Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC7BAFFEC70F11F1B3D829CACE1D38B0.roa
File:                     FC7BAFFEC70F11F1B3D829CACE1D38B0.roa (raw, json)
Hash identifier:          8qvzumeSCvpEZ65cXO3+CPK0teg6U67crbfZ66NLlsE=
Subject key identifier:   96:D0:22:AF:0A:2E:CC:BB:BB:19:8C:AC:AC:D0:90:63:FE:C0:0F:44
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2273
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC7BAFFEC70F11F1B3D829CACE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:11:30 +0000
ROA not before:           Tue 13 Oct 2026 14:11:26 +0000
ROA not after:            Fri 13 Oct 2028 14:11:26 +0000
asID:                     212238
IP address blocks:        154.16.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 14:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8819 (0x2273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 13 14:11:26 2026 GMT
            Not After : Oct 13 14:11:26 2028 GMT
        Subject: CN=6ace3c12-7810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:74:2a:df:5c:c0:4b:7a:20:87:c8:cf:92:
                    b4:95:b3:cf:26:20:3a:55:6f:85:02:fc:e1:0c:bb:
                    ca:37:5a:19:fd:5b:c0:c1:bc:a4:c8:4d:43:e2:21:
                    49:d1:c6:90:eb:f5:7c:4f:fd:06:b8:66:36:b2:df:
                    a1:5a:3b:2c:41:b6:02:e6:25:db:cd:8e:2b:6c:05:
                    bd:29:67:91:15:c2:6b:4e:e8:dc:10:6f:6a:96:ac:
                    4c:b7:cb:4c:ed:49:14:8e:c1:c2:19:84:bd:a3:49:
                    09:80:47:2e:e9:2e:ce:7f:34:52:e5:ac:6b:a3:dc:
                    ef:16:77:de:d3:69:1c:52:a0:f1:be:f8:7b:4e:39:
                    1d:67:a5:59:b2:7e:b1:0f:a8:bb:49:75:f7:c1:da:
                    3c:b4:41:8c:a1:e6:af:05:bb:aa:9e:ef:15:9f:a8:
                    b4:d8:22:bf:40:d1:a9:c0:80:3e:61:84:18:05:ea:
                    ec:c5:6f:ae:35:24:98:b4:86:c0:8b:54:a7:88:3c:
                    6e:ab:bf:7b:1f:be:54:b2:13:63:5a:0b:32:7f:13:
                    77:f4:24:8b:25:d6:b4:c5:53:e0:a7:9a:f2:e2:24:
                    27:c2:ca:32:ae:58:73:13:03:fe:cd:68:3c:9b:52:
                    90:8a:dc:e5:e1:cf:00:e7:cf:64:d0:01:8d:21:1e:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:22:AF:0A:2E:CC:BB:BB:19:8C:AC:AC:D0:90:63:FE:C0:0F:44
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC7BAFFEC70F11F1B3D829CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:2a:94:36:7d:16:f0:f2:1e:e3:69:ef:15:5c:61:14:2e:
         8a:f5:72:ff:3c:58:9b:bb:5f:da:ce:0a:97:f0:ab:4f:d5:14:
         3a:a4:7c:50:16:77:dd:27:40:f7:da:43:1b:5b:f8:36:58:af:
         cd:a2:b7:a2:fa:97:8e:20:a7:34:90:6b:9e:0e:66:5c:c1:0f:
         cd:d6:ad:29:05:37:e0:60:80:7d:a9:2c:31:0c:17:f2:a9:92:
         c5:fa:30:06:60:7a:09:8d:e2:0b:4d:7a:6c:9b:a7:02:c1:3c:
         fa:8d:63:3f:2d:1b:34:e1:ca:c5:37:0a:78:76:9c:1d:85:18:
         43:53:8a:65:d6:b2:79:68:e7:62:c0:dd:5e:d4:d0:f7:c9:35:
         8c:9e:77:af:74:1e:09:c0:24:df:c6:0b:20:e6:72:08:c6:b8:
         08:95:ac:6d:c3:c5:14:fb:dd:2f:e0:e6:42:3b:09:b1:a6:95:
         ee:49:4b:38:b7:94:0b:10:ef:ea:ed:14:fd:64:f4:fb:17:13:
         1b:c8:cd:c1:ff:65:cb:df:dc:84:70:13:59:cd:b8:23:05:87:
         99:1c:75:69:39:b4:1a:bd:3d:0b:24:54:99:cf:4c:95:96:03:
         12:8a:3a:8b:8e:57:d3:58:b0:07:ad:cf:cb:48:15:e6:56:78:
         39:01:a4:6d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICInMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjEwMTMxNDExMjZaFw0yODEwMTMxNDExMjZaMBgxFjAU
BgNVBAMTDTZhY2UzYzEyLTc4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5XXQq31zAS3ogh8jPkrSVs88mIDpVb4UC/OEMu8o3Whn9W8DBvKTITUPi
IUnRxpDr9XxP/Qa4Zjay36FaOyxBtgLmJdvNjitsBb0pZ5EVwmtO6NwQb2qWrEy3
y0ztSRSOwcIZhL2jSQmARy7pLs5/NFLlrGuj3O8Wd97TaRxSoPG++HtOOR1npVmy
frEPqLtJdffB2jy0QYyh5q8Fu6qe7xWfqLTYIr9A0anAgD5hhBgF6uzFb641JJi0
hsCLVKeIPG6rv3sfvlSyE2NaCzJ/E3f0JIsl1rTFU+CnmvLiJCfCyjKuWHMTA/7N
aDybUpCK3OXhzwDnz2TQAY0hHmkDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUltAi
rwouzLu7GYysrNCQY/7AD0QwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0ZDN0JBRkZFQzcwRjExRjFCM0Q4MjlDQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEB0wDQYJKoZIhvcNAQEL
BQADggEBADPSKpQ2fRbw8h7jae8VXGEULor1cv88WJu7X9rOCpfwq0/VFDqkfFAW
d90nQPfaQxtb+DZYr82it6L6l44gpzSQa54OZlzBD83WrSkFN+BggH2pLDEMF/Kp
ksX6MAZgegmN4gtNemybpwLBPPqNYz8tGzThysU3Cnh2nB2FGENTimXWsnlo52LA
3V7U0PfJNYyed690HgnAJN/GCyDmcgjGuAiVrG3DxRT73S/g5kI7CbGmle5JSzi3
lAsQ7+rtFP1k9PsXExvIzcH/Zcvf3IRwE1nNuCMFh5kcdWk5tBq9PQskVJnPTJWW
AxKKOouOV9NYsAetz8tIFeZWeDkBpG0=
-----END CERTIFICATE-----