Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/837DCE50A16411F1B5CCC0AFCE1D38B0.roa
File:                     837DCE50A16411F1B5CCC0AFCE1D38B0.roa (raw, json)
Hash identifier:          9CfpzHNvI3hLqS0SILK8jI5z0W/GYMjMiEzrz/GGEWA=
Subject key identifier:   72:38:7A:19:78:4C:BA:72:4B:01:6D:C5:99:0F:56:8E:2A:26:B6:4D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2159
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/837DCE50A16411F1B5CCC0AFCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 15:40:50 +0000
ROA not before:           Wed 26 Aug 2026 15:40:46 +0000
ROA not after:            Mon 28 Aug 2028 15:40:46 +0000
asID:                     214483
IP address blocks:        154.16.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8537 (0x2159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 26 15:40:46 2026 GMT
            Not After : Aug 28 15:40:46 2028 GMT
        Subject: CN=6a8f0902-9e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:7a:9a:b4:87:5a:88:0b:2a:34:6f:63:be:
                    1f:b2:da:76:7e:07:e9:a6:0c:e1:ba:0f:32:c6:62:
                    f6:98:49:78:48:5a:84:65:fa:d3:dc:d1:e0:29:69:
                    07:03:19:d8:64:52:4c:81:87:c5:d8:f8:5b:23:ed:
                    f3:e9:a4:8e:c0:48:2c:08:3a:10:67:a0:be:63:fb:
                    78:06:07:43:55:b1:5f:80:72:9d:d7:ef:1d:65:b8:
                    64:14:18:ec:52:4c:65:6d:fb:c8:ed:9e:46:b6:1d:
                    61:03:1e:30:7d:7e:79:10:39:a9:46:4a:6e:3e:33:
                    23:66:a2:37:e8:73:b5:f0:c6:8c:e0:0a:70:8b:84:
                    9b:70:01:f1:8f:16:22:02:c4:54:c0:de:e6:0c:0a:
                    46:8d:87:b2:e3:95:cb:28:2a:6e:92:f3:af:51:43:
                    8c:72:49:d3:e1:7b:26:c9:8c:d1:d2:d0:ae:8e:9e:
                    38:e0:ec:54:74:ff:49:d7:a7:47:e5:cf:85:3c:3f:
                    71:c6:88:36:53:18:e0:e2:38:07:c3:60:e7:7a:61:
                    f3:4c:4a:6d:8d:2b:d7:84:7f:74:5a:d4:d3:f3:18:
                    54:08:d4:db:eb:7c:8f:f9:f4:36:df:f9:aa:1b:43:
                    d4:85:b4:3d:98:7d:6f:61:98:b3:cf:23:4f:04:9a:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:38:7A:19:78:4C:BA:72:4B:01:6D:C5:99:0F:56:8E:2A:26:B6:4D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/837DCE50A16411F1B5CCC0AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:11:75:b0:3a:64:6a:c6:4d:b4:57:a9:89:e6:0f:2e:18:27:
         b2:16:3d:6b:e4:fa:9a:2e:c3:53:d7:7d:f3:6f:9f:d7:2e:3a:
         5e:e6:fe:5f:69:27:b5:0b:68:93:3e:99:01:d5:63:78:01:98:
         cb:68:ee:72:86:84:59:85:74:98:4f:35:9b:74:56:cd:be:e3:
         fb:23:61:5d:8b:43:10:c1:d5:5c:8d:26:e5:e0:41:f8:61:da:
         9a:bf:d3:dc:de:53:ae:89:d4:e1:a1:d7:61:c9:fa:63:1d:94:
         83:e3:69:39:f2:f0:ba:cd:92:46:82:ad:45:41:43:01:57:0c:
         8e:ce:56:b9:32:03:72:f1:86:fd:f7:20:06:98:eb:f8:db:75:
         85:91:88:81:10:9e:41:ea:e9:e3:9e:47:78:0b:9f:31:b5:23:
         97:f0:01:e1:77:fa:4c:23:28:88:66:2f:88:eb:d1:6c:1f:a2:
         92:5d:c0:98:85:03:16:1a:b0:be:f7:79:a1:df:e3:03:9a:8c:
         6e:16:ee:b9:a8:17:5e:84:66:03:89:fe:f6:78:a1:7f:c2:ae:
         06:09:0b:eb:b1:c5:5b:32:53:06:e1:ba:ef:71:e1:af:11:09:
         e7:75:ae:f2:5a:27:ff:f6:c7:fd:63:45:e9:a9:66:f1:8b:55:
         2d:d6:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----