Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/861B5518C62811F1A2E671E6CE1D38B0.roa
File:                     861B5518C62811F1A2E671E6CE1D38B0.roa (raw, json)
Hash identifier:          pzwLDPoE+xrc+QIDk/x+68+v9AwAfoNlhon4NuYWRWM=
Subject key identifier:   C8:8F:BE:DC:5E:B2:58:19:65:1D:BC:37:3C:BC:92:2A:6E:71:CF:74
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2270
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/861B5518C62811F1A2E671E6CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 10:34:38 +0000
ROA not before:           Mon 12 Oct 2026 10:34:34 +0000
ROA not after:            Thu 12 Oct 2028 10:34:34 +0000
asID:                     834
IP address blocks:        154.16.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 10:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8816 (0x2270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 12 10:34:34 2026 GMT
            Not After : Oct 12 10:34:34 2028 GMT
        Subject: CN=6accb7be-6101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:e9:c5:97:12:0d:35:c1:59:cb:c0:ec:88:
                    be:34:df:30:2f:ed:8c:86:cc:9f:ff:fb:30:fa:a1:
                    19:15:de:99:5f:25:b6:82:3d:34:52:c1:31:f5:4f:
                    7f:de:d0:e7:16:b5:02:71:48:ca:6b:0a:c4:a8:c8:
                    dc:e3:1c:e5:0b:b7:0e:b6:fc:4f:5f:6b:71:e9:36:
                    00:7d:16:f1:ea:68:19:ce:ae:76:25:11:e8:45:70:
                    19:90:9b:6c:97:d2:f1:76:20:3a:43:d2:e5:16:59:
                    c6:49:30:2d:a4:92:1e:70:59:00:cc:9f:83:8b:f6:
                    27:9e:ea:43:d4:29:72:e8:7d:49:7f:72:c1:68:55:
                    b5:4c:6f:d3:87:72:4b:52:1e:53:21:48:5f:53:76:
                    b1:44:e0:e8:1f:6d:19:9a:a4:03:cc:46:7a:dc:6d:
                    7e:8c:34:ca:78:8a:d5:20:e8:98:0d:f2:78:15:39:
                    fd:c5:33:23:69:a0:e5:1c:80:f3:60:3a:c2:1a:93:
                    1e:30:bf:e2:28:ce:c3:04:fd:bb:71:6a:61:37:b6:
                    60:97:56:0e:a1:ff:ea:75:95:a8:54:0c:f7:39:28:
                    86:cf:61:79:fd:04:1a:bf:86:67:58:2e:94:72:f0:
                    9f:e9:74:79:cd:0f:72:65:2a:ed:bf:6c:c6:c2:64:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:BE:DC:5E:B2:58:19:65:1D:BC:37:3C:BC:92:2A:6E:71:CF:74
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/861B5518C62811F1A2E671E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:d3:b7:81:c9:6d:98:73:2a:cd:51:5d:d3:ab:8a:e2:ab:
         11:92:d6:dc:c3:3a:d8:60:d3:16:20:b7:69:cd:8f:b4:b6:d7:
         66:63:14:7e:9f:2b:f6:52:13:2c:aa:9f:73:00:df:9c:6c:01:
         0f:00:c9:db:d3:ac:c2:79:ff:0d:c9:c4:eb:4e:de:3d:f0:18:
         be:f7:2e:c6:e6:8e:7f:70:09:4f:85:39:6a:ac:a1:1b:44:28:
         17:bc:f7:76:f3:ac:3e:a4:e3:72:73:1e:0c:1a:65:ed:7c:32:
         78:fc:98:f1:0e:9c:2e:7f:d0:a3:2c:78:8c:47:23:a3:e7:35:
         5e:de:9e:aa:ed:cd:26:f5:02:60:60:ee:cd:e7:a2:3d:16:cf:
         6a:84:ed:c2:2f:c8:26:b9:93:6c:f8:3c:10:ac:9d:a0:23:28:
         c6:d4:e8:dd:f5:06:cb:8f:d8:3f:f1:b8:29:a8:29:1d:7b:02:
         fc:53:69:fd:66:fa:d5:9c:e9:25:11:0e:d5:d9:72:90:04:03:
         e0:e0:a2:b1:bc:68:f6:96:c2:cf:7e:53:db:a3:37:f3:94:34:
         80:74:9e:7e:0e:7b:6f:12:48:30:eb:23:7b:17:0b:fa:c9:ef:
         00:79:99:e7:ac:c7:04:ce:f3:ab:db:d2:e8:eb:64:08:78:d0:
         54:27:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----