Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF47A9BEB5A711F1AB5494A5CE1D38B0.roa
File:                     FF47A9BEB5A711F1AB5494A5CE1D38B0.roa (raw, json)
Hash identifier:          h/u9GXE0/dN9bHL5d6sg4qG/nzdV2hN3NkxSktPmEoM=
Subject key identifier:   05:5D:93:C5:B4:46:6D:8D:6B:05:04:12:37:4D:45:52:71:E8:D8:3F
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       21FE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF47A9BEB5A711F1AB5494A5CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:34:17 +0000
ROA not before:           Mon 21 Sep 2026 10:34:13 +0000
ROA not after:            Thu 21 Sep 2028 10:34:13 +0000
asID:                     834
IP address blocks:        154.16.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8702 (0x21fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 10:34:13 2026 GMT
            Not After : Sep 21 10:34:13 2028 GMT
        Subject: CN=6ab10829-b2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2b:7c:e3:8b:5e:80:a2:46:8d:ef:24:e5:74:
                    b1:e2:e7:c3:99:23:3b:db:c0:67:cf:a6:af:e2:de:
                    c2:82:96:76:1a:7f:62:1f:fc:73:ea:81:9d:13:66:
                    8d:aa:df:2f:6c:8c:85:9a:8b:c6:cd:9c:a7:92:a9:
                    ce:6f:56:a2:d3:79:f0:4a:01:eb:16:73:72:00:c4:
                    f6:b8:b5:cc:8f:28:8f:e3:ac:97:55:53:75:b7:f0:
                    89:9e:21:eb:62:e9:2f:38:d9:18:1f:0d:08:07:81:
                    e0:bc:0e:39:d5:27:62:f4:44:13:1e:3e:83:a1:df:
                    ec:e3:a9:a5:98:78:e3:34:5f:8d:54:ba:36:fc:1b:
                    5f:2c:ea:f5:a1:e9:90:24:1a:88:8d:d5:fd:99:0d:
                    bc:dd:86:f0:16:c7:1f:b7:b6:3d:66:d6:af:ac:d6:
                    91:cf:b3:94:3f:1e:bb:be:2d:56:41:b0:f8:ca:62:
                    98:7b:f1:49:8f:15:79:ad:0b:df:fd:94:28:4b:04:
                    23:d6:07:9e:43:9e:c9:a3:0c:94:4c:0f:b7:b6:3e:
                    1e:da:22:28:ec:b4:70:7f:a1:95:c9:91:b3:e9:53:
                    ad:b9:75:ce:8b:cf:bb:8d:4e:38:eb:28:f2:c1:1c:
                    30:7e:4d:80:d6:40:61:ef:70:22:3c:5c:1d:0e:29:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:93:C5:B4:46:6D:8D:6B:05:04:12:37:4D:45:52:71:E8:D8:3F
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF47A9BEB5A711F1AB5494A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:da:88:70:08:81:41:4f:31:6f:d9:67:4e:7c:2e:7c:95:09:
         5c:74:cd:b8:37:a2:6c:ae:14:84:f4:b3:7c:80:0d:f6:8f:e6:
         a2:20:96:75:94:59:09:fc:70:17:38:f2:46:b2:5c:bf:2f:9d:
         8b:1a:21:68:b0:19:b0:14:1d:d0:b9:6f:8f:ca:df:67:93:d6:
         79:fc:37:43:4f:c0:f6:41:66:e5:02:4e:ef:8f:69:68:81:17:
         1c:5d:40:bf:6e:db:0f:36:71:c5:93:3f:e0:5a:b8:f3:30:f3:
         cb:2e:37:6f:eb:cc:2d:1e:aa:bb:41:73:4c:93:96:16:68:f8:
         22:2e:86:33:c9:90:68:7e:0c:f7:9b:aa:9d:1d:6f:01:55:d6:
         6d:ad:10:83:e8:3e:fd:3d:10:77:25:94:ae:d4:35:16:fc:57:
         f0:72:b8:00:7f:12:b5:25:21:0b:c2:6c:ae:36:fe:8e:4e:d6:
         67:95:9f:b5:f6:55:bf:61:09:cc:53:c0:8c:3e:58:cf:8d:7f:
         34:71:fc:7f:c1:38:91:37:76:88:a4:a9:36:2e:08:be:cd:fa:
         1b:9f:b8:3e:43:e2:a7:8d:19:47:f4:65:92:80:0a:ec:af:1a:
         f6:8a:e8:a0:bc:b4:94:07:d1:e2:d4:b2:79:df:9d:49:aa:87:
         30:6f:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----