Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53D6467CBA6011F1A8E2A7F0CE1D38B0.roa
File:                     53D6467CBA6011F1A8E2A7F0CE1D38B0.roa (raw, json)
Hash identifier:          zs9ETynkcOmOpINCZ+7bM4eq+Qoy97L+qANxeyRyPdE=
Subject key identifier:   3C:79:EB:C7:83:E4:FF:61:10:23:34:33:DC:7C:04:4C:12:76:60:03
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2222
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53D6467CBA6011F1A8E2A7F0CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 10:43:51 +0000
ROA not before:           Sun 27 Sep 2026 10:43:47 +0000
ROA not after:            Wed 27 Sep 2028 10:43:47 +0000
asID:                     834
IP address blocks:        154.16.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8738 (0x2222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 27 10:43:47 2026 GMT
            Not After : Sep 27 10:43:47 2028 GMT
        Subject: CN=6ab8f367-84ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:16:86:d9:9f:6e:76:61:eb:1f:b9:e5:1d:
                    b0:56:93:61:23:a1:30:94:bb:b5:eb:58:60:ca:c0:
                    46:f7:1c:6d:ed:23:39:af:2a:4b:17:44:07:92:9d:
                    2e:87:7e:25:a8:77:29:cc:18:c7:bf:7a:70:84:51:
                    0a:11:d9:39:9b:91:29:76:8d:e3:1b:c9:06:c1:50:
                    21:b8:81:15:23:00:c6:f9:9d:e2:e8:5f:1f:e6:20:
                    80:1d:8c:e1:a8:b0:c5:c1:b7:bb:b0:39:3d:e0:b3:
                    9c:e6:5a:8e:0a:0c:66:5a:c7:ae:0e:84:31:72:2a:
                    ca:dd:57:bd:7e:a8:42:40:43:7d:38:4e:cf:49:94:
                    7e:9b:5d:f6:f9:1e:f8:43:10:cb:2a:41:83:52:1a:
                    60:19:11:fa:45:82:77:89:47:66:bb:8b:31:de:6e:
                    ba:8d:65:e3:bf:d6:77:9f:00:9d:6b:4b:d9:68:22:
                    3d:55:28:db:41:85:db:c7:e4:35:33:92:6e:8e:b1:
                    05:39:ea:43:79:e2:2f:62:42:d9:9b:d4:11:41:59:
                    0f:f9:f7:05:3d:7d:9b:1b:d3:89:9c:ad:d6:6f:e1:
                    1a:b1:4a:7a:ae:42:6c:e5:82:10:40:56:c4:c4:ac:
                    bf:a2:0c:e4:d0:a8:f8:13:11:f1:fa:29:bd:f4:a4:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:79:EB:C7:83:E4:FF:61:10:23:34:33:DC:7C:04:4C:12:76:60:03
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53D6467CBA6011F1A8E2A7F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:43:e6:51:3f:d7:89:27:fe:4c:ee:04:78:b6:61:26:42:10:
         ea:02:d0:d2:a5:d6:09:eb:50:71:e7:04:e3:e4:3c:39:15:3f:
         54:86:1a:13:b6:96:e2:13:d5:62:c7:c6:9f:96:dd:b4:52:aa:
         e3:4e:c9:31:49:1f:51:56:0e:0e:9d:b2:78:30:fd:80:7c:5f:
         cd:8e:e9:3e:c2:e6:a3:78:ae:bb:90:24:31:d6:d5:f2:2e:83:
         f4:11:1c:57:5e:f4:f0:f4:e6:fc:ce:eb:af:69:5b:de:62:08:
         4f:97:24:d4:22:aa:23:18:11:6d:5c:45:f8:db:f7:73:4b:52:
         8e:d9:a3:8c:b0:4f:7b:21:11:ef:ba:d5:52:1d:8b:75:bd:42:
         d3:99:82:53:97:e6:40:ca:bc:d5:be:35:bc:06:e8:1d:b2:4f:
         08:47:1b:f7:60:22:26:0d:82:d7:fe:82:07:e2:15:cd:7d:83:
         0f:a4:48:8c:4f:ba:61:48:a8:4b:fe:2b:fc:c5:36:94:a4:74:
         48:f3:59:ab:c2:29:35:e5:a3:54:24:f2:14:6d:f9:c7:86:32:
         97:ee:53:08:dd:84:54:bf:60:de:6c:cb:de:bd:02:a1:fd:77:
         a7:f3:22:53:6a:23:d2:90:b7:e4:79:9c:eb:7b:61:80:2f:17:
         a7:5c:5b:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIiIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MjcxMDQzNDdaFw0yODA5MjcxMDQzNDdaMBgxFjAU
BgNVBAMTDTZhYjhmMzY3LTg0ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdQRaG2Z9udmHrH7nlHbBWk2EjoTCUu7XrWGDKwEb3HG3tIzmvKksXRAeS
nS6HfiWodynMGMe/enCEUQoR2TmbkSl2jeMbyQbBUCG4gRUjAMb5neLoXx/mIIAd
jOGosMXBt7uwOT3gs5zmWo4KDGZax64OhDFyKsrdV71+qEJAQ304Ts9JlH6bXfb5
HvhDEMsqQYNSGmAZEfpFgneJR2a7izHebrqNZeO/1nefAJ1rS9loIj1VKNtBhdvH
5DUzkm6OsQU56kN54i9iQtmb1BFBWQ/59wU9fZsb04mcrdZv4RqxSnquQmzlghBA
VsTErL+iDOTQqPgTEfH6Kb30pBRBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPHnr
x4Pk/2EQIzQz3HwETBJ2YAMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzUzRDY0NjdDQkE2MDExRjFBOEUyQTdGMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGAwDQYJKoZIhvcNAQEL
BQADggEBAAhD5lE/14kn/kzuBHi2YSZCEOoC0NKl1gnrUHHnBOPkPDkVP1SGGhO2
luIT1WLHxp+W3bRSquNOyTFJH1FWDg6dsngw/YB8X82O6T7C5qN4rruQJDHW1fIu
g/QRHFde9PD05vzO669pW95iCE+XJNQiqiMYEW1cRfjb93NLUo7Zo4ywT3shEe+6
1VIdi3W9QtOZglOX5kDKvNW+NbwG6B2yTwhHG/dgIiYNgtf+ggfiFc19gw+kSIxP
umFIqEv+K/zFNpSkdEjzWavCKTXlo1Qk8hRt+ceGMpfuUwjdhFS/YN5sy969AqH9
d6fzIlNqI9KQt+R5nOt7YYAvF6dcW/g=
-----END CERTIFICATE-----