Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEB067FAA5D911F1B8C244B7CE1D38B0.roa
File:                     DEB067FAA5D911F1B8C244B7CE1D38B0.roa (raw, json)
Hash identifier:          FSLxGjz8hc6oo6aML/chMfoJxBS+/DcmOCCwcJF0T0A=
Subject key identifier:   8F:4B:0B:9C:76:3E:2A:F0:FC:1D:F0:AD:C4:59:58:E7:39:0F:F9:58
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2179
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEB067FAA5D911F1B8C244B7CE1D38B0.roa
Signing time:             Tue 01 Sep 2026 07:50:59 +0000
ROA not before:           Tue 01 Sep 2026 07:50:55 +0000
ROA not after:            Fri 01 Sep 2028 07:50:55 +0000
asID:                     212238
IP address blocks:        154.16.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8569 (0x2179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  1 07:50:55 2026 GMT
            Not After : Sep  1 07:50:55 2028 GMT
        Subject: CN=6a9683e3-3071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:fd:ab:d0:1f:96:f2:4c:ed:bb:15:50:0e:
                    fe:28:4c:f6:a6:46:7a:92:77:cf:5e:18:ab:4c:dd:
                    11:e4:d5:05:a0:d5:1a:e9:e0:75:3d:fa:c3:eb:61:
                    f5:ef:65:2c:d6:83:43:eb:e3:71:49:da:11:57:7c:
                    e1:ba:e6:e0:e6:41:65:e3:ba:30:20:7b:2b:49:b8:
                    95:e3:60:e3:18:22:75:d1:fb:65:31:79:d9:dd:1c:
                    55:55:b0:ae:3e:c4:41:e6:f9:1d:aa:3f:2a:f3:75:
                    7f:76:3a:ad:ce:f9:ed:fb:dc:d2:fa:cb:d1:a0:e4:
                    04:ef:ab:50:8c:2d:98:f9:6b:65:7f:9d:5b:75:17:
                    bb:bc:fe:68:8e:ac:78:f8:f4:db:96:b1:aa:5a:8d:
                    f2:6e:21:6c:07:00:5b:2f:bf:94:34:eb:ac:ba:dd:
                    18:f4:fc:5c:cd:c8:a2:13:ab:df:fb:b1:ee:f5:ed:
                    97:18:38:58:66:a7:78:1b:ea:5c:a7:c3:12:f4:0c:
                    bf:94:17:f3:13:9c:b9:c4:98:e4:a9:5c:c0:28:e0:
                    d0:5a:d5:da:8d:4b:9b:8c:8a:e0:78:9d:73:24:0d:
                    07:a5:d4:76:9c:9f:c2:df:a8:c5:4f:94:3f:ca:2d:
                    be:57:80:e2:f5:29:4c:a2:42:1f:24:71:a2:18:1a:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:0B:9C:76:3E:2A:F0:FC:1D:F0:AD:C4:59:58:E7:39:0F:F9:58
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEB067FAA5D911F1B8C244B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:f9:f6:f1:04:86:ea:6d:28:60:8c:af:c8:86:d0:69:cd:
         77:aa:65:f6:d6:06:2d:b6:af:dd:4c:bb:8a:46:17:62:77:03:
         1b:14:ef:3d:1a:e5:f8:26:e0:be:62:bf:70:8f:f0:33:e6:e2:
         51:c1:6e:17:0c:a2:98:cb:c4:78:ea:a6:83:ce:1f:b3:28:84:
         99:1a:4a:20:e5:5f:08:7d:26:68:92:94:42:95:62:21:0e:51:
         7c:1d:75:ed:b9:98:0c:34:14:fe:5a:4c:56:eb:eb:57:b6:aa:
         b1:a5:2f:0e:b5:22:c2:04:7e:6f:c8:8c:10:76:b4:cb:5d:5f:
         69:a2:ce:ff:51:8b:8a:dc:e4:b9:5b:35:bd:e7:ed:71:09:d2:
         60:37:20:a0:a4:95:fc:0d:74:a9:18:c4:53:cd:46:83:ff:7f:
         ed:ea:2e:1c:48:70:6f:df:2d:7e:e2:4a:ba:60:83:2f:6e:04:
         f3:de:83:0e:41:c2:7e:e0:63:74:32:ce:4b:15:15:6f:46:d5:
         c0:67:54:be:b1:11:6d:01:26:90:15:aa:58:c9:1f:44:21:fd:
         45:fd:e1:03:4f:45:3d:4f:87:74:7e:52:1e:df:ee:fb:31:18:
         d4:6f:b3:ac:71:5f:7d:d1:17:74:6e:f6:c1:22:56:e3:c3:e3:
         b3:2a:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----