Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/407BE96CB68011F19FA4C1A7CE1D38B0.roa
File:                     407BE96CB68011F19FA4C1A7CE1D38B0.roa (raw, json)
Hash identifier:          XIWmLotkXlGBDLY7/+NqPskEGUeFFTHh4kGotynUYl4=
Subject key identifier:   6E:0C:4E:AD:F4:D4:AC:58:16:CD:36:B4:71:EF:12:48:91:02:7C:B8
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2208
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/407BE96CB68011F19FA4C1A7CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 12:22:18 +0000
ROA not before:           Tue 22 Sep 2026 12:22:14 +0000
ROA not after:            Fri 22 Sep 2028 12:22:14 +0000
asID:                     834
IP address blocks:        154.16.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8712 (0x2208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 22 12:22:14 2026 GMT
            Not After : Sep 22 12:22:14 2028 GMT
        Subject: CN=6ab272fa-b7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:b0:fb:3b:da:a0:e1:69:75:78:fb:f9:93:
                    f7:3c:45:fd:de:61:b4:94:98:4a:61:dd:a2:43:de:
                    e2:54:54:53:27:4a:9d:f0:5f:59:18:13:fa:3b:6d:
                    7a:13:f8:3a:0f:83:8f:a4:2e:38:71:66:93:0b:d0:
                    94:ff:be:0b:4c:6f:ac:b9:51:0a:97:25:c0:14:de:
                    63:cc:ec:60:c4:25:a8:c8:9f:55:a3:ed:c1:fc:38:
                    92:59:81:ea:fe:1a:20:3d:14:be:6c:53:73:9f:df:
                    f1:76:04:83:31:2b:d2:2f:1c:db:68:3e:56:3d:04:
                    23:f1:4a:74:de:62:cc:1e:b3:5c:58:f8:03:91:a7:
                    c5:01:19:37:68:17:9d:a6:d5:38:97:5f:19:5f:a8:
                    94:1a:13:9a:ea:07:e2:90:29:93:c9:64:06:ab:5e:
                    53:7f:6f:06:07:38:3a:10:af:e1:ef:5f:67:16:22:
                    ce:10:82:4f:b8:86:c0:99:6f:6c:e3:5c:94:13:60:
                    62:36:f1:0b:c8:b7:4d:4a:e7:94:76:e8:03:1b:00:
                    bd:6b:9d:ab:29:0b:94:02:a3:ab:e0:41:7c:56:03:
                    95:22:da:7b:51:fd:4d:ed:5d:b0:a6:c2:49:8a:25:
                    65:ce:ae:7d:54:b9:46:ae:60:64:21:7f:03:9d:5b:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:4E:AD:F4:D4:AC:58:16:CD:36:B4:71:EF:12:48:91:02:7C:B8
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/407BE96CB68011F19FA4C1A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:9f:27:5d:85:bb:9a:67:6f:95:c1:c1:6a:28:d3:bd:49:
         84:b8:0e:6e:74:b2:d0:b0:75:fc:8f:a3:5d:ae:ac:7e:13:40:
         dc:80:a4:ef:ea:ad:92:a8:bb:7f:6a:7a:43:56:6d:8a:a3:9e:
         c5:37:17:a1:67:ca:ef:5a:42:e2:4c:0f:48:64:d5:5d:dc:41:
         c2:68:2f:b8:da:3a:ac:02:49:db:32:43:0b:f9:b4:16:0d:c2:
         2a:68:c0:ac:46:a4:f5:61:dd:04:ad:ac:62:78:b7:5e:4b:ba:
         01:f1:a5:7c:d8:20:be:98:b7:ca:16:94:f5:6c:68:c3:a3:88:
         3a:07:50:d1:b2:9c:cd:7f:d6:0b:ef:75:a0:19:c9:c9:c3:42:
         48:c6:86:a6:7e:4f:a6:3a:df:b8:55:b1:57:e7:af:3c:13:1c:
         b1:1b:ae:c3:fe:fb:42:73:33:c8:03:ff:eb:3c:05:fe:3e:dd:
         af:6e:a3:b5:36:37:75:92:7a:52:f8:10:80:88:70:e6:f7:ab:
         6c:10:02:93:f9:57:a0:d5:c9:14:02:53:62:eb:fa:0d:cc:00:
         95:53:b1:bd:88:3e:f3:d2:36:44:84:9d:6e:d3:d3:15:1f:39:
         b1:61:8c:f5:d1:57:0c:92:4d:79:72:c2:63:82:69:e3:2a:f6:
         58:78:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----