Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A73B6EE4BD9111F18E55F1C1CE1D38B0.roa
File:                     A73B6EE4BD9111F18E55F1C1CE1D38B0.roa (raw, json)
Hash identifier:          GvBzzsvoEIIeTCj+YHUE+H6jktOFGopZ5cETsRLPNHY=
Subject key identifier:   A7:19:01:C7:53:0E:4E:F4:C9:24:9A:B2:EC:87:48:A9:8A:D9:C7:B7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       223F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A73B6EE4BD9111F18E55F1C1CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:14:30 +0000
ROA not before:           Thu 01 Oct 2026 12:14:26 +0000
ROA not after:            Sun 01 Oct 2028 12:14:26 +0000
asID:                     215224
IP address blocks:        154.16.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8767 (0x223f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 12:14:26 2026 GMT
            Not After : Oct  1 12:14:26 2028 GMT
        Subject: CN=6abe4ea6-9d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:02:3b:55:79:82:3d:6a:a8:38:d1:ea:e3:
                    09:a3:d5:fd:ae:00:a0:11:e1:da:a2:b7:6c:73:b4:
                    9a:e8:79:0f:08:f9:22:10:4c:53:aa:1b:1e:84:e5:
                    70:47:5b:cd:2a:33:c5:b4:6e:f4:b5:12:b0:3f:ad:
                    9d:59:06:86:25:fc:29:20:dc:ab:c9:68:99:d4:81:
                    e7:dd:03:7c:09:ce:7b:63:a5:59:8b:1a:33:9b:31:
                    a6:dd:71:64:2d:9a:fd:01:08:7b:f0:5b:7b:3b:08:
                    dd:1f:de:46:cd:b9:d0:4d:7b:71:de:64:2b:98:2a:
                    0f:6b:f2:b8:0c:03:e1:e5:60:28:b1:9d:d3:c6:3d:
                    79:d1:c6:70:7c:ba:d9:dc:14:c7:05:72:21:65:7d:
                    66:96:d7:af:f1:98:72:ba:70:68:24:a0:3b:85:9b:
                    e4:29:9c:0f:20:7a:ea:3d:a8:7a:5a:4d:94:1f:45:
                    1d:f8:d7:37:a1:d3:df:57:36:91:63:2b:3a:cc:85:
                    97:48:54:3b:7a:a3:98:1c:1c:d4:33:9c:b4:b7:df:
                    0a:b2:e6:72:eb:a1:6d:06:85:5e:3b:9a:31:e2:85:
                    a1:b8:7a:f0:b5:06:fd:75:0e:48:f8:83:76:f5:03:
                    bf:0c:c7:d6:af:12:a7:15:83:9d:21:e4:0d:ab:ec:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:01:C7:53:0E:4E:F4:C9:24:9A:B2:EC:87:48:A9:8A:D9:C7:B7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A73B6EE4BD9111F18E55F1C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:f5:d8:82:9b:f2:c4:3c:fd:e4:7b:97:33:9c:3e:aa:1b:a7:
         74:f6:da:69:92:41:44:e5:cf:70:c5:1a:3b:12:8d:70:7f:97:
         c6:09:3b:58:c6:b6:95:41:06:ce:63:37:db:69:fc:64:7e:5a:
         dc:13:bd:41:6e:42:a0:93:9c:74:99:8e:6f:67:07:a8:98:eb:
         ac:6b:87:b4:42:80:77:c5:77:b2:98:79:e2:a7:fb:42:f2:1e:
         20:6c:6d:fc:83:2d:f2:8f:ca:ec:57:9a:aa:1d:de:b8:e8:1b:
         d8:9c:99:6d:ce:8c:f9:b0:e2:85:72:e9:a2:58:54:5e:c1:fe:
         04:ca:8a:67:83:a7:fc:8d:d4:59:e0:66:e9:ea:6b:21:5f:0b:
         73:3e:5d:1d:ff:b7:fa:f9:00:fc:39:84:c4:7c:65:f1:d2:80:
         c4:ed:27:f1:be:46:a1:3f:db:93:ad:9b:84:04:d9:91:d3:7a:
         4e:12:b8:13:0e:61:8b:8e:db:62:7c:8b:43:0b:97:c7:9d:32:
         f8:7f:23:14:53:f4:f3:26:f9:e3:f8:b1:6c:e9:81:20:30:6f:
         28:da:44:7b:6e:ab:8a:38:18:c9:5d:fd:44:0b:72:2a:b0:3d:
         66:32:25:99:6a:f9:4c:75:d5:0f:a6:28:26:35:a2:e2:dd:90:
         3c:19:94:1f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIj8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjEwMDExMjE0MjZaFw0yODEwMDExMjE0MjZaMBgxFjAU
BgNVBAMTDTZhYmU0ZWE2LTlkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDlwI7VXmCPWqoONHq4wmj1f2uAKAR4dqit2xztJroeQ8I+SIQTFOqGx6E
5XBHW80qM8W0bvS1ErA/rZ1ZBoYl/Ckg3KvJaJnUgefdA3wJzntjpVmLGjObMabd
cWQtmv0BCHvwW3s7CN0f3kbNudBNe3HeZCuYKg9r8rgMA+HlYCixndPGPXnRxnB8
utncFMcFciFlfWaW16/xmHK6cGgkoDuFm+QpnA8geuo9qHpaTZQfRR341zeh099X
NpFjKzrMhZdIVDt6o5gcHNQznLS33wqy5nLroW0GhV47mjHihaG4evC1Bv11Dkj4
g3b1A78Mx9avEqcVg50h5A2r7C55AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpxkB
x1MOTvTJJJqy7IdIqYrZx7cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0E3M0I2RUU0QkQ5MTExRjE4RTU1RjFDMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELQwDQYJKoZIhvcNAQEL
BQADggEBAM/12IKb8sQ8/eR7lzOcPqobp3T22mmSQUTlz3DFGjsSjXB/l8YJO1jG
tpVBBs5jN9tp/GR+WtwTvUFuQqCTnHSZjm9nB6iY66xrh7RCgHfFd7KYeeKn+0Ly
HiBsbfyDLfKPyuxXmqod3rjoG9icmW3OjPmw4oVy6aJYVF7B/gTKimeDp/yN1Fng
ZunqayFfC3M+XR3/t/r5APw5hMR8ZfHSgMTtJ/G+RqE/25Otm4QE2ZHTek4SuBMO
YYuO22J8i0MLl8edMvh/IxRT9PMm+eP4sWzpgSAwbyjaRHtuq4o4GMld/UQLciqw
PWYyJZlq+Ux11Q+mKCY1ouLdkDwZlB8=
-----END CERTIFICATE-----