Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34B7C918BE5811F1A66304D2CE1D38B0.roa
File:                     34B7C918BE5811F1A66304D2CE1D38B0.roa (raw, json)
Hash identifier:          UZjbvgKwjS9Ihomaqd/W7ARhG+QUXfIJi2LpLfv5788=
Subject key identifier:   7E:44:9D:DD:95:E8:F1:80:4F:36:78:20:52:72:DE:D8:61:82:C5:15
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2250
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34B7C918BE5811F1A66304D2CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 11:55:48 +0000
ROA not before:           Fri 02 Oct 2026 11:55:44 +0000
ROA not after:            Mon 02 Oct 2028 11:55:44 +0000
asID:                     834
IP address blocks:        154.16.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8784 (0x2250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  2 11:55:44 2026 GMT
            Not After : Oct  2 11:55:44 2028 GMT
        Subject: CN=6abf9bc4-0fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:05:17:69:f9:6a:07:e9:6a:ff:2b:4c:3b:
                    f9:6a:17:5f:54:b3:f6:8d:0b:c8:88:07:9c:14:66:
                    ab:8f:b0:cf:50:81:01:b7:38:ab:e0:62:83:33:7f:
                    b4:f2:23:5f:47:2c:23:d9:5a:d3:ca:00:64:2e:28:
                    1d:f1:47:b7:ee:33:21:4c:17:f7:c0:ce:39:e6:cb:
                    b7:85:52:09:2c:dc:1d:5c:af:3a:60:9a:f9:b8:4f:
                    d8:c3:e5:62:9a:19:ec:cd:44:88:5e:95:70:7f:a5:
                    17:0c:69:d8:ad:16:7c:c5:94:1f:1c:72:ef:ff:b0:
                    cf:c8:0a:4e:fd:94:b9:0f:ed:ea:d7:e7:50:34:b5:
                    89:21:b3:00:3a:c3:8f:66:8a:27:9b:e9:13:03:f2:
                    b2:f9:55:96:c0:2d:10:d4:51:cd:a9:10:0a:6d:af:
                    49:6c:0c:ad:5f:39:f1:a0:e3:f1:32:00:3a:fa:ba:
                    34:44:2f:2a:61:40:ac:59:5a:47:10:43:f8:4a:fd:
                    52:2e:5a:1f:e9:9c:da:8a:a5:0b:27:d4:4f:7f:46:
                    8b:90:c7:2c:f4:6a:75:f3:7d:d7:e2:c0:c5:6c:e2:
                    d6:0f:2c:8c:6c:26:27:a4:97:42:28:3a:45:db:a8:
                    ea:67:78:a5:a0:93:f1:5d:c0:c6:2c:69:b7:5e:83:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:9D:DD:95:E8:F1:80:4F:36:78:20:52:72:DE:D8:61:82:C5:15
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34B7C918BE5811F1A66304D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:74:ad:e1:46:7c:40:12:99:cd:29:d0:6d:44:be:b3:97:
         62:8b:3e:2b:90:a3:d3:e9:cf:b5:51:6f:12:89:6f:cc:23:43:
         80:0d:b6:0b:3c:a0:79:d5:c7:71:4a:b7:f7:41:fb:24:e7:39:
         d4:53:12:1b:11:5f:b4:b5:0c:f0:c8:7d:69:39:2e:e3:13:03:
         c1:5e:60:ca:7e:00:c6:cf:46:36:4e:45:56:a6:ac:c8:68:03:
         d3:82:c8:69:ac:47:07:29:3b:66:83:07:36:4d:4a:ae:22:4f:
         be:85:e5:c9:0f:55:f4:61:20:e5:ae:9a:e5:88:14:4a:57:e9:
         91:89:e8:b2:52:30:21:2e:88:d0:79:4e:57:bb:1e:c8:14:b6:
         87:a5:c3:7b:43:7c:5a:97:e1:42:d9:89:81:ce:27:c0:71:c8:
         f3:76:6f:6c:92:54:31:df:40:4a:14:01:87:1e:62:d0:d3:59:
         aa:45:37:c5:63:ba:c2:7a:7a:88:62:28:dd:6a:10:2f:2c:ab:
         28:48:7b:b3:bd:f0:56:26:ee:6b:63:42:9d:d3:da:8b:ba:c4:
         6b:23:65:21:fc:f3:6a:d4:8f:4f:42:f9:30:13:c2:91:8e:4f:
         77:0a:26:4a:a3:d6:41:5b:f9:99:eb:8f:81:78:8e:81:b2:01:
         53:df:35:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIlAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjEwMDIxMTU1NDRaFw0yODEwMDIxMTU1NDRaMBgxFjAU
BgNVBAMTDTZhYmY5YmM0LTBmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5sQUXaflqB+lq/ytMO/lqF19Us/aNC8iIB5wUZquPsM9QgQG3OKvgYoMz
f7TyI19HLCPZWtPKAGQuKB3xR7fuMyFMF/fAzjnmy7eFUgks3B1crzpgmvm4T9jD
5WKaGezNRIhelXB/pRcMaditFnzFlB8ccu//sM/ICk79lLkP7erX51A0tYkhswA6
w49miieb6RMD8rL5VZbALRDUUc2pEAptr0lsDK1fOfGg4/EyADr6ujRELyphQKxZ
WkcQQ/hK/VIuWh/pnNqKpQsn1E9/RouQxyz0anXzfdfiwMVs4tYPLIxsJiekl0Io
OkXbqOpneKWgk/FdwMYsabdeg3YLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfkSd
3ZXo8YBPNnggUnLe2GGCxRUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM0QjdDOTE4QkU1ODExRjFBNjYzMDREMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEG8wDQYJKoZIhvcNAQEL
BQADggEBAIBMdK3hRnxAEpnNKdBtRL6zl2KLPiuQo9Ppz7VRbxKJb8wjQ4ANtgs8
oHnVx3FKt/dB+yTnOdRTEhsRX7S1DPDIfWk5LuMTA8FeYMp+AMbPRjZORVamrMho
A9OCyGmsRwcpO2aDBzZNSq4iT76F5ckPVfRhIOWumuWIFEpX6ZGJ6LJSMCEuiNB5
Tle7HsgUtoelw3tDfFqX4ULZiYHOJ8BxyPN2b2ySVDHfQEoUAYceYtDTWapFN8Vj
usJ6eohiKN1qEC8sqyhIe7O98FYm7mtjQp3T2ou6xGsjZSH882rUj09C+TATwpGO
T3cKJkqj1kFb+Znrj4F4joGyAVPfNUk=
-----END CERTIFICATE-----