Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDAA5DCA94A11F1A92AD1FBCE1D38B0.roa
File:                     9DDAA5DCA94A11F1A92AD1FBCE1D38B0.roa (raw, json)
Hash identifier:          eDG+n0XG+VzzHMH4fYVkfAPnGUUbD2wBd93UGregJSg=
Subject key identifier:   B1:3F:65:C7:74:42:09:2B:E4:46:22:3C:6A:3C:63:44:20:78:32:03
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21A3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDAA5DCA94A11F1A92AD1FBCE1D38B0.roa
Signing time:             Sat 05 Sep 2026 16:55:37 +0000
ROA not before:           Sat 05 Sep 2026 16:55:33 +0000
ROA not after:            Tue 05 Sep 2028 16:55:33 +0000
asID:                     834
IP address blocks:        154.16.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8611 (0x21a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  5 16:55:33 2026 GMT
            Not After : Sep  5 16:55:33 2028 GMT
        Subject: CN=6a9c4989-a6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:e9:fc:77:81:0f:51:74:b0:91:8f:eb:b7:
                    16:d5:f2:6e:05:82:62:3d:61:53:04:73:cd:51:f2:
                    ee:f7:9f:5b:8a:7d:16:9f:f7:fe:d9:ee:72:12:af:
                    e2:ee:f1:2e:65:53:01:a8:c6:df:e7:c8:9b:e1:7f:
                    7e:15:34:93:f1:19:a0:2b:e0:b0:a0:e9:f0:ef:45:
                    7f:4e:11:a5:68:4c:af:26:80:82:d4:7a:eb:0c:45:
                    eb:70:2d:f2:79:fb:6f:be:52:5f:42:84:33:ef:9a:
                    ee:5c:b7:da:01:e8:1b:bd:10:82:e3:f8:55:5a:d8:
                    34:c2:ba:24:90:23:d8:db:1f:a1:e2:2c:dd:7a:ca:
                    23:ee:ef:1b:f9:83:74:10:53:fe:b4:8a:d9:54:44:
                    73:65:34:56:71:68:f5:45:51:d0:d5:a2:a2:d7:ab:
                    6f:14:33:20:2c:68:30:85:24:29:a0:e8:de:88:e1:
                    42:34:b7:60:8e:07:e3:40:08:a8:cf:45:7f:bf:2d:
                    3f:46:f3:5c:ec:16:7e:58:94:88:4d:f5:5c:9f:d9:
                    45:46:70:a6:1a:b1:27:96:f7:db:24:a3:a5:eb:3b:
                    37:26:13:ec:1e:f3:28:02:40:f5:ad:70:b9:3b:2a:
                    ab:19:8d:b9:5b:c5:b0:bb:f8:8d:f0:48:70:fc:a4:
                    45:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3F:65:C7:74:42:09:2B:E4:46:22:3C:6A:3C:63:44:20:78:32:03
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDAA5DCA94A11F1A92AD1FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:7d:58:71:c8:27:9a:f9:3b:d1:29:74:6f:df:45:99:9d:4f:
         99:d5:02:a2:29:55:8f:9f:14:75:8a:ff:d1:95:45:cc:79:37:
         c4:6d:4b:8c:9f:21:a1:08:7d:97:ac:65:c0:b6:25:18:8a:5e:
         10:4f:50:c9:f6:f2:42:0f:0a:7c:b7:55:e3:af:c0:54:cb:07:
         11:98:39:61:c1:a2:02:27:40:df:04:b7:02:41:cf:d8:f1:d4:
         27:18:28:cd:1f:33:97:35:24:55:a0:3a:0a:14:77:4e:2d:96:
         ce:0d:f0:4b:37:d6:b8:0e:a9:c1:a6:28:ea:1d:84:08:c7:fa:
         e0:3f:26:bf:c9:9c:96:ed:38:59:21:8d:9e:e2:89:07:4d:4a:
         06:38:42:17:fb:f1:da:5a:b6:91:61:ed:55:e6:d0:58:92:84:
         00:fe:36:43:8c:41:45:bb:ae:05:84:bf:39:1d:4d:58:ac:11:
         0a:93:ad:02:f2:73:db:5c:47:f3:37:4d:7b:de:50:cc:3d:f1:
         c6:f7:28:92:b9:08:d6:b8:e1:8b:e9:34:21:2c:17:3d:09:36:
         96:37:15:3d:43:03:ed:6b:9f:06:d3:7f:03:75:50:ec:19:0c:
         78:81:40:94:b8:72:a5:de:60:80:2e:2c:b8:84:65:c7:c9:4a:
         e7:f5:8f:53
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIaMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MDUxNjU1MzNaFw0yODA5MDUxNjU1MzNaMBgxFjAU
BgNVBAMTDTZhOWM0OTg5LWE2ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB5en8d4EPUXSwkY/rtxbV8m4FgmI9YVMEc81R8u73n1uKfRaf9/7Z7nIS
r+Lu8S5lUwGoxt/nyJvhf34VNJPxGaAr4LCg6fDvRX9OEaVoTK8mgILUeusMRetw
LfJ5+2++Ul9ChDPvmu5ct9oB6Bu9EILj+FVa2DTCuiSQI9jbH6HiLN16yiPu7xv5
g3QQU/60itlURHNlNFZxaPVFUdDVoqLXq28UMyAsaDCFJCmg6N6I4UI0t2COB+NA
CKjPRX+/LT9G81zsFn5YlIhN9Vyf2UVGcKYasSeW99sko6XrOzcmE+we8ygCQPWt
cLk7KqsZjblbxbC7+I3wSHD8pEWzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsT9l
x3RCCSvkRiI8ajxjRCB4MgMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlEREFBNURDQTk0QTExRjFBOTJBRDFGQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENAwDQYJKoZIhvcNAQEL
BQADggEBAL99WHHIJ5r5O9EpdG/fRZmdT5nVAqIpVY+fFHWK/9GVRcx5N8RtS4yf
IaEIfZesZcC2JRiKXhBPUMn28kIPCny3VeOvwFTLBxGYOWHBogInQN8EtwJBz9jx
1CcYKM0fM5c1JFWgOgoUd04tls4N8Es31rgOqcGmKOodhAjH+uA/Jr/JnJbtOFkh
jZ7iiQdNSgY4Qhf78dpatpFh7VXm0FiShAD+NkOMQUW7rgWEvzkdTVisEQqTrQLy
c9tcR/M3TXveUMw98cb3KJK5CNa44YvpNCEsFz0JNpY3FT1DA+1rnwbTfwN1UOwZ
DHiBQJS4cqXeYIAuLLiEZcfJSuf1j1M=
-----END CERTIFICATE-----