Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/3185A8CEAC2811F18C8A20E2CE1D38B0.roa
File:                     3185A8CEAC2811F18C8A20E2CE1D38B0.roa (raw, json)
Hash identifier:          3tSLh3O+ZBTWpTXs5okXzr+CbPzAXi1uZEmLl9ZmRak=
Subject key identifier:   65:8E:AD:A8:92:3A:11:51:AB:65:FF:A9:70:C9:79:48:4B:71:52:31
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       15
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/3185A8CEAC2811F18C8A20E2CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:26:46 +0000
ROA not before:           Wed 09 Sep 2026 08:26:42 +0000
ROA not after:            Wed 08 Sep 2027 08:26:42 +0000
asID:                     15399
IP address blocks:        196.207.128.0/18 maxlen: 18
                          196.207.128.0/18 maxlen: 21
                          196.207.128.0/18 maxlen: 22
                          196.207.128.0/18 maxlen: 23
                          196.207.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 08:26:42 2026 GMT
            Not After : Sep  8 08:26:42 2027 GMT
        Subject: CN=6aa11846-5eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:66:f0:14:9c:00:6a:88:63:c3:75:0e:9e:
                    8c:8a:66:1f:f1:29:57:62:11:f0:ec:ba:a0:d6:7c:
                    95:bb:80:10:d2:8d:7f:4b:2d:4c:e8:f8:e8:c9:52:
                    a3:40:5a:f6:27:db:e5:d9:5d:3f:35:7d:0c:72:1b:
                    b0:bc:64:9f:42:65:12:34:51:6a:4d:76:46:29:3b:
                    e5:6f:53:20:f1:7d:c5:96:c0:9c:b2:8b:9f:b8:97:
                    26:70:c5:af:db:52:c4:f7:f1:b2:96:d4:59:78:01:
                    7e:87:fd:11:6f:14:83:3f:d7:8e:79:d8:06:b3:0a:
                    fb:3a:7b:3a:de:0c:05:9f:0a:1d:b5:0c:c6:21:1a:
                    33:07:e1:b3:c1:33:46:b4:73:32:39:7b:ed:4f:fb:
                    49:d3:5f:3b:a5:aa:06:62:ca:e5:3f:23:bb:da:7c:
                    9f:b8:03:a9:95:b4:13:4a:c0:ed:4f:12:4f:7c:1e:
                    7d:35:84:67:92:8a:a6:6e:cd:fd:c1:63:d6:fe:9e:
                    9e:d5:6d:8a:9e:7d:f9:2d:06:00:13:14:ac:f3:92:
                    94:3d:89:8b:d2:08:8d:d3:31:cb:5a:1e:77:cf:44:
                    b3:64:6b:74:f9:ad:b3:ab:63:90:f5:58:46:ca:de:
                    ce:5f:2c:43:d2:3b:03:44:fb:3f:33:f6:90:94:59:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8E:AD:A8:92:3A:11:51:AB:65:FF:A9:70:C9:79:48:4B:71:52:31
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/3185A8CEAC2811F18C8A20E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.207.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:f5:31:88:9a:b6:39:37:a5:39:39:fd:6d:db:e3:03:00:
         3c:17:9e:80:66:2a:d9:ef:4b:9a:c3:fa:d7:f8:7d:47:c6:7a:
         9e:5d:87:ca:f6:71:bd:11:f5:9d:54:92:de:b6:56:1e:cb:46:
         37:aa:8e:21:91:68:b2:a9:04:ca:e6:1d:cd:30:a9:d5:7d:3d:
         2f:16:7d:b4:e2:51:75:f7:cc:2f:12:b4:b6:ba:93:20:db:da:
         f1:5b:50:b4:26:f4:31:fc:d9:70:aa:03:71:4c:6e:aa:59:3a:
         33:22:2f:12:ca:9e:23:5f:1a:22:96:0f:bb:63:62:8b:12:b8:
         40:b3:a0:57:f1:d4:0c:3d:33:23:89:a7:60:13:e2:19:d2:44:
         a4:5a:fd:c7:b7:6a:c1:26:b2:f5:d7:77:af:a1:19:8e:91:dd:
         59:34:5d:c0:30:70:2a:c8:ed:9b:72:0c:56:32:61:ff:b8:cd:
         ee:f1:8c:b5:b8:a3:80:11:7a:5e:c8:d4:ed:33:0f:8e:2a:7c:
         e2:7d:be:6a:a2:13:55:d8:87:d1:91:28:f6:5e:cd:80:c9:e3:
         0f:0e:df:0b:bf:a2:98:e6:ed:14:78:d5:86:3a:c6:37:2d:21:
         08:4a:f7:00:d2:29:72:5a:13:78:4d:24:1f:5b:65:90:08:67:
         5c:53:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----