Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66F0834CBD9111F1A7671DC0CE1D38B0.roa
File:                     66F0834CBD9111F1A7671DC0CE1D38B0.roa (raw, json)
Hash identifier:          oBf7gj5gjgP6ViIV4msYtUDMXIsZXdb4yQQhJqKSudg=
Subject key identifier:   9F:80:AC:84:E5:CE:12:AA:48:11:C0:3A:A2:E7:76:8A:41:F8:4E:71
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       223D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66F0834CBD9111F1A7671DC0CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:12:42 +0000
ROA not before:           Thu 01 Oct 2026 12:12:38 +0000
ROA not after:            Sun 01 Oct 2028 12:12:38 +0000
asID:                     212238
IP address blocks:        154.16.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8765 (0x223d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 12:12:38 2026 GMT
            Not After : Oct  1 12:12:38 2028 GMT
        Subject: CN=6abe4e3a-8826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:37:8c:5e:4f:2c:0b:5f:d6:e6:f4:cd:b4:
                    45:32:d2:84:c0:64:25:35:fe:c7:93:ac:de:5d:37:
                    8e:45:b7:ec:ff:87:36:f2:62:c7:db:a2:39:e2:9a:
                    6f:cb:97:21:92:f4:08:6d:68:f1:52:f5:c8:a8:5e:
                    c5:bc:ee:6e:de:d1:9f:3c:e6:75:c7:3d:56:3b:16:
                    ad:18:ad:6f:e6:a3:bd:7f:57:e6:04:aa:b3:64:98:
                    bd:0d:53:53:ae:70:50:fb:6c:8e:5d:c4:29:71:8b:
                    7a:6d:d7:f8:af:bf:0c:c3:7d:98:0e:23:b8:99:98:
                    3a:b5:be:5d:97:f7:bc:ee:9c:1b:60:58:4e:c4:08:
                    16:9d:2b:81:a2:a3:01:44:81:5e:d4:1e:ad:f1:be:
                    eb:e2:c0:a6:39:90:67:7c:81:42:f5:72:68:10:da:
                    a2:75:3f:93:11:b5:41:2b:e7:6e:15:85:63:52:62:
                    47:b3:bc:7e:3d:c5:14:d2:72:23:33:84:da:6c:37:
                    47:3c:28:19:df:ec:74:47:15:ab:f1:13:9f:e1:e5:
                    97:4e:87:4e:d6:92:94:82:08:32:80:9b:b0:10:22:
                    32:cf:1d:68:10:51:15:07:39:30:7e:cb:4d:a6:3a:
                    05:fd:33:a7:18:f3:98:15:0e:9e:4f:0b:cc:fc:a1:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:80:AC:84:E5:CE:12:AA:48:11:C0:3A:A2:E7:76:8A:41:F8:4E:71
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66F0834CBD9111F1A7671DC0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:66:f0:5f:f6:45:93:96:85:c3:aa:03:9f:6c:22:a9:64:
         ca:27:68:6a:b2:30:c9:4c:70:d8:be:eb:77:ae:ff:f0:84:fd:
         6f:c1:f1:e9:29:26:8b:7c:62:4f:0f:44:9c:14:ef:40:e0:18:
         f0:44:79:b4:ae:fa:0d:b2:f9:60:cb:b5:83:82:33:7f:7d:9e:
         71:ee:61:af:98:de:13:86:66:ef:10:3c:3e:42:9a:db:a1:de:
         c0:69:0f:47:54:76:5d:1a:db:06:b7:ac:a1:90:c0:50:b1:01:
         e0:75:06:89:51:38:2a:c2:eb:f3:71:8e:b2:c1:64:8d:ab:18:
         a8:15:65:10:da:27:85:77:38:a4:ea:c9:b0:9d:8d:ec:19:bf:
         96:1f:c6:d8:f7:65:c0:74:49:a7:ae:38:9a:4f:e4:2b:6e:4f:
         f8:c0:84:28:00:9c:76:dc:f8:d0:dd:b6:84:9b:51:83:b3:ed:
         a0:d3:39:30:0f:13:26:2f:c1:c7:27:0b:08:47:97:73:91:a1:
         38:f2:65:e3:03:dc:a2:9f:32:96:93:7b:fc:24:3d:2e:43:6b:
         c3:ef:cd:89:76:44:f2:35:28:86:d8:e4:f0:66:0f:c8:a7:77:
         b0:51:db:08:ed:c7:92:bb:e0:d6:17:ac:80:04:e1:13:f4:ab:
         c3:b5:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----