Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FAA0290A4F911F1BFA3D5E7CE1D38B0.roa
File:                     4FAA0290A4F911F1BFA3D5E7CE1D38B0.roa (raw, json)
Hash identifier:          3y0JinxnMLAwACdl5XXz7szyLAnNUkDqNSvNTf4zIoI=
Subject key identifier:   32:18:3E:17:C8:B9:9A:EF:CF:2F:48:F3:2F:04:AA:F4:31:BD:73:72
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2173
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FAA0290A4F911F1BFA3D5E7CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 05:03:32 +0000
ROA not before:           Mon 31 Aug 2026 05:03:28 +0000
ROA not after:            Thu 31 Aug 2028 05:03:28 +0000
asID:                     834
IP address blocks:        154.16.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 00:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8563 (0x2173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 31 05:03:28 2026 GMT
            Not After : Aug 31 05:03:28 2028 GMT
        Subject: CN=6a950b24-1105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:c0:8f:fc:aa:8f:c0:7f:e4:7b:86:1f:42:
                    50:45:8d:d4:1b:04:23:80:81:b9:9e:16:21:12:ae:
                    f6:f1:d1:03:8b:3a:44:fd:f3:dc:b3:6e:d0:a6:ba:
                    57:c2:4d:38:f7:c2:90:93:bf:b7:13:96:73:b3:f2:
                    d8:5e:ef:91:96:14:52:ab:8e:54:a9:1c:38:c4:6f:
                    bb:90:d4:85:74:ad:8b:be:1a:02:54:0f:20:dc:88:
                    94:0a:8c:00:71:12:2e:5b:ef:29:04:13:13:c6:5f:
                    12:29:88:5e:dc:d4:ec:e0:e6:7d:41:15:99:fe:a5:
                    dc:88:42:e5:b6:4b:33:c5:6e:e7:54:ed:3a:97:f7:
                    3b:71:b8:ba:31:46:3e:58:95:2a:e5:6d:ec:8f:3c:
                    11:b1:3b:ee:88:46:22:5b:f5:2c:e5:58:f4:e5:2f:
                    f0:a1:cd:a3:e6:9d:34:5c:e3:7b:46:b3:2f:5d:bd:
                    74:96:8e:0b:61:4b:85:6b:0f:ff:a9:8c:8f:c0:97:
                    f4:db:05:ce:3b:d2:7f:a6:e3:ec:df:1a:19:0b:fb:
                    f8:4f:e2:40:63:0d:73:37:0c:5d:28:74:84:9d:ff:
                    8c:4a:03:60:a5:0a:bd:90:da:1f:e2:1f:83:1a:5f:
                    d0:87:96:24:f7:ee:62:e9:0e:9b:c8:f4:8a:cf:f8:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:3E:17:C8:B9:9A:EF:CF:2F:48:F3:2F:04:AA:F4:31:BD:73:72
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FAA0290A4F911F1BFA3D5E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:ac:33:b6:ee:b0:89:71:a6:03:ca:0b:2a:f8:b6:0e:ee:
         e8:80:2d:c6:0d:5b:9e:30:69:a6:88:73:d0:42:0d:1c:28:48:
         31:07:88:c0:2b:f0:cd:d4:45:9f:74:40:3b:ed:fa:cf:1b:c1:
         1e:9b:a7:2f:d4:1f:fe:4e:36:99:47:27:d7:d3:b6:ea:59:5a:
         9d:0c:b9:42:f0:cd:e8:87:ce:e4:bf:8a:cd:2b:e9:d7:1b:a0:
         1c:d9:40:bd:2b:da:ab:38:f2:77:ee:5d:19:ce:e6:f2:d4:0f:
         98:1e:67:70:60:ee:ef:7b:21:d9:4b:64:5e:b6:de:61:2b:8e:
         8f:dd:9c:f5:7b:3a:e8:5d:4b:27:2b:b1:d3:9c:07:16:3f:d3:
         69:8c:f8:72:97:ba:26:04:6f:e2:e8:9b:9a:d5:43:06:58:98:
         f5:27:63:07:53:02:d7:13:ec:f9:47:e5:64:44:04:1a:da:43:
         5f:31:22:6b:8f:82:7f:f4:aa:88:26:89:85:6f:4b:92:ba:68:
         91:3c:22:4d:57:c6:6f:e9:76:f9:e1:dc:ca:08:10:0a:c4:93:
         e2:47:c7:b2:0d:f0:bb:10:ed:52:9c:87:3d:ca:da:b9:4e:59:
         9b:ad:f4:26:50:28:07:ee:6a:11:ed:e9:09:61:cf:a4:04:ee:
         d3:ff:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----