Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1EFDB00C71011F1893A27CFCE1D38B0.roa
File:                     E1EFDB00C71011F1893A27CFCE1D38B0.roa (raw, json)
Hash identifier:          /pXsmhxYyWdBljak+MZ5M1JzCn4xMOyi5v1rLyGV2Ec=
Subject key identifier:   9A:B4:71:D7:A2:D1:B1:84:0A:74:E2:C3:B6:8D:29:82:3C:0E:B7:B6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2289
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1EFDB00C71011F1893A27CFCE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:17:55 +0000
ROA not before:           Tue 13 Oct 2026 14:17:50 +0000
ROA not after:            Fri 13 Oct 2028 14:17:50 +0000
asID:                     212238
IP address blocks:        154.16.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8841 (0x2289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:17:50 2026 GMT
            Not After : Oct 13 14:17:50 2028 GMT
        Subject: CN=6ace3d93-7b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:69:40:a4:43:0f:7b:9c:39:d4:6b:70:2b:
                    f3:58:f2:31:70:b5:8d:c7:64:f6:4e:5e:79:be:b0:
                    36:4b:95:d1:14:5b:24:27:fb:d2:74:26:a9:52:8b:
                    9e:0a:3e:c8:5d:37:1e:2f:4e:95:d1:86:0a:37:b5:
                    c4:80:50:f7:89:78:c6:7a:db:78:2c:f1:47:7a:e8:
                    65:83:75:db:61:9e:bd:50:34:7a:63:73:1c:58:49:
                    25:3a:27:4c:f4:88:eb:81:14:ff:f2:a5:64:f9:11:
                    97:32:75:06:96:0e:50:d8:e8:2a:1f:23:6d:72:ff:
                    cf:16:5d:6a:e2:23:4b:ae:65:5d:66:da:3a:ce:4e:
                    ed:18:38:91:a9:20:00:e7:12:e3:f6:d3:91:b5:0c:
                    76:62:7e:57:c7:5e:f9:d3:1b:53:1e:43:90:eb:03:
                    22:f4:95:61:9f:ed:a7:b3:5f:73:5a:b3:36:24:80:
                    d5:a6:7b:3f:10:3e:e3:b8:21:83:c4:6d:96:6d:02:
                    0a:7e:8a:38:42:65:4a:84:04:16:00:63:f5:8d:84:
                    f0:f7:5c:70:f0:15:c9:d6:27:bf:9f:51:27:9a:f2:
                    21:4c:7f:68:64:77:99:ee:80:9d:07:17:17:f4:d1:
                    2c:1b:fc:40:b3:b0:23:8f:a5:f3:5b:ea:0a:06:3c:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:71:D7:A2:D1:B1:84:0A:74:E2:C3:B6:8D:29:82:3C:0E:B7:B6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1EFDB00C71011F1893A27CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:52:c4:91:1d:3b:8e:bb:7e:f2:b2:a0:58:44:46:8e:48:
         5a:2b:0b:6a:b6:a4:b3:5b:df:b3:66:a1:32:52:64:bf:1a:1f:
         c9:de:df:38:09:e8:b3:73:f7:c6:1a:13:7a:96:46:8c:f4:ce:
         8e:73:a7:84:50:cb:55:9d:14:01:5e:b8:77:9a:04:5d:98:a5:
         b9:41:4f:cf:a8:7b:c7:e2:58:68:18:ff:cd:aa:c4:de:71:d5:
         c5:d3:e7:2e:2a:e8:e2:6e:70:59:c8:23:0e:17:0b:fa:e8:91:
         7e:f3:ae:33:11:9f:17:04:d3:ff:61:ea:a9:4e:5a:51:66:88:
         2d:bf:c9:f1:2c:85:b9:5e:ca:eb:41:aa:a3:a2:0a:9e:3b:21:
         b1:0a:33:d2:92:4f:a6:a7:77:e1:f7:cb:6a:ab:c9:f6:4a:ee:
         78:b5:91:64:e4:6f:1d:0f:46:ce:6b:77:b5:9e:24:34:c9:c5:
         e1:07:7a:00:45:a8:58:5e:a5:60:95:a7:ff:c5:e7:9e:f8:bc:
         da:f9:c8:99:e8:0a:13:83:9a:40:58:f2:12:22:b4:57:9b:11:
         c8:2a:91:59:f8:7f:3c:f1:1c:cb:de:42:f8:8f:f5:de:cc:2f:
         33:ad:a8:2b:cb:2b:8f:ee:8c:51:0a:cb:4d:d7:f5:7a:3a:bf:
         53:0d:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----