Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E3B462CA16E11F1BA23F4EACE1D38B0.roa
File:                     5E3B462CA16E11F1BA23F4EACE1D38B0.roa (raw, json)
Hash identifier:          1VP4Pxutf2iCRnEL1B2YYUO/P3YmmVHF09V7MnSjDgc=
Subject key identifier:   7E:AC:09:2D:29:24:93:BF:66:B3:F4:54:5E:A9:A3:4A:19:E4:A7:F6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       215F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E3B462CA16E11F1BA23F4EACE1D38B0.roa
Signing time:             Wed 26 Aug 2026 16:51:23 +0000
ROA not before:           Wed 26 Aug 2026 16:51:19 +0000
ROA not after:            Sat 26 Aug 2028 16:51:19 +0000
asID:                     214483
IP address blocks:        154.16.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8543 (0x215f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 26 16:51:19 2026 GMT
            Not After : Aug 26 16:51:19 2028 GMT
        Subject: CN=6a8f198b-423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:bd:74:96:57:9e:df:b6:ea:f3:b4:6f:a5:
                    ea:7a:5c:2c:b6:1d:c0:ef:26:ac:c3:f3:8c:c6:46:
                    be:01:ac:32:19:59:f3:c3:99:27:e2:83:ae:14:43:
                    47:9d:10:77:73:b6:73:d7:4c:7e:76:54:06:90:28:
                    6e:45:23:59:60:a4:cd:9a:ac:c5:ea:e0:62:1d:a9:
                    c0:5c:0f:bd:bd:54:3c:8e:c2:b2:0e:e0:ee:b4:6c:
                    df:a6:fa:35:6d:e0:82:06:58:13:bf:6a:49:d0:9f:
                    ba:b1:96:40:95:cc:f4:83:b2:77:e0:99:e2:ed:43:
                    a0:09:0f:5b:67:8a:ff:8b:0e:d4:85:2a:51:71:32:
                    fd:6e:d0:f2:b3:9b:58:fa:4d:0f:3f:3e:40:96:bd:
                    84:33:f4:11:31:0e:c6:91:d1:45:98:76:3f:81:43:
                    bc:dc:9c:70:66:7d:be:25:51:fe:e4:38:ac:9d:b3:
                    16:36:29:7c:2e:a7:54:06:f0:97:11:e7:1a:e5:46:
                    27:8f:9e:18:73:35:f1:b9:33:53:83:22:db:7e:66:
                    f6:12:d1:77:d8:6a:7f:3a:c5:94:6e:e4:6f:a8:54:
                    e3:f6:24:f2:40:88:ef:8b:a2:c2:9a:0b:ed:25:35:
                    5b:bd:aa:6d:03:9e:ef:5a:f7:5a:61:a9:06:e1:d6:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:09:2D:29:24:93:BF:66:B3:F4:54:5E:A9:A3:4A:19:E4:A7:F6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E3B462CA16E11F1BA23F4EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:44:1b:78:72:45:03:f0:5b:df:d1:1d:5d:2f:d2:97:59:
         14:ec:82:45:e1:17:9b:fe:3a:91:0e:da:46:d0:bf:d8:e1:0b:
         5e:38:e0:81:cc:4f:87:d6:72:83:66:42:14:da:94:8a:f8:77:
         11:c3:f0:42:f1:81:23:00:8e:dc:c1:57:58:f9:54:1f:8a:f9:
         b5:5e:e9:94:1a:ae:53:c3:23:b9:7e:6a:08:dc:05:02:17:38:
         0d:5f:6d:e8:31:04:9b:a0:e8:ba:91:24:b8:fc:49:ed:a3:4b:
         e6:19:7a:b9:85:fc:74:aa:f5:22:d4:6d:0e:af:7f:5c:cc:d3:
         07:c3:db:8b:c1:95:5d:dd:35:b3:b3:82:40:71:c3:bc:9a:d5:
         3f:0e:0f:12:66:a5:99:ec:cb:41:d5:f5:eb:df:de:c4:e5:7a:
         ca:04:84:a1:3a:f8:dd:ac:0a:5b:87:86:65:60:26:e8:c1:c0:
         1f:0e:a2:a4:09:da:2f:1e:d1:69:ec:65:eb:a6:af:6f:f5:ec:
         e7:74:bc:35:00:12:c0:76:31:8a:b3:88:00:98:b9:99:4d:15:
         26:da:39:1c:9e:13:a2:52:fe:00:82:a5:1e:fb:f4:22:33:7f:
         f3:50:33:ca:e8:69:f8:82:97:e8:61:bb:d1:4b:48:36:0e:6c:
         cf:74:9e:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MjYxNjUxMTlaFw0yODA4MjYxNjUxMTlaMBgxFjAU
BgNVBAMTDTZhOGYxOThiLTQyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9GL10llee37bq87Rvpep6XCy2HcDvJqzD84zGRr4BrDIZWfPDmSfig64U
Q0edEHdztnPXTH52VAaQKG5FI1lgpM2arMXq4GIdqcBcD729VDyOwrIO4O60bN+m
+jVt4IIGWBO/aknQn7qxlkCVzPSDsnfgmeLtQ6AJD1tniv+LDtSFKlFxMv1u0PKz
m1j6TQ8/PkCWvYQz9BExDsaR0UWYdj+BQ7zcnHBmfb4lUf7kOKydsxY2KXwup1QG
8JcR5xrlRiePnhhzNfG5M1ODItt+ZvYS0XfYan86xZRu5G+oVOP2JPJAiO+LosKa
C+0lNVu9qm0Dnu9a91phqQbh1iRJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfqwJ
LSkkk79ms/RUXqmjShnkp/YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVFM0I0NjJDQTE2RTExRjFCQTIzRjRFQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHowDQYJKoZIhvcNAQEL
BQADggEBALMCRBt4ckUD8Fvf0R1dL9KXWRTsgkXhF5v+OpEO2kbQv9jhC1444IHM
T4fWcoNmQhTalIr4dxHD8ELxgSMAjtzBV1j5VB+K+bVe6ZQarlPDI7l+agjcBQIX
OA1fbegxBJug6LqRJLj8Se2jS+YZermF/HSq9SLUbQ6vf1zM0wfD24vBlV3dNbOz
gkBxw7ya1T8ODxJmpZnsy0HV9evf3sTlesoEhKE6+N2sCluHhmVgJujBwB8OoqQJ
2i8e0WnsZeumr2/17Od0vDUAEsB2MYqziACYuZlNFSbaORyeE6JS/gCCpR779CIz
f/NQM8roafiCl+hhu9FLSDYObM90nsI=
-----END CERTIFICATE-----