Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB39163CBD9211F1B468B0CACE1D38B0.roa
File:                     DB39163CBD9211F1B468B0CACE1D38B0.roa (raw, json)
Hash identifier:          aB/WvpjVzGkYSKy9FYVxmcOzx2kI1KaDnL+xsy/lBQs=
Subject key identifier:   C8:FB:04:0E:08:60:E8:86:52:B8:E5:55:5D:C9:09:FC:16:59:37:27
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2247
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB39163CBD9211F1B468B0CACE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:23:07 +0000
ROA not before:           Thu 01 Oct 2026 12:23:03 +0000
ROA not after:            Sun 01 Oct 2028 12:23:03 +0000
asID:                     212238
IP address blocks:        154.16.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8775 (0x2247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 12:23:03 2026 GMT
            Not After : Oct  1 12:23:03 2028 GMT
        Subject: CN=6abe50ab-0ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:76:19:b2:65:f8:be:4d:d5:be:68:24:6c:
                    8f:3d:41:cc:b9:a1:50:4d:bf:d0:f5:67:35:26:cf:
                    f6:69:42:4e:8c:4d:2d:92:a6:e0:20:1a:32:03:46:
                    7b:75:9f:7f:62:02:2e:88:d5:26:0f:01:28:4a:ab:
                    63:a0:1f:ea:d3:04:26:23:8c:aa:12:38:d2:68:08:
                    60:49:c4:92:8f:dd:14:4a:80:43:e5:18:e2:32:4f:
                    0a:73:f2:5f:58:b8:75:11:b4:8c:25:60:86:bd:92:
                    99:e4:34:ab:fe:af:62:80:04:1e:b9:07:f4:7c:72:
                    23:06:db:78:de:ad:fb:53:e5:b0:ea:6d:f4:d1:4f:
                    d3:0f:b2:3d:68:79:ef:ac:77:bb:3a:c2:27:65:03:
                    87:09:fe:da:86:de:52:99:7e:a0:a1:14:82:dd:1d:
                    01:26:ab:f0:d7:4f:1c:06:ca:e2:75:0f:c6:52:71:
                    7c:a2:0d:ee:18:9b:22:72:96:e3:c0:18:82:34:66:
                    cd:ca:85:ff:a0:e9:06:54:67:a1:38:47:cf:e5:92:
                    cb:3b:08:2c:21:a8:63:bb:ca:80:8e:fb:d8:d2:86:
                    5f:5c:68:ff:39:3f:a5:27:1a:d7:15:f5:47:66:6f:
                    e6:ec:16:80:00:01:2b:9b:d3:ef:4f:c8:ee:df:c2:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FB:04:0E:08:60:E8:86:52:B8:E5:55:5D:C9:09:FC:16:59:37:27
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB39163CBD9211F1B468B0CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:14:11:96:63:ae:dc:85:3e:1f:08:06:e9:58:cf:ac:20:8b:
         88:89:c2:d3:da:7f:dc:42:18:12:8a:7d:f3:2b:5b:6b:bd:69:
         ac:14:9c:62:fc:50:cf:e3:3c:06:03:88:ac:4e:b2:72:29:97:
         72:aa:20:b7:54:f9:3b:5f:8a:be:d7:a0:66:e1:1d:72:76:2a:
         0c:53:6d:5c:4c:49:2c:90:89:2d:2e:b5:3e:6e:fd:d3:d4:d1:
         9e:fe:64:d3:ec:38:36:9a:05:44:a1:f7:b7:4c:22:7e:37:1c:
         0c:0a:6d:d2:bd:9b:a6:f2:c4:1b:ad:43:e0:7d:df:70:63:10:
         5f:4c:3a:fe:a0:c8:c2:fc:e9:c3:a8:ba:fa:8c:c3:30:0e:78:
         45:02:01:dd:90:c8:ed:8c:c7:dc:77:6f:22:01:f7:f1:7b:b3:
         ae:86:61:95:8d:de:17:a1:bb:f7:f7:66:89:86:c5:a3:c3:56:
         16:8a:c7:06:a8:d4:a9:0f:b1:6e:6b:17:e6:59:04:7d:d2:a9:
         e4:75:2d:97:44:46:ce:4c:ae:69:bf:5a:28:c0:d3:4f:58:e4:
         57:85:8c:62:9d:93:c0:00:19:f1:af:1c:05:ac:1e:a0:37:60:
         80:0c:f5:09:89:3d:63:e6:06:f3:9c:ac:83:90:34:02:20:d2:
         cc:c5:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----