Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9FA6382C0C111F193F95C11CF1D38B0.roa
File:                     F9FA6382C0C111F193F95C11CF1D38B0.roa (raw, json)
Hash identifier:          LCb9LQ7ijSZI7V2PRQqiUkonV5UjGD/74w90gQET7Yo=
Subject key identifier:   1C:FA:19:B4:7C:00:1D:C5:98:73:4D:66:B0:10:D6:95:37:78:A9:F7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2258
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9FA6382C0C111F193F95C11CF1D38B0.roa
Signing time:             Mon 05 Oct 2026 13:37:58 +0000
ROA not before:           Mon 05 Oct 2026 13:37:54 +0000
ROA not after:            Thu 05 Oct 2028 13:37:54 +0000
asID:                     9009
IP address blocks:        154.16.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 01:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8792 (0x2258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  5 13:37:54 2026 GMT
            Not After : Oct  5 13:37:54 2028 GMT
        Subject: CN=6ac3a836-d20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:d3:1f:de:63:e1:5f:5f:dd:94:76:72:b3:
                    06:56:06:71:a7:76:ab:fb:43:c6:0a:2d:1f:d5:41:
                    23:17:ef:81:cf:e5:99:bb:2b:0f:23:05:1f:ef:98:
                    d7:8e:2f:a9:42:21:1e:e5:ab:2a:01:16:1a:a0:53:
                    29:1c:5c:52:31:8a:b6:8e:58:d4:83:16:98:e5:59:
                    4e:69:87:13:9a:36:7f:b9:a9:0d:d9:5c:2e:fa:ff:
                    31:dd:36:31:f0:96:52:d3:30:72:9b:58:91:21:09:
                    23:75:2f:5b:b1:8b:70:b9:a5:ab:58:20:4f:35:c9:
                    db:74:52:1e:b0:57:0e:95:6e:d3:32:f8:05:21:f7:
                    f3:f9:6f:29:c4:07:6e:19:60:d0:b4:ff:0a:59:03:
                    d5:a2:a1:eb:81:d9:a8:b9:4d:66:78:c8:57:2c:a7:
                    5b:f4:e2:71:06:81:3a:db:ba:2e:78:a5:c8:ff:5e:
                    27:26:1b:5a:ca:f1:db:f2:52:3a:6f:f8:55:57:af:
                    91:2d:7a:b4:7c:4a:c8:e0:49:4a:4e:b7:c6:c3:a5:
                    e4:ed:de:cd:cd:76:15:82:b8:5a:fb:fb:d1:af:7b:
                    19:c1:64:15:9c:6c:a0:f4:00:65:2c:8b:bd:d8:23:
                    49:ca:6e:4e:eb:e3:a7:75:e0:96:36:77:55:04:2f:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FA:19:B4:7C:00:1D:C5:98:73:4D:66:B0:10:D6:95:37:78:A9:F7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9FA6382C0C111F193F95C11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:8e:61:93:26:c1:49:ce:f4:bd:36:88:3a:94:57:38:98:
         25:0d:6f:8b:05:ac:f1:b6:9c:93:4e:85:9a:fb:52:37:56:8f:
         9c:8c:77:32:63:20:65:20:26:7d:29:36:d8:30:bf:ec:a2:6c:
         c1:4d:40:33:d5:d2:9f:8d:3b:ee:5d:0c:2d:f1:da:d4:50:f4:
         a7:08:73:4a:f0:eb:a2:ef:1f:6f:48:19:70:c7:05:15:bd:61:
         d5:44:c2:e4:99:4f:17:13:48:d7:14:b3:db:af:00:43:41:a5:
         64:a0:e5:47:7f:6b:c4:d3:94:3a:ba:38:28:6b:9c:0b:98:bc:
         6d:4c:a3:2b:1a:c9:7e:21:7a:93:e9:c2:17:73:e2:f4:bf:6f:
         b5:5a:7e:16:b0:e1:19:cc:1b:95:1c:64:21:56:d9:ba:e0:36:
         1b:c4:4e:5d:da:44:4e:15:e6:93:ce:8e:34:bf:3e:b3:c0:08:
         30:b9:6b:92:2c:20:db:d9:99:a0:28:b8:5d:8c:b8:4a:db:a3:
         26:8f:9f:8f:f5:eb:b4:39:ec:46:14:4d:93:0c:34:23:d2:68:
         ff:61:44:b1:80:ef:13:03:a0:1b:df:a6:d1:c3:a3:0d:cc:0b:
         f3:3a:5a:0a:6f:38:7b:74:db:29:1d:0c:0d:fd:dd:43:a4:e5:
         63:aa:e1:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIlgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjEwMDUxMzM3NTRaFw0yODEwMDUxMzM3NTRaMBgxFjAU
BgNVBAMTDTZhYzNhODM2LWQyMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4uNMf3mPhX1/dlHZyswZWBnGndqv7Q8YKLR/VQSMX74HP5Zm7Kw8jBR/v
mNeOL6lCIR7lqyoBFhqgUykcXFIxiraOWNSDFpjlWU5phxOaNn+5qQ3ZXC76/zHd
NjHwllLTMHKbWJEhCSN1L1uxi3C5patYIE81ydt0Uh6wVw6VbtMy+AUh9/P5bynE
B24ZYNC0/wpZA9WioeuB2ai5TWZ4yFcsp1v04nEGgTrbui54pcj/XicmG1rK8dvy
Ujpv+FVXr5EterR8SsjgSUpOt8bDpeTt3s3NdhWCuFr7+9GvexnBZBWcbKD0AGUs
i73YI0nKbk7r46d14JY2d1UEL4TbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHPoZ
tHwAHcWYc01msBDWlTd4qfcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Y5RkE2MzgyQzBDMTExRjE5M0Y5NUMxMUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGkwDQYJKoZIhvcNAQEL
BQADggEBAER9jmGTJsFJzvS9Nog6lFc4mCUNb4sFrPG2nJNOhZr7UjdWj5yMdzJj
IGUgJn0pNtgwv+yibMFNQDPV0p+NO+5dDC3x2tRQ9KcIc0rw66LvH29IGXDHBRW9
YdVEwuSZTxcTSNcUs9uvAENBpWSg5Ud/a8TTlDq6OChrnAuYvG1MoysayX4hepPp
whdz4vS/b7Vafhaw4RnMG5UcZCFW2brgNhvETl3aRE4V5pPOjjS/PrPACDC5a5Is
INvZmaAouF2MuErboyaPn4/167Q57EYUTZMMNCPSaP9hRLGA7xMDoBvfptHDow3M
C/M6WgpvOHt02ykdDA393UOk5WOq4SM=
-----END CERTIFICATE-----