Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD3885C6DB7A11F1828D58D0CE1D38B0.roa
File:                     CD3885C6DB7A11F1828D58D0CE1D38B0.roa (raw, json)
Hash identifier:          AWj7uuKIaIXdobHLuyByE2P5k07Upacl/xRU9P+RI8k=
Subject key identifier:   5C:DD:C3:30:9A:9F:5A:77:81:41:A3:1C:12:F4:97:AD:15:C5:B5:D7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       22DD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD3885C6DB7A11F1828D58D0CE1D38B0.roa
Signing time:             Sun 08 Nov 2026 13:46:30 +0000
ROA not before:           Sun 08 Nov 2026 13:46:25 +0000
ROA not after:            Sat 11 Nov 2028 13:46:25 +0000
asID:                     218201
IP address blocks:        154.16.222.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8925 (0x22dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov  8 13:46:25 2026 GMT
            Not After : Nov 11 13:46:25 2028 GMT
        Subject: CN=6af07d36-5d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:61:d3:6f:98:0f:d8:f6:3f:9a:13:db:b1:
                    29:15:d8:0e:bc:b4:a3:f1:f7:9e:2b:c7:ca:a6:e2:
                    33:17:da:f3:9b:fa:b0:05:de:59:4a:15:2c:31:1c:
                    a3:c1:dc:5b:f2:5e:fa:ca:ca:2e:c6:5e:24:b6:6c:
                    01:1d:6d:ca:bd:99:14:32:e2:64:30:f2:cc:79:0b:
                    30:2d:ff:f3:d5:96:db:49:de:0d:31:04:61:f5:d2:
                    70:e5:59:ab:1b:e5:ea:f4:25:6f:c3:2e:16:1f:51:
                    f7:87:ff:1a:74:49:92:5c:b1:3f:3c:10:f7:a6:90:
                    55:36:91:d7:f8:b4:36:04:81:b4:e1:7f:da:f0:8b:
                    75:88:ce:5d:37:d9:62:13:ca:0c:13:ab:9a:07:20:
                    a6:83:10:2e:92:9b:5c:c4:d0:84:da:7a:f2:ed:5f:
                    ef:34:5b:85:d9:06:c2:22:65:52:49:c9:2b:ad:58:
                    48:29:8a:33:dd:ed:92:6c:b4:bf:f0:4f:24:1b:9f:
                    f5:4b:01:90:27:de:a7:f2:b1:88:bf:a2:03:b0:f0:
                    47:6b:44:77:59:6b:19:4f:11:33:37:b9:5a:f9:4e:
                    44:b4:88:04:b7:c7:e6:72:b5:af:db:19:e9:f5:83:
                    35:a2:b7:ef:f7:09:04:8b:22:68:2d:d3:c8:6f:88:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:C3:30:9A:9F:5A:77:81:41:A3:1C:12:F4:97:AD:15:C5:B5:D7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD3885C6DB7A11F1828D58D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:f2:89:d5:08:3e:0b:01:e7:16:ed:87:62:25:4d:39:af:
         58:77:c5:bf:b4:36:af:7e:6d:6e:a0:dc:63:84:ad:fe:d2:4f:
         06:72:a1:dd:4f:c4:98:f2:63:06:12:4b:c5:a3:f9:5b:52:35:
         21:56:d2:87:41:21:a3:d6:7c:a5:58:4e:d6:8d:77:35:a5:5f:
         e1:38:47:62:ec:ae:6e:1b:3d:47:21:cb:0f:2f:e3:d5:bc:06:
         31:48:4e:0a:b5:2a:72:d9:91:e6:8d:6b:f5:01:52:94:c0:5d:
         08:af:3a:d8:7c:f8:cb:61:73:ae:ee:cf:b1:18:a9:04:c8:49:
         4c:e6:7e:3b:e3:7c:8e:49:91:f3:06:92:7d:48:7d:c2:3b:71:
         3d:c9:f2:bb:54:1b:62:54:ec:f8:fd:32:72:92:65:48:26:59:
         8f:6c:94:c5:75:c3:88:3e:79:39:18:a8:cd:19:b0:f6:a2:f2:
         73:5c:bc:74:57:70:e2:5b:6b:a4:49:a2:65:95:89:e5:c9:6d:
         e4:a3:56:e1:d1:e3:3f:e6:e4:25:21:33:54:25:35:76:9c:90:
         bb:a8:aa:6d:c4:4d:49:e1:2b:3d:69:a5:56:ab:6a:3f:a1:3e:
         3c:33:7c:00:b9:ff:ea:e3:9e:d8:7b:63:85:62:f9:1a:30:68:
         2d:37:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----