Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7AC550C71011F1A8C0B1CACE1D38B0.roa
File:                     4F7AC550C71011F1A8C0B1CACE1D38B0.roa (raw, json)
Hash identifier:          4VDy7ASd4WAPGC3YZOww3G/Abkx/qOSPu8BrZKNyJ90=
Subject key identifier:   B0:D7:E3:6E:9F:78:4F:A7:EE:EB:43:E4:44:81:A0:57:3C:7E:98:5D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       227B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7AC550C71011F1A8C0B1CACE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:13:49 +0000
ROA not before:           Tue 13 Oct 2026 14:13:45 +0000
ROA not after:            Fri 13 Oct 2028 14:13:45 +0000
asID:                     212238
IP address blocks:        154.16.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8827 (0x227b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:13:45 2026 GMT
            Not After : Oct 13 14:13:45 2028 GMT
        Subject: CN=6ace3c9d-92f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:39:15:04:24:0a:ef:79:1b:40:74:ce:81:
                    cc:e6:23:95:c0:4f:1a:0b:77:db:95:d5:bd:54:eb:
                    53:1d:2c:db:3e:84:5f:39:1f:c9:3b:67:3a:d2:ac:
                    7c:0d:c8:94:d3:2d:25:6e:dd:2d:9b:66:5c:9c:4c:
                    40:97:d2:a8:d3:78:31:dd:31:c8:7d:b4:c5:17:4c:
                    18:09:b6:fb:d8:ec:be:00:f7:82:a9:45:4f:12:90:
                    79:40:3d:28:dc:59:96:e7:2e:ac:74:db:a9:56:3d:
                    b4:5e:60:d0:0f:17:6e:75:b2:81:13:e7:b3:d2:de:
                    d6:bc:bc:89:02:1d:b7:5e:60:00:c3:05:6c:f2:5c:
                    38:07:30:ba:95:45:00:f6:e0:2b:5a:d3:ef:db:9c:
                    b9:58:eb:7f:34:1c:ae:90:b0:f3:aa:bd:84:67:4b:
                    4e:3d:9c:c1:5a:7b:a1:c1:9f:c6:00:6b:d3:eb:d8:
                    3d:e5:6c:f2:c9:d8:99:97:42:0b:b0:f1:9c:47:44:
                    b7:1b:5f:94:2d:0b:a4:17:5a:a1:bc:79:45:5e:bb:
                    4d:a5:2a:a0:12:3f:96:9a:a5:32:4f:ae:df:83:19:
                    c3:5c:55:1f:69:36:fc:0a:1f:7b:64:8c:14:5c:93:
                    7c:be:10:71:1c:2e:d6:fb:1d:6c:50:87:64:22:df:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D7:E3:6E:9F:78:4F:A7:EE:EB:43:E4:44:81:A0:57:3C:7E:98:5D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7AC550C71011F1A8C0B1CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:07:67:3a:de:27:06:65:b4:c9:34:05:ce:55:ba:7b:b4:30:
         d2:84:60:14:05:50:33:c8:db:a1:30:a6:07:d4:28:cc:b8:fc:
         d0:af:62:97:f2:ff:f5:c9:b1:d4:ef:39:5b:ac:00:27:db:86:
         0e:c5:ba:1e:a3:12:3f:f3:b7:e9:47:c4:64:77:95:d7:2a:d8:
         3a:a6:59:46:28:2d:bb:c3:6c:2e:a4:39:d3:9f:27:12:51:93:
         60:59:b7:83:ae:1e:98:fd:ca:3b:3b:55:30:34:0c:4d:37:03:
         30:81:40:a4:30:f9:4a:dc:a8:d4:7b:87:ed:30:81:be:36:47:
         fd:8a:b3:41:70:36:fe:1d:cf:f2:b7:55:89:7f:f4:0e:f8:a0:
         8e:fe:3f:24:5d:4a:e7:d1:66:b8:98:5d:67:41:d2:13:16:88:
         97:55:e1:1f:0d:e2:49:67:10:b4:3c:be:5d:40:67:c5:f0:4c:
         ef:79:74:33:52:13:7e:3f:44:e8:89:43:5c:ca:07:72:a0:db:
         77:fe:91:88:9a:3d:08:3d:01:1d:fd:8d:c5:37:5d:1f:25:d3:
         3d:31:83:a2:68:ac:d0:aa:a8:7b:3a:bc:2a:81:0a:72:c3:c5:
         31:24:e3:e6:92:69:4c:da:11:ed:5d:59:47:24:77:4f:da:64:
         8d:bc:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----