Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/14CBD4A0AC1511F19A089AEFCE1D38B0.roa
File:                     14CBD4A0AC1511F19A089AEFCE1D38B0.roa (raw, json)
Hash identifier:          GYErmGR106Td4QoxYkQ5xHxtzrmeHMJ9oUXXpYLNIxk=
Subject key identifier:   89:90:C9:5C:9F:E8:89:43:46:27:5E:A8:88:24:44:34:99:58:71:D0
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       11
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/14CBD4A0AC1511F19A089AEFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 06:09:57 +0000
ROA not before:           Wed 09 Sep 2026 06:09:52 +0000
ROA not after:            Thu 09 Sep 2027 06:09:52 +0000
asID:                     15399
IP address blocks:        197.237.0.0/16 maxlen: 16
                          197.237.0.0/16 maxlen: 17
                          197.237.0.0/16 maxlen: 18
                          197.237.0.0/16 maxlen: 19
                          197.237.0.0/16 maxlen: 20
                          197.237.0.0/16 maxlen: 21
                          197.237.0.0/16 maxlen: 22
                          197.237.0.0/16 maxlen: 23
                          197.237.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 06:09:52 2026 GMT
            Not After : Sep  9 06:09:52 2027 GMT
        Subject: CN=6aa0f835-5ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:a1:98:5f:a4:03:58:2c:84:f0:5c:f1:fb:
                    02:3f:a7:af:a3:cd:b3:bf:57:7c:b2:ff:d1:cb:cb:
                    80:81:c7:41:53:3c:63:b8:ab:aa:7e:5a:19:aa:13:
                    0e:18:e1:9f:6f:1a:a3:59:79:0f:65:74:57:39:d1:
                    c1:d8:9f:ab:9c:45:fd:bc:d1:a8:9e:e5:2d:b4:9b:
                    73:2a:d5:8f:40:b8:75:2e:ce:a6:e6:0f:3c:dd:ee:
                    bf:a6:d5:08:c9:89:4d:f2:4e:31:36:c8:f8:77:eb:
                    cc:d9:6a:8d:ee:d2:a5:a2:18:98:e1:68:ae:1f:90:
                    2d:4d:cf:36:6b:7c:04:bb:16:fe:8a:04:45:55:d4:
                    9d:4c:1f:73:ed:f4:db:3c:75:b4:fe:a5:34:45:4a:
                    82:59:83:5a:0a:ba:f6:05:b4:c8:cc:37:5b:65:14:
                    6f:fa:04:9e:7e:b2:e7:9b:8e:51:2a:85:3f:7e:c2:
                    09:bd:c3:60:a5:58:5e:25:3d:40:50:92:3b:c3:f7:
                    c4:52:f4:e1:40:85:dd:c1:a8:97:af:e3:6a:fb:8d:
                    8a:a6:e1:65:de:37:f0:24:57:2b:26:9c:4c:7b:a9:
                    b6:df:6f:25:94:c0:8e:aa:49:da:74:82:98:5e:c6:
                    64:42:21:62:78:68:8c:5c:e1:53:a0:81:f5:d8:37:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:C9:5C:9F:E8:89:43:46:27:5E:A8:88:24:44:34:99:58:71:D0
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/14CBD4A0AC1511F19A089AEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:af:63:be:10:50:41:8a:6d:2a:0d:33:e7:85:e8:e0:2b:3b:
         e2:8f:7b:96:46:13:b0:72:06:53:16:2f:0a:56:a0:5b:15:0b:
         5c:a4:b0:76:8f:3a:80:b5:f9:e1:c6:dd:02:2e:cc:1d:0c:89:
         4b:c5:8a:73:52:5b:76:2d:3b:88:77:ff:f7:23:63:ea:b7:e7:
         e3:a2:48:4a:c2:7e:fc:27:28:0c:96:f6:af:8c:e2:b0:54:bd:
         26:bf:7e:68:3d:04:69:2f:c1:91:c1:bb:b3:45:45:3d:9e:05:
         0c:05:d9:db:ab:9a:c9:2f:b2:56:40:43:a8:aa:25:e2:9f:f9:
         f0:26:02:f1:5f:29:59:91:05:a8:28:81:d2:90:1b:ca:dc:60:
         cf:36:d4:81:de:79:40:a0:ed:d6:4a:6b:5f:06:06:56:4d:1b:
         e1:cc:87:71:f6:37:d4:98:73:8a:d8:45:8b:5f:19:f6:73:e8:
         f9:f8:8c:2b:74:af:42:37:ff:85:25:ed:95:6c:aa:25:31:0b:
         8f:1a:50:d2:10:fc:c1:b3:0e:11:3f:ef:79:60:2f:c2:82:2b:
         a8:4f:b7:51:67:0c:00:1d:78:4e:c4:32:aa:61:e0:ab:4a:45:
         46:7c:40:de:ed:1e:3c:35:df:43:d2:65:f5:3f:ae:94:f1:07:
         cb:94:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----