Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB7E68EC71011F18663C6CECE1D38B0.roa
File:                     CBB7E68EC71011F18663C6CECE1D38B0.roa (raw, json)
Hash identifier:          U0gU8LSF220zwR6HSjN4eCk91w4d/18kCwMcXzX3SHU=
Subject key identifier:   58:BC:1B:4F:9B:A0:98:4B:CD:9F:75:A6:A3:1A:2D:2A:3B:09:6A:87
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2287
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB7E68EC71011F18663C6CECE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:17:18 +0000
ROA not before:           Tue 13 Oct 2026 14:17:13 +0000
ROA not after:            Fri 13 Oct 2028 14:17:13 +0000
asID:                     212238
IP address blocks:        154.16.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8839 (0x2287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:17:13 2026 GMT
            Not After : Oct 13 14:17:13 2028 GMT
        Subject: CN=6ace3d6e-d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:83:77:50:70:fe:2c:0f:a4:03:7e:e6:1f:
                    48:84:86:f0:44:28:2e:82:d6:13:fc:bd:58:26:12:
                    7d:c4:c8:b9:99:62:8e:6e:f4:d1:98:0d:92:48:8a:
                    b7:e9:ed:df:68:6f:16:d5:94:e7:ff:6b:9e:31:b2:
                    e7:49:cb:b3:19:a6:1d:a7:fe:d1:c3:3a:9d:21:10:
                    21:8e:23:c0:45:a4:80:55:dc:08:a6:f0:71:96:4b:
                    d1:46:a1:bc:ec:48:be:10:5d:3b:e6:6e:7a:11:c8:
                    f4:35:5f:11:3d:16:20:34:1c:a9:7d:1e:ce:be:c2:
                    4f:9b:39:55:06:d2:85:81:33:75:7f:e3:3f:53:bb:
                    85:a0:54:10:66:a8:4e:e2:2f:62:a6:ec:3f:68:2b:
                    0c:93:f0:55:d0:26:b3:c5:d1:9e:11:11:19:01:66:
                    39:56:33:f6:3b:af:3a:78:a1:cb:52:5d:57:af:06:
                    3c:61:30:35:50:ae:46:40:3d:fb:95:96:b6:2a:a6:
                    98:9c:f4:77:ad:f4:2a:d5:47:0f:35:1d:89:9c:4c:
                    bf:1c:14:53:13:7b:04:dd:dc:34:dd:cc:66:33:a7:
                    1b:1e:03:38:4a:86:eb:69:c9:5c:c2:83:66:df:17:
                    2e:44:6f:e6:b9:b1:f4:24:89:f4:8e:9e:ad:d0:af:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:1B:4F:9B:A0:98:4B:CD:9F:75:A6:A3:1A:2D:2A:3B:09:6A:87
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB7E68EC71011F18663C6CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:57:02:92:a3:b7:db:e3:08:db:5f:48:ef:30:73:7f:f7:3b:
         2c:3c:85:b9:07:0f:fb:a3:d5:bf:b5:e8:1f:b0:d8:3a:0a:54:
         dc:a5:c7:84:d2:8b:10:8c:0c:37:42:ae:b6:9f:f6:d7:4d:57:
         c5:18:9f:be:01:e9:2d:cb:82:26:f1:72:bf:08:84:ef:68:22:
         58:04:f7:f2:38:77:52:05:2f:de:fa:cf:32:49:ef:49:5e:c7:
         37:b0:35:68:3c:72:28:99:7b:88:2f:fa:c6:1c:66:27:50:c8:
         13:b2:ef:cf:57:4d:d5:41:29:c3:58:3c:c9:de:c8:9e:a0:7e:
         ef:53:d3:51:d9:b7:cc:a8:8f:f0:46:c8:3d:84:a4:a3:a9:3a:
         6f:39:42:b1:2c:65:63:58:23:8a:a2:a6:cd:fc:4f:b6:0f:48:
         7d:13:7e:e2:e5:1d:db:ef:91:3c:48:d0:7f:81:30:f5:be:3a:
         3e:b9:e4:09:a8:12:fb:4a:94:16:d4:f7:39:7b:29:bc:13:86:
         08:ab:5e:87:3e:d0:90:c2:b4:4b:80:d8:ed:55:66:dd:f8:cd:
         52:5c:8a:75:b8:35:9f:19:0f:77:2c:f6:cd:46:3c:da:0d:6b:
         20:fc:35:01:a1:0b:c1:fe:0c:aa:50:c0:62:4f:f9:1f:b8:b9:
         e7:a4:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----