Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E128C422B90311F190550707CF1D38B0.roa
File:                     E128C422B90311F190550707CF1D38B0.roa (raw, json)
Hash identifier:          XEjqv1pFJStUYLiCSFOEXd/oORhlGoHHS6xqTZdh2nw=
Subject key identifier:   BC:11:D6:79:D3:01:E6:4F:91:C1:AF:84:CA:A5:FA:97:69:47:D6:69
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2217
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E128C422B90311F190550707CF1D38B0.roa
Signing time:             Fri 25 Sep 2026 17:09:34 +0000
ROA not before:           Fri 25 Sep 2026 17:09:30 +0000
ROA not after:            Tue 25 Sep 2029 17:09:30 +0000
asID:                     834
IP address blocks:        154.16.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8727 (0x2217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 25 17:09:30 2026 GMT
            Not After : Sep 25 17:09:30 2029 GMT
        Subject: CN=6ab6aace-03c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:02:b8:eb:bb:08:86:87:fd:42:1c:9b:ac:
                    eb:41:88:17:4d:2e:31:6e:ff:e1:ab:bf:ec:d3:0e:
                    41:aa:a4:2c:5e:2e:c9:ac:2c:60:6a:9d:27:56:5d:
                    cf:5b:2c:f8:0c:82:01:8f:e5:10:46:fa:74:2e:fa:
                    3b:39:0a:22:84:c7:96:e2:54:cc:e5:95:8c:8d:9c:
                    86:8f:bb:cb:27:ea:7c:ec:6c:fe:03:ee:c2:5f:ca:
                    bf:c0:e9:78:4d:a8:a1:88:1c:7d:af:5f:fe:75:12:
                    fa:bb:49:bc:76:04:63:ad:bf:56:1a:26:f6:85:cc:
                    ca:2d:44:15:8a:43:26:8f:e3:85:34:29:c7:6a:c2:
                    2e:c8:9f:c2:85:cc:db:3e:07:e6:43:a9:07:40:35:
                    61:f4:87:17:31:03:7d:4f:0d:42:70:98:1a:de:de:
                    b6:fb:d0:81:00:91:6d:8e:ed:c8:93:54:6f:02:79:
                    89:7c:69:95:6c:24:c3:e3:1f:9c:25:5d:0f:0a:63:
                    a4:e2:89:90:6f:54:71:c9:83:53:c9:65:e6:c5:e9:
                    87:28:e2:a3:1b:fa:f3:c8:75:71:94:b4:d9:f7:3c:
                    d4:25:09:96:83:7b:e8:5c:78:2e:f4:51:92:a3:60:
                    3d:b2:ce:27:21:72:fd:b3:07:3b:8f:91:d2:7e:36:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:11:D6:79:D3:01:E6:4F:91:C1:AF:84:CA:A5:FA:97:69:47:D6:69
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E128C422B90311F190550707CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:0d:89:29:d8:2f:74:a4:af:6b:a7:27:0e:34:72:56:7a:e8:
         71:27:b0:74:7e:33:b5:ab:cf:1d:38:50:f2:d5:16:61:33:a3:
         de:fa:88:3b:58:bd:0b:75:7a:e7:b8:3b:cb:ca:e3:6d:14:bb:
         1d:04:4b:70:61:1b:83:ca:91:14:ea:84:14:00:81:52:d6:0d:
         b6:64:0a:5a:a5:1a:ac:51:a0:c1:5e:d4:29:15:fc:a8:4e:3b:
         17:fa:f5:6e:d0:de:75:c8:cb:0c:56:b5:7f:ad:ab:dd:ab:f0:
         f9:df:c8:85:db:ca:10:2e:15:ba:d2:ba:03:17:5b:93:e5:3f:
         25:de:16:04:43:7b:1c:23:e1:20:25:95:24:7a:dc:64:d9:93:
         26:0c:44:f2:0f:fd:25:54:82:b7:a6:6b:71:af:bf:db:08:e3:
         01:47:03:c9:e3:0b:92:9c:7e:5e:b1:80:96:60:bc:9c:a6:ad:
         16:ce:22:62:20:c9:69:c6:9f:22:fc:cd:5f:dc:19:7b:17:8c:
         2a:4e:6f:df:03:b1:ab:a8:79:9e:23:62:3b:93:a6:33:96:87:
         a5:71:65:6b:a6:fd:3a:1c:87:76:3a:87:e3:a7:a9:e4:f8:a8:
         55:6d:ea:3a:9c:f6:5f:2b:cb:b8:71:ef:1a:26:12:2c:3b:5f:
         fc:41:eb:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIhcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MjUxNzA5MzBaFw0yOTA5MjUxNzA5MzBaMBgxFjAU
BgNVBAMTDTZhYjZhYWNlLTAzYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaFgK467sIhof9QhybrOtBiBdNLjFu/+Grv+zTDkGqpCxeLsmsLGBqnSdW
Xc9bLPgMggGP5RBG+nQu+js5CiKEx5biVMzllYyNnIaPu8sn6nzsbP4D7sJfyr/A
6XhNqKGIHH2vX/51Evq7Sbx2BGOtv1YaJvaFzMotRBWKQyaP44U0Kcdqwi7In8KF
zNs+B+ZDqQdANWH0hxcxA31PDUJwmBre3rb70IEAkW2O7ciTVG8CeYl8aZVsJMPj
H5wlXQ8KY6TiiZBvVHHJg1PJZebF6Yco4qMb+vPIdXGUtNn3PNQlCZaDe+hceC70
UZKjYD2yzichcv2zBzuPkdJ+NqC/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvBHW
edMB5k+Rwa+EyqX6l2lH1mkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0UxMjhDNDIyQjkwMzExRjE5MDU1MDcwN0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENwwDQYJKoZIhvcNAQEL
BQADggEBANINiSnYL3Skr2unJw40clZ66HEnsHR+M7Wrzx04UPLVFmEzo976iDtY
vQt1eue4O8vK420Uux0ES3BhG4PKkRTqhBQAgVLWDbZkClqlGqxRoMFe1CkV/KhO
Oxf69W7Q3nXIywxWtX+tq92r8PnfyIXbyhAuFbrSugMXW5PlPyXeFgRDexwj4SAl
lSR63GTZkyYMRPIP/SVUgrema3Gvv9sI4wFHA8njC5Kcfl6xgJZgvJymrRbOImIg
yWnGnyL8zV/cGXsXjCpOb98DsauoeZ4jYjuTpjOWh6VxZWum/Toch3Y6h+OnqeT4
qFVt6jqc9l8ry7hx7xomEiw7X/xB60g=
-----END CERTIFICATE-----