Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2507FE00C71011F19BC58CCACE1D38B0.roa
File:                     2507FE00C71011F19BC58CCACE1D38B0.roa (raw, json)
Hash identifier:          PXmzbbt5mvhoL5rK/Qp4jhIAIvHjmfpoqErfG6tnLbg=
Subject key identifier:   8F:CD:CB:CC:8E:05:D9:A8:22:ED:EF:E5:92:0B:79:35:58:13:73:B3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2277
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2507FE00C71011F19BC58CCACE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:12:38 +0000
ROA not before:           Tue 13 Oct 2026 14:12:34 +0000
ROA not after:            Fri 13 Oct 2028 14:12:34 +0000
asID:                     212238
IP address blocks:        154.16.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8823 (0x2277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:12:34 2026 GMT
            Not After : Oct 13 14:12:34 2028 GMT
        Subject: CN=6ace3c56-b812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:43:1a:f3:43:33:38:7b:e9:d2:9a:b8:26:
                    0c:fc:52:b8:a6:c0:19:40:54:ed:64:c6:a0:1c:92:
                    17:d6:89:21:0f:bc:0d:07:08:ed:8b:11:d5:74:b3:
                    78:1c:86:54:94:bd:03:af:e4:51:30:8d:9c:df:8c:
                    ca:ea:ff:07:ca:fa:f4:ca:36:63:47:94:d3:89:f3:
                    20:84:11:f8:8a:21:46:06:7d:5b:2f:02:40:40:5d:
                    78:06:90:ea:23:ea:0d:52:8a:c7:06:4a:2b:ec:8b:
                    46:af:0e:3c:d0:67:39:3e:91:89:00:dd:ae:64:c9:
                    cc:ed:18:99:0e:b2:d1:a6:3e:79:e5:a7:bc:d5:3b:
                    2e:93:3c:da:20:47:69:bb:81:63:98:18:92:df:74:
                    d7:17:bb:23:76:62:d6:9f:7e:f5:0f:52:f0:c3:f3:
                    e7:97:c9:c6:65:c7:1d:55:df:57:0a:2f:f1:d1:28:
                    2c:2a:4b:6a:87:f3:6b:28:a8:8e:40:1c:58:b6:b1:
                    2d:d1:cc:de:5d:45:23:ef:84:e4:00:ad:e8:21:24:
                    b1:2d:b5:5e:dc:ee:3a:10:49:0c:2f:0a:ae:d1:c0:
                    f6:9e:c3:78:52:96:9c:02:bd:e2:c0:d5:ca:8a:88:
                    15:23:8a:f7:b9:69:07:fc:a0:fb:f4:7f:03:01:0f:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CD:CB:CC:8E:05:D9:A8:22:ED:EF:E5:92:0B:79:35:58:13:73:B3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2507FE00C71011F19BC58CCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:96:67:9c:bc:d4:f3:ba:eb:68:dd:31:c2:13:f6:b4:83:
         2d:99:0f:50:53:d9:a4:b1:26:f3:09:ec:20:81:4f:a9:d4:09:
         72:54:9e:a3:97:50:d5:72:fe:08:42:8b:fb:df:e1:b9:00:fd:
         70:85:6f:ae:15:01:ac:5a:14:38:25:1c:57:09:36:8a:c7:9f:
         c0:e1:c3:c6:eb:3e:f6:ab:20:a3:5f:12:0d:ef:40:4a:0c:59:
         23:b8:21:8c:a0:b5:a1:50:d4:7b:b7:be:5f:a7:4f:e7:b9:da:
         7f:ae:01:c6:d1:01:aa:72:d4:80:9c:cd:c9:d4:0d:e3:c1:75:
         e5:9e:41:5b:e7:9a:b4:d9:10:45:2a:bc:7e:5f:18:6f:e6:21:
         32:bb:bb:73:a9:17:11:0d:16:e3:d0:d0:09:68:58:0b:1a:f0:
         3e:c8:f5:f1:8a:73:5e:6f:e5:50:62:87:c7:d4:68:ef:34:d4:
         45:6f:3d:c1:14:9c:e1:e0:8a:30:7d:e8:00:37:45:8e:fc:89:
         dc:85:c0:a5:12:38:ae:03:f4:65:ec:ea:b7:27:58:3a:a0:cd:
         69:cf:42:b1:19:cf:16:42:12:1a:0e:79:37:91:18:a2:60:89:
         0d:77:19:45:17:d4:c9:2a:34:6e:ed:2a:93:45:45:f3:cc:14:
         03:78:cc:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIncwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjEwMTMxNDEyMzRaFw0yODEwMTMxNDEyMzRaMBgxFjAU
BgNVBAMTDTZhY2UzYzU2LWI4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl6UMa80MzOHvp0pq4Jgz8UrimwBlAVO1kxqAckhfWiSEPvA0HCO2LEdV0
s3gchlSUvQOv5FEwjZzfjMrq/wfK+vTKNmNHlNOJ8yCEEfiKIUYGfVsvAkBAXXgG
kOoj6g1SiscGSivsi0avDjzQZzk+kYkA3a5kycztGJkOstGmPnnlp7zVOy6TPNog
R2m7gWOYGJLfdNcXuyN2YtaffvUPUvDD8+eXycZlxx1V31cKL/HRKCwqS2qH82so
qI5AHFi2sS3RzN5dRSPvhOQAreghJLEttV7c7joQSQwvCq7RwPaew3hSlpwCveLA
1cqKiBUjive5aQf8oPv0fwMBD4mJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUj83L
zI4F2agi7e/lkgt5NVgTc7MwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI1MDdGRTAwQzcxMDExRjE5QkM1OENDQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGEwDQYJKoZIhvcNAQEL
BQADggEBABHZlmecvNTzuuto3THCE/a0gy2ZD1BT2aSxJvMJ7CCBT6nUCXJUnqOX
UNVy/ghCi/vf4bkA/XCFb64VAaxaFDglHFcJNorHn8Dhw8brPvarIKNfEg3vQEoM
WSO4IYygtaFQ1Hu3vl+nT+e52n+uAcbRAapy1ICczcnUDePBdeWeQVvnmrTZEEUq
vH5fGG/mITK7u3OpFxENFuPQ0AloWAsa8D7I9fGKc15v5VBih8fUaO801EVvPcEU
nOHgijB96AA3RY78idyFwKUSOK4D9GXs6rcnWDqgzWnPQrEZzxZCEhoOeTeRGKJg
iQ13GUUX1MkqNG7tKpNFRfPMFAN4zDs=
-----END CERTIFICATE-----