Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F8370C5EBD9111F1A43A2CC4CE1D38B0.roa
File:                     F8370C5EBD9111F1A43A2CC4CE1D38B0.roa (raw, json)
Hash identifier:          fm8Ff3mcF/kR2LpGBb8+N5413YgeqfhvCtNx4+JLO6g=
Subject key identifier:   03:E8:47:75:B1:65:79:A5:7E:8E:97:45:34:E8:8B:65:F7:07:62:17
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2245
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F8370C5EBD9111F1A43A2CC4CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:16:46 +0000
ROA not before:           Thu 01 Oct 2026 12:16:41 +0000
ROA not after:            Sun 01 Oct 2028 12:16:41 +0000
asID:                     397423
IP address blocks:        154.16.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8773 (0x2245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 12:16:41 2026 GMT
            Not After : Oct  1 12:16:41 2028 GMT
        Subject: CN=6abe4f2e-5c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:b4:4d:01:5d:ec:16:b6:a2:e6:20:1e:42:
                    74:b8:b4:f5:83:ca:fb:d9:52:06:6c:5d:1c:13:b6:
                    26:79:c1:5d:31:71:96:80:75:cd:70:9a:7f:28:38:
                    41:05:76:43:c4:d1:18:2c:22:82:bb:60:a2:cb:8a:
                    f0:1a:f6:39:99:07:28:3c:07:cf:c7:18:e7:3e:ee:
                    a3:24:b7:b2:6f:88:1b:20:2d:5f:03:0f:12:1d:98:
                    14:28:54:3d:44:42:41:aa:1e:6c:41:5c:db:07:1d:
                    5e:bb:c1:db:11:ef:77:b1:fc:1a:cf:50:1d:06:4f:
                    c8:3c:05:7b:21:fe:97:d7:37:c6:94:6d:6c:a2:62:
                    70:92:74:72:b7:61:3e:2c:e8:8b:97:9c:43:72:e5:
                    7a:b9:6f:fc:b8:3a:65:3c:2b:af:bd:56:22:15:58:
                    da:3e:d1:81:0d:16:f9:92:71:ce:0b:fa:b7:35:91:
                    36:58:04:02:eb:00:c4:7f:f0:bd:45:6e:fe:3c:44:
                    da:ee:47:49:5b:be:31:a7:c6:6c:d8:dd:ba:69:9a:
                    34:44:c4:af:2c:e5:39:85:07:1e:78:01:76:f8:cb:
                    7d:26:34:81:4d:22:1f:3b:c7:47:2e:5f:67:dd:dd:
                    62:c9:23:ed:d7:09:d5:fe:9e:99:ca:8a:08:3a:70:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:47:75:B1:65:79:A5:7E:8E:97:45:34:E8:8B:65:F7:07:62:17
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F8370C5EBD9111F1A43A2CC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d7:d7:df:d0:d1:c0:af:09:14:2e:ee:6e:c2:5c:2f:a9:a9:
         95:86:96:aa:42:97:52:bf:29:65:c7:92:53:a1:40:11:2f:d0:
         95:af:7d:b4:33:54:f5:f8:df:14:71:f3:a3:81:78:b8:01:eb:
         19:cd:79:34:3f:0d:54:23:3f:8a:ce:21:09:d0:d8:41:35:68:
         e7:b5:3d:e4:a6:69:ca:55:8a:21:f4:c3:03:61:66:71:35:0d:
         8e:58:ee:8b:f1:a2:e1:89:94:38:79:63:6e:64:31:e9:96:5f:
         88:05:61:c6:6a:ef:ca:65:b2:60:e7:bf:57:44:a7:c6:f5:c1:
         6f:88:3e:7e:c3:ff:62:96:96:e6:d8:a9:7a:ab:b7:11:c5:b1:
         be:b3:d5:b4:cd:00:fb:f8:d4:1a:b3:ce:54:02:52:7d:53:94:
         38:ac:a3:98:74:a4:68:2e:f5:2d:d9:96:b6:86:3d:65:ed:6e:
         8d:e3:a7:1b:be:c4:c1:bf:a1:db:c3:b9:db:20:b3:9a:13:d3:
         63:83:00:00:31:db:1a:75:d0:d7:c6:65:41:7e:37:5b:1c:eb:
         a7:98:d2:fe:2d:2e:c4:75:79:8b:ea:57:68:14:5c:3d:33:97:
         b3:cb:8c:40:8d:49:58:ff:53:09:3a:e0:a7:26:96:a5:76:5c:
         e5:7f:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----