Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F1816492A94911F1A02CB6F7CE1D38B0.roa
File:                     F1816492A94911F1A02CB6F7CE1D38B0.roa (raw, json)
Hash identifier:          2Fc1WWXwThO0VdYFEFIIad7HlU1viR4WXz3tNCm2Z6c=
Subject key identifier:   08:71:E1:B7:EA:50:93:77:38:CE:9D:9A:09:5C:B7:A8:FA:CC:89:32
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       219D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F1816492A94911F1A02CB6F7CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 16:50:48 +0000
ROA not before:           Sat 05 Sep 2026 16:50:44 +0000
ROA not after:            Tue 05 Sep 2028 16:50:44 +0000
asID:                     834
IP address blocks:        154.16.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8605 (0x219d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  5 16:50:44 2026 GMT
            Not After : Sep  5 16:50:44 2028 GMT
        Subject: CN=6a9c4868-cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:dd:ac:d0:02:44:f1:8a:ad:5d:0d:5c:86:
                    5f:8e:81:e6:0d:50:e8:62:7b:fb:83:b7:bd:ef:ff:
                    16:bc:ad:8d:da:fb:f9:7b:cc:80:81:e4:ad:e0:63:
                    21:14:ea:47:7f:32:b3:1c:41:aa:b3:9d:cc:a2:fd:
                    3f:8c:85:d7:d7:9c:71:31:c7:73:a7:aa:b7:e2:d7:
                    fa:ff:b1:5f:09:0f:08:a8:c2:e6:00:4c:43:fe:80:
                    2e:b0:90:6b:65:2c:65:0c:95:9d:91:e3:0e:c6:7e:
                    b8:88:9d:c0:95:0c:6d:61:48:aa:75:1b:6b:89:10:
                    13:02:6f:39:e2:68:06:a8:8f:cc:32:d5:79:b9:66:
                    dc:7d:c2:5f:42:4e:de:77:44:43:75:6f:71:ac:b1:
                    21:ed:9d:fe:a3:48:c9:d8:28:2e:c9:f9:d3:c6:62:
                    4e:39:5d:3a:a1:39:2d:17:04:8f:7f:0b:28:39:5c:
                    b6:d3:43:e9:ec:fc:8b:70:d4:3c:c3:3d:b0:53:6a:
                    41:71:87:a0:7c:54:ce:84:36:9f:2b:b3:13:6d:c4:
                    65:dd:7d:17:4b:72:7d:75:25:13:4c:71:37:cc:5a:
                    08:de:45:71:9b:bc:96:2b:69:86:59:30:dc:36:e2:
                    78:75:fe:82:c4:97:18:0e:78:25:1c:ca:70:bf:5f:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:71:E1:B7:EA:50:93:77:38:CE:9D:9A:09:5C:B7:A8:FA:CC:89:32
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F1816492A94911F1A02CB6F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:4a:67:d3:f3:43:ec:ae:91:11:1b:39:61:c7:16:d8:0c:
         68:6c:31:a1:07:67:82:af:5f:28:ff:78:06:d3:26:60:1f:2f:
         43:d1:ee:8d:e2:d3:66:da:94:4a:61:f1:7c:b1:71:55:5f:07:
         26:bb:9a:9d:c2:4d:5e:f2:98:2a:1d:27:d9:1d:8c:0b:bc:0f:
         2b:93:a5:0c:c1:f4:c0:ce:b0:47:5a:17:31:d8:a9:30:fd:0b:
         a3:be:19:46:cd:c9:30:3b:fd:d5:86:d6:4e:5f:f4:ba:64:23:
         12:1f:16:35:78:c6:f7:1c:11:02:86:45:f6:f5:7c:e2:af:cf:
         f0:83:4a:eb:3e:9a:cd:0c:26:a9:fc:73:e1:83:3c:df:b7:4f:
         39:8c:42:22:b3:0f:62:24:9c:42:0a:4a:3e:92:18:6b:47:d5:
         42:d2:d9:99:fd:82:93:79:5c:55:aa:ef:47:c9:6e:b8:24:fe:
         6a:03:d8:49:9d:b2:5a:5a:3e:64:aa:12:40:79:af:1a:5f:e6:
         60:0f:29:ce:31:dc:7d:d2:d3:6a:b8:91:2c:a3:cf:d4:1a:48:
         9c:9d:f5:1e:e0:9f:1d:eb:e3:85:c9:23:29:ea:0b:72:44:2e:
         d0:e6:fd:b3:82:34:63:fc:a7:73:bb:61:d9:5c:97:1a:e0:eb:
         24:a5:19:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIZ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MDUxNjUwNDRaFw0yODA5MDUxNjUwNDRaMBgxFjAU
BgNVBAMTDTZhOWM0ODY4LWNiM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqL92s0AJE8YqtXQ1chl+OgeYNUOhie/uDt73v/xa8rY3a+/l7zICB5K3g
YyEU6kd/MrMcQaqzncyi/T+MhdfXnHExx3Onqrfi1/r/sV8JDwiowuYATEP+gC6w
kGtlLGUMlZ2R4w7GfriIncCVDG1hSKp1G2uJEBMCbzniaAaoj8wy1Xm5Ztx9wl9C
Tt53REN1b3GssSHtnf6jSMnYKC7J+dPGYk45XTqhOS0XBI9/Cyg5XLbTQ+ns/Itw
1DzDPbBTakFxh6B8VM6ENp8rsxNtxGXdfRdLcn11JRNMcTfMWgjeRXGbvJYraYZZ
MNw24nh1/oLElxgOeCUcynC/X6SBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCHHh
t+pQk3c4zp2aCVy3qPrMiTIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0YxODE2NDkyQTk0OTExRjFBMDJDQjZGN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENgwDQYJKoZIhvcNAQEL
BQADggEBABwWSmfT80PsrpERGzlhxxbYDGhsMaEHZ4KvXyj/eAbTJmAfL0PR7o3i
02balEph8XyxcVVfBya7mp3CTV7ymCodJ9kdjAu8DyuTpQzB9MDOsEdaFzHYqTD9
C6O+GUbNyTA7/dWG1k5f9LpkIxIfFjV4xvccEQKGRfb1fOKvz/CDSus+ms0MJqn8
c+GDPN+3TzmMQiKzD2IknEIKSj6SGGtH1ULS2Zn9gpN5XFWq70fJbrgk/moD2Emd
slpaPmSqEkB5rxpf5mAPKc4x3H3S02q4kSyjz9QaSJyd9R7gnx3r44XJIynqC3JE
LtDm/bOCNGP8p3O7Ydlclxrg6ySlGQk=
-----END CERTIFICATE-----