Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D8F4B5CB5A711F1A29EDAA0CE1D38B0.roa
File:                     2D8F4B5CB5A711F1A29EDAA0CE1D38B0.roa (raw, json)
Hash identifier:          97HgOze6GoK4cewI7TASz9o/aQjlD2UovAA40wRyVXA=
Subject key identifier:   DB:1E:61:DA:B7:12:C8:AD:8C:ED:CF:8E:DC:9F:73:6C:CA:E8:87:51
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21F8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D8F4B5CB5A711F1A29EDAA0CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:28:26 +0000
ROA not before:           Mon 21 Sep 2026 10:28:22 +0000
ROA not after:            Thu 21 Sep 2028 10:28:22 +0000
asID:                     834
IP address blocks:        154.16.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8696 (0x21f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 10:28:22 2026 GMT
            Not After : Sep 21 10:28:22 2028 GMT
        Subject: CN=6ab106ca-47c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:de:57:76:7d:76:ad:eb:22:6c:c7:ce:fc:
                    0f:e9:97:f5:a8:4e:0e:1e:76:39:0f:03:c9:00:1b:
                    22:fd:33:67:96:3f:31:b4:8c:3b:23:dd:cd:33:c2:
                    c9:fa:3a:45:41:fe:78:48:3b:2a:8d:78:55:cc:03:
                    c9:a6:16:29:2f:4f:42:d1:cd:05:93:e8:7e:99:62:
                    e3:71:d3:eb:fc:39:5e:dd:f9:20:29:38:f2:c2:9d:
                    2d:28:7a:f9:8c:53:fd:8e:2e:61:7e:fb:dc:96:16:
                    68:42:05:40:b6:58:ff:bb:c1:e1:b2:2a:9b:d9:40:
                    2b:d9:10:b2:61:c7:d6:e4:51:ca:5a:df:04:aa:e6:
                    d0:ba:fd:c2:0e:36:67:97:53:d5:c8:1a:f8:72:d5:
                    27:6b:c4:30:ac:43:9e:25:6a:a1:7b:fb:25:51:e8:
                    6c:32:83:99:64:9e:87:85:ce:f0:18:e1:08:fd:d2:
                    8c:0e:b1:d2:eb:52:63:6b:54:fc:c7:96:39:69:a2:
                    56:6b:65:cf:c4:0e:1d:92:d2:38:9a:6f:1f:15:4f:
                    ee:c3:ac:bc:40:b0:a2:2a:3a:7e:23:81:8d:c7:49:
                    ca:b4:73:05:ad:b6:b6:f9:c0:c9:15:9e:bb:ef:ee:
                    a7:24:dc:0b:18:32:84:cf:f0:57:7e:91:f1:8b:2f:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1E:61:DA:B7:12:C8:AD:8C:ED:CF:8E:DC:9F:73:6C:CA:E8:87:51
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D8F4B5CB5A711F1A29EDAA0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:59:06:07:d0:7d:0f:12:a1:56:1f:a0:5c:ba:5f:c4:e1:
         98:74:e9:4c:3f:39:78:6b:5f:eb:f1:c0:af:04:75:f6:20:80:
         e4:cd:99:be:8a:75:76:c1:64:70:83:64:5e:24:7f:ec:5c:04:
         af:8a:04:92:a8:3e:d5:c1:96:7b:f7:d0:bf:ea:70:c3:03:c6:
         f5:ac:7b:8a:c8:62:9c:be:58:13:5e:e4:1e:53:38:21:0e:a9:
         35:4c:99:5f:b0:eb:b8:a7:08:51:c6:ba:9e:56:bc:3e:b9:1b:
         cd:41:c1:5e:bd:a7:d3:03:78:39:75:a4:ed:c5:9e:b1:bf:ff:
         c0:82:13:fc:9a:79:7c:a9:3d:9f:5f:7e:b1:dc:9c:2c:f4:39:
         15:bd:bc:0b:bc:38:bf:5d:ed:a7:ee:6c:36:c9:e3:8e:fe:a5:
         06:e6:d2:62:6c:38:f9:03:8f:66:61:7b:af:14:aa:6e:e3:69:
         af:96:ab:31:9d:e0:08:11:f0:31:01:40:55:cb:5d:70:04:92:
         cb:ea:cf:eb:e8:fa:b7:82:8f:fc:b5:23:b4:b5:8d:8d:ab:ee:
         0a:d4:d1:a9:df:6a:64:a4:93:65:97:fd:37:3a:5a:b3:14:38:
         b4:59:f2:06:dc:6b:3e:3e:f8:35:b3:5a:82:61:85:fc:a9:63:
         03:09:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----