Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32314F0AA8F211F1BCA004F5CE1D38B0.roa
File:                     32314F0AA8F211F1BCA004F5CE1D38B0.roa (raw, json)
Hash identifier:          pppR00UqsebqLSZhc5S7DsB7vcw5vZhQ0qdOLkoXK+4=
Subject key identifier:   7A:AE:7F:EB:2D:BE:73:FD:D2:55:08:42:2C:CA:E7:8B:AE:72:5A:FB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2185
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32314F0AA8F211F1BCA004F5CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:22:41 +0000
ROA not before:           Sat 05 Sep 2026 06:22:37 +0000
ROA not after:            Tue 05 Sep 2028 06:22:37 +0000
asID:                     834
IP address blocks:        154.16.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8581 (0x2185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  5 06:22:37 2026 GMT
            Not After : Sep  5 06:22:37 2028 GMT
        Subject: CN=6a9bb530-1705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:5d:29:c7:95:3d:db:4b:76:32:12:75:f4:
                    51:fe:bf:13:8d:15:49:40:5e:1c:20:34:51:5c:e1:
                    01:0f:9d:f9:57:fa:01:dd:42:da:3a:5c:31:bc:a6:
                    49:89:ce:9c:b5:64:61:b1:25:24:45:7f:10:08:90:
                    87:4a:78:6d:39:56:f7:4e:28:53:9e:9a:ab:b4:58:
                    4a:5d:20:14:5d:b6:02:e7:8c:86:e4:63:ac:22:7d:
                    48:1b:f0:97:e2:54:7d:77:0e:3f:9d:26:2a:ab:00:
                    96:2a:65:5b:46:bb:ee:f6:a4:d5:6a:51:ec:dc:e6:
                    fe:4c:fb:12:2f:d7:a8:67:c3:fc:3c:86:5f:a4:a5:
                    9d:35:25:68:75:fe:6d:8d:f8:ed:d8:7d:72:ee:fd:
                    b7:e1:75:1f:6b:d1:f7:49:32:fe:ee:48:c5:ab:1c:
                    c9:bb:95:6e:9b:6f:05:ec:65:90:fc:44:f9:78:7d:
                    85:8e:f5:ef:42:bf:a6:f1:b5:6e:0a:86:8f:3f:48:
                    e4:98:b6:80:df:84:82:29:83:23:31:c3:4b:6d:ba:
                    cc:70:5a:a8:d1:47:a8:1e:0a:eb:6b:80:a1:1e:85:
                    58:87:66:ff:8b:75:50:9c:7c:54:3d:3d:04:02:01:
                    46:68:0b:91:1c:cf:51:63:14:ab:29:64:0a:80:ce:
                    6a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AE:7F:EB:2D:BE:73:FD:D2:55:08:42:2C:CA:E7:8B:AE:72:5A:FB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32314F0AA8F211F1BCA004F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:80:c0:5e:80:2a:a6:69:2f:28:6a:8d:a3:c1:72:40:e5:
         f2:7e:86:c2:9c:5f:0a:b6:05:14:8a:e9:e9:e6:14:78:b7:6a:
         32:4c:0a:1c:47:da:b8:d5:a8:8d:60:67:12:f3:4a:de:e6:0b:
         5e:84:3d:09:e4:08:b9:76:c8:57:40:77:de:8d:88:86:1b:78:
         78:aa:5d:cd:90:0b:b4:52:70:4d:d0:70:56:eb:58:9b:1d:61:
         4c:8d:a8:3a:0e:96:0f:41:e0:5d:4d:19:5b:4a:9c:77:d5:94:
         45:e1:ec:67:5c:02:3a:ae:fa:38:aa:f0:ce:2b:e5:0a:a0:2b:
         35:81:23:2b:5f:12:73:e9:38:66:a6:3b:9c:91:4d:54:af:b3:
         8b:af:60:41:4e:71:6f:ff:d4:73:cd:4b:df:bb:55:be:2b:68:
         ab:c7:3b:b0:3f:ee:ab:7b:c7:47:03:55:65:da:4a:6a:76:33:
         aa:46:49:8d:98:d3:ea:fc:5c:ff:6e:50:a7:7d:c0:84:25:5e:
         d7:c3:0f:16:15:f4:83:26:c0:8c:c6:69:58:34:8b:c6:7c:5b:
         91:2e:8e:d5:bd:89:15:86:75:f1:42:77:2d:c6:37:c6:92:a0:
         09:ca:c6:61:b3:1d:76:16:86:58:f2:b6:32:7d:ca:31:3c:43:
         a7:cb:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----