Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4356B4C9D7B11F199325DC1CE1D38B0.roa
File:                     D4356B4C9D7B11F199325DC1CE1D38B0.roa (raw, json)
Hash identifier:          H+YuuGpTTn7zgEsI8TDNa9WGJOcu35iN/SqA6f2OTis=
Subject key identifier:   6D:44:64:A2:5E:D7:65:D2:46:36:78:06:6A:8A:44:7B:5B:F4:62:76
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       213E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4356B4C9D7B11F199325DC1CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 16:17:39 +0000
ROA not before:           Fri 21 Aug 2026 16:17:35 +0000
ROA not after:            Mon 21 Aug 2028 16:17:35 +0000
asID:                     200017
IP address blocks:        154.16.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8510 (0x213e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 21 16:17:35 2026 GMT
            Not After : Aug 21 16:17:35 2028 GMT
        Subject: CN=6a887a23-4e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:ba:ed:24:33:f7:ec:c7:be:c0:fe:c2:73:
                    6a:8f:a3:ae:ec:33:e7:75:95:4c:ce:dd:7c:e2:87:
                    05:08:6d:84:cc:b7:43:38:70:58:4f:39:19:97:40:
                    53:3a:af:60:27:26:b6:2b:32:b3:f3:e7:dd:c3:29:
                    bf:1a:e6:fd:ac:10:9a:54:7e:db:60:69:31:49:8a:
                    8d:7d:08:01:30:a8:0a:e1:d3:cc:54:6b:7f:e3:ac:
                    ba:3d:8c:01:6a:4f:15:70:30:d7:74:31:7d:20:e4:
                    92:97:bb:09:e5:d6:d8:2a:b0:e0:8c:f9:f8:9f:fb:
                    99:2a:3d:ea:f8:5e:7f:8c:37:bc:77:1b:ce:ec:87:
                    1d:b2:80:cd:24:1f:9a:29:74:da:b9:b2:61:a0:bc:
                    46:86:b3:3a:64:d1:ef:30:77:81:d0:60:0f:0a:5d:
                    a6:a3:6a:f8:c9:96:7c:e6:e9:c1:73:07:63:6c:38:
                    0f:84:80:40:d0:41:9c:93:5d:49:d0:18:92:ac:a9:
                    c3:dc:f7:2b:f5:06:36:8b:2c:89:41:c0:3c:0e:b2:
                    1a:a4:5f:eb:60:74:5b:61:51:1f:54:70:a2:77:fd:
                    0f:2a:ff:93:5b:b6:52:90:88:3c:dc:81:ee:76:2c:
                    61:93:ed:6f:5e:7e:2b:14:17:b8:4a:08:09:16:7e:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:64:A2:5E:D7:65:D2:46:36:78:06:6A:8A:44:7B:5B:F4:62:76
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4356B4C9D7B11F199325DC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:43:92:80:8c:8f:0f:98:bb:39:d3:1d:91:0f:f8:29:75:
         54:73:fb:b3:8a:52:3c:6e:35:ee:78:68:70:70:61:42:ca:11:
         d3:6e:b4:86:50:6f:c3:e3:9c:f9:c0:f7:91:3a:08:35:07:e6:
         4f:c3:b0:09:be:90:cb:46:51:96:87:f8:1f:dc:21:8c:13:7c:
         94:5d:29:c3:b5:1f:97:27:42:66:86:ed:94:46:81:4d:46:aa:
         b8:71:d5:2e:4b:68:0d:d0:18:ea:2f:7c:c9:17:a1:00:87:e2:
         5e:bb:64:3f:8c:cf:18:5f:66:fc:e0:ba:92:dc:ff:8a:dc:63:
         ee:e8:0e:84:b9:c1:47:63:2f:f2:c9:b3:10:f9:bb:9c:6b:67:
         bf:8f:bc:66:6e:e5:7e:57:8c:50:ef:4f:ef:6a:66:83:01:36:
         2e:e1:ea:bb:24:d5:10:34:e8:ec:0f:55:04:cc:eb:4b:37:0a:
         16:f7:0b:18:bc:76:9f:cd:12:0d:df:8f:c9:77:4f:da:03:0d:
         a9:38:fd:e6:ec:9f:73:c9:93:96:e5:3c:34:ae:ba:63:3f:00:
         f9:14:73:d4:c4:8d:4a:ed:e2:be:ca:08:02:00:90:e3:7d:9d:
         cb:5e:43:14:1f:03:0d:5e:61:0d:10:c3:71:f6:45:52:a4:fb:
         2c:56:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----