Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE84E6B29D3C11F1A8F25ECACE1D38B0.roa
File:                     CE84E6B29D3C11F1A8F25ECACE1D38B0.roa (raw, json)
Hash identifier:          QwDvD4KCzRopVVa2R9fpIRiiUSmckpDd3oIMbfXFzas=
Subject key identifier:   3D:C1:D0:81:B5:1B:17:7B:F3:0C:2E:E2:CE:A7:23:E5:46:CC:A4:58
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2136
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE84E6B29D3C11F1A8F25ECACE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:46:32 +0000
ROA not before:           Fri 21 Aug 2026 08:46:28 +0000
ROA not after:            Mon 21 Aug 2028 08:46:28 +0000
asID:                     219068
IP address blocks:        154.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8502 (0x2136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 21 08:46:28 2026 GMT
            Not After : Aug 21 08:46:28 2028 GMT
        Subject: CN=6a881068-f69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:f0:42:ff:f9:bf:8a:03:55:2d:94:bb:b0:
                    9d:03:da:b5:05:7a:5a:50:3f:f9:30:a0:38:8e:b0:
                    61:25:2a:8d:cb:37:58:0b:a7:8c:b3:64:6f:f8:ae:
                    1f:25:1e:e9:e8:af:77:98:46:d6:1b:83:e6:f6:6c:
                    46:dd:d8:1f:69:03:69:25:28:db:e9:b1:a9:17:56:
                    ac:9e:41:f6:49:51:07:0f:92:7b:38:00:64:5f:e3:
                    9a:6e:65:fb:fd:fb:73:dc:03:97:38:aa:48:6e:13:
                    85:ce:fa:e4:83:1e:96:6c:96:cc:67:cb:4c:78:df:
                    be:5d:cc:9e:d7:39:6e:be:d1:a5:6c:3a:cb:0c:89:
                    e8:98:0d:1a:5e:3c:41:80:72:7b:5b:7b:0d:aa:85:
                    61:cf:6d:5e:ab:f7:0b:0a:50:a5:8a:31:5a:50:f5:
                    22:28:da:d2:d9:eb:56:2c:3a:3f:a8:d4:a2:88:c9:
                    bf:1d:db:c6:89:b2:44:0e:38:99:f2:de:9c:ad:fc:
                    65:9c:4a:51:5c:a7:e1:ca:d5:47:48:97:15:de:0c:
                    e6:c1:87:6a:6b:5f:ca:c2:fb:70:24:34:29:4d:ef:
                    ae:a0:e7:90:27:32:02:43:19:b9:99:a0:8e:8c:e7:
                    c4:2b:75:12:65:82:69:b5:50:1c:81:02:20:f9:a2:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:D0:81:B5:1B:17:7B:F3:0C:2E:E2:CE:A7:23:E5:46:CC:A4:58
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE84E6B29D3C11F1A8F25ECACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:ff:13:27:73:45:aa:79:93:8d:2e:66:3f:68:9c:66:5e:
         44:e5:fe:b0:36:60:ef:36:a7:ec:76:cb:4d:00:d9:cc:ed:58:
         68:6d:86:74:92:a0:e1:be:d9:86:03:2e:e2:28:19:c4:b1:22:
         6c:da:7c:e7:3c:86:28:9b:d4:9e:a6:71:28:0b:00:0b:64:b2:
         22:c3:8d:d2:02:58:6a:89:90:d3:37:30:f0:09:ac:76:96:28:
         79:45:38:69:a4:31:56:c7:2d:d6:68:a2:8c:7c:59:fe:46:68:
         42:76:0b:9e:66:46:c5:28:cb:31:6d:95:96:af:4b:39:96:4f:
         2d:4f:a6:60:b7:b1:82:5f:a5:f3:f3:da:f7:8c:6d:21:84:95:
         57:2c:b2:13:ee:ac:bf:8a:c5:f4:8d:7d:10:8e:65:64:ca:48:
         39:b5:a7:1b:a0:5f:cc:fe:7a:5d:51:46:50:79:e8:53:b3:f4:
         5e:99:29:de:a2:7a:c4:58:01:04:9a:c3:03:0e:51:48:50:7a:
         3e:1e:b3:e4:9c:e3:ec:f1:c5:dd:70:8b:a4:4b:5b:a9:55:04:
         a2:4c:80:94:66:b4:46:0f:68:fd:7a:12:96:6a:fc:c8:7a:d0:
         b3:7c:ba:43:af:fa:5b:67:35:2a:5c:61:d8:29:03:bf:37:52:
         f8:4b:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----