2:16:7b:
         92:f7:72:ab:a1:7e:6e:30:e4:06:39:a1:56:53:81:06:43:d4:
         40:9d:62:79:4d:7a:54:14:99:32:eb:55:32:e1:56:0c:06:b3:
         7b:0c:a7:70:f8:79:11:5e:46:5a:d4:33:7f:b5:54:a5:8a:47:
         fe:b0:a8:84:06:58:4f:98:97:58:f0:eb:31:18:84:cd:0e:4c:
         55:c9:66:8c:e4:c1:4b:1c:d1:d4:b3:61:1b:b2:59:33:5f:03:
         f9:60:1f:48:1a:fc:76:5f:e0:30:e4:57:f5:20:35:53:e2:9a:
         9e:51:40:2b:ee:5a:a2:41:49:ba:cf:d6:07:33:53:ea:38:f4:
         64:3b:8b:b4:fe:f6:79:b5:65:27:9e:b5:f0:4f:21:2c:8c:37:
         d9:16:fe:d1:e8:73:d0:ab:fc:ad:a8:23:47:37:61:d6:79:1c:
         38:da:4d:66:db:f0:63:6d:fb:b4:88:26:36:72:23:3d:38:4b:
         62:11:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----