Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEA2D81AC71011F1A3CE9DCECE1D38B0.roa
File:                     AEA2D81AC71011F1A3CE9DCECE1D38B0.roa (raw, json)
Hash identifier:          2oInOf00pTCfb/D642nzFo5fbeW8xYRlgUqmJZ7MBDs=
Subject key identifier:   B7:83:7C:39:0C:FF:A9:8D:8C:41:C0:E3:72:49:D5:57:BC:45:4C:0A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2283
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEA2D81AC71011F1A3CE9DCECE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:16:29 +0000
ROA not before:           Tue 13 Oct 2026 14:16:24 +0000
ROA not after:            Fri 13 Oct 2028 14:16:24 +0000
asID:                     212238
IP address blocks:        154.16.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8835 (0x2283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:16:24 2026 GMT
            Not After : Oct 13 14:16:24 2028 GMT
        Subject: CN=6ace3d3d-a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:91:23:9e:3b:0f:35:a3:36:7d:d1:e3:2c:
                    a5:92:73:ff:32:ad:19:43:70:0c:10:86:d6:fc:3b:
                    65:ad:9e:d9:18:52:78:db:b9:47:4b:3d:39:fb:58:
                    b3:4c:6e:ae:42:37:20:b3:9b:3c:5a:db:35:1e:fb:
                    98:18:ca:f4:08:af:87:df:4b:cd:98:40:3a:d9:f4:
                    61:41:5d:10:42:4e:6b:fc:13:4b:12:b3:b3:83:3b:
                    e0:c2:4a:0d:b2:8c:cd:df:63:78:80:80:38:b0:45:
                    04:72:8b:c7:a3:c4:f5:bd:cd:3e:bb:61:69:50:63:
                    9f:f5:50:e6:e3:45:d7:7c:27:1d:7b:4b:13:60:0d:
                    51:16:52:cb:59:c8:b6:7a:0b:d5:9e:94:79:81:27:
                    69:55:4a:5a:82:e8:7f:66:d7:64:af:31:9c:82:85:
                    a8:6e:8e:4e:43:52:03:d4:ab:65:b0:53:d3:3b:3c:
                    bf:4d:9f:21:70:98:72:a0:4c:3e:d2:58:20:e5:e0:
                    dd:21:b7:19:69:8b:25:ad:1f:fb:0a:4a:7f:e5:eb:
                    87:d8:af:3d:85:fc:3e:3c:ad:c6:32:75:d8:dc:89:
                    d6:86:8e:89:a9:ad:62:48:d8:b2:2d:13:7a:26:a1:
                    00:4b:a6:bc:03:7b:04:ea:0e:29:59:4b:cc:0b:86:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:7C:39:0C:FF:A9:8D:8C:41:C0:E3:72:49:D5:57:BC:45:4C:0A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEA2D81AC71011F1A3CE9DCECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:92:41:45:6c:84:08:57:c3:7e:30:7d:9d:71:b0:b4:15:c4:
         4c:20:f1:b2:3d:ad:f0:90:f0:76:ca:55:2f:f6:94:a3:27:53:
         4f:15:54:5b:66:29:a8:94:70:d4:63:84:0e:c4:03:35:cd:d7:
         11:af:3f:44:ef:7b:df:b7:d6:79:ce:46:55:65:fb:06:c5:73:
         12:8f:79:4a:b4:6a:ce:4e:8a:42:ef:79:b5:a0:6e:8b:ab:e8:
         3e:84:db:1e:e0:90:c7:15:a9:46:83:dc:76:c5:be:fc:1e:39:
         5d:64:5c:69:e5:1a:6e:d6:8b:1b:c5:8d:7c:32:dd:ee:7e:88:
         34:c0:fa:13:57:20:73:69:3a:ee:ab:19:39:c4:6a:ff:f8:e8:
         b2:37:13:77:2b:d9:b6:cd:5b:d0:e6:9b:da:47:23:4f:03:de:
         ee:29:5a:0d:b8:d5:79:75:90:57:b5:87:05:5d:be:06:68:f7:
         1e:d7:40:95:da:87:88:f9:5c:59:9a:fa:b6:99:21:da:63:c7:
         9d:3b:d3:a1:e5:8a:ef:1e:59:6d:d2:3d:28:26:4a:9d:7c:28:
         65:b6:c8:10:ae:01:77:55:f3:cd:ae:71:16:e9:28:53:c3:52:
         5e:47:1f:c9:50:13:a5:e2:fc:31:66:10:2f:92:02:e8:81:4d:
         67:b5:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----