Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F8B04EC45611F1B2AABAFACE1D38B0.roa
File:                     36F8B04EC45611F1B2AABAFACE1D38B0.roa (raw, json)
Hash identifier:          1mSv2nP6sv5qEzy6IZ1g45G9aHxpzlDXzdOuSZDMLOg=
Subject key identifier:   65:A8:47:80:03:E7:5A:37:46:CB:D9:60:15:27:96:A7:90:D7:47:BF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F8B04EC45611F1B2AABAFACE1D38B0.roa
Signing time:             Sat 10 Oct 2026 02:56:40 +0000
ROA not before:           Sat 10 Oct 2026 02:56:35 +0000
ROA not after:            Thu 15 Oct 2026 02:56:35 +0000
asID:                     147281
IP address blocks:        154.86.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126227 (0x1ed13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 02:56:35 2026 GMT
            Not After : Oct 15 02:56:35 2026 GMT
        Subject: CN=6ac9a968-ce19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:49:1b:2f:8b:fe:c2:01:e1:85:d3:e6:64:
                    a8:91:88:e5:50:01:ea:87:ff:0a:db:44:49:2a:20:
                    fa:be:8f:c7:3f:b2:ef:13:ed:23:91:46:29:cf:e2:
                    79:d8:dd:b0:37:4a:37:3f:e8:d2:0d:29:19:dc:90:
                    62:10:4f:c5:9e:08:9e:24:75:1c:b6:0a:ee:73:c3:
                    7d:16:da:8b:39:d4:5b:de:1c:45:cd:95:4d:ba:8e:
                    20:01:50:55:1c:52:ff:5c:cc:40:3f:88:87:0f:53:
                    eb:35:fb:2e:1f:e1:18:97:45:46:39:3b:25:a1:00:
                    1e:c7:08:51:d8:96:dd:7b:6c:8f:4e:34:ab:a8:80:
                    33:24:0e:76:4d:ec:45:3d:c3:81:e5:6b:c0:ef:c4:
                    4c:08:1b:de:a1:94:b9:d4:a4:15:26:bc:3b:36:7e:
                    6e:7b:1e:bb:95:36:26:e0:90:86:2a:21:dd:86:23:
                    15:68:d7:00:83:6f:c8:b4:cc:0a:02:73:a4:06:23:
                    e2:a4:cd:07:75:00:ae:e8:8c:72:1b:90:17:97:2b:
                    c5:40:bd:9f:ed:6b:5b:29:c3:8e:00:3b:10:dc:5f:
                    77:8c:ed:ad:62:f7:e7:fe:86:37:fe:27:6c:42:21:
                    79:00:34:d7:8f:df:7a:be:35:23:55:c3:d6:44:b9:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A8:47:80:03:E7:5A:37:46:CB:D9:60:15:27:96:A7:90:D7:47:BF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F8B04EC45611F1B2AABAFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:a7:c1:a7:c3:e8:1f:29:bb:52:77:fe:79:c7:2e:e4:ae:71:
         00:ba:ba:a0:79:ca:40:b3:03:35:b2:f2:1d:25:77:3c:54:5a:
         1f:ce:d0:ae:d6:59:e5:54:3b:d3:12:6b:a9:83:b2:d5:cf:5d:
         62:26:32:4d:88:c0:2e:c3:07:0c:93:7c:c1:b0:47:d3:1c:e4:
         8f:5c:f4:c3:0e:9f:69:df:d9:70:c4:7a:d7:13:cd:91:c9:4d:
         9d:17:b1:e0:19:19:1e:56:8f:62:5d:d8:0d:1d:55:52:bf:f5:
         20:c3:b1:8a:9f:3d:a8:68:32:94:1e:e5:11:df:17:e0:30:eb:
         32:a7:ac:78:d2:25:a1:1a:59:0a:10:b4:ae:1a:f4:84:4b:12:
         d9:58:86:e5:ae:31:33:7a:33:32:9c:5f:91:39:6a:4c:79:72:
         a4:e9:fe:34:ba:ed:ce:53:ab:e6:fe:ad:2c:d7:79:30:47:bc:
         06:f6:bb:55:b3:1d:56:41:91:5f:12:66:fd:03:16:29:85:83:
         97:e5:ca:fa:1b:36:37:cb:c8:e3:1c:68:99:d8:c5:3e:dc:56:
         eb:0a:4b:27:02:1a:a4:f9:16:66:6a:1f:ea:87:70:8c:18:d6:
         1b:0f:22:21:d3:e5:cc:5f:1c:16:35:07:8f:c2:0d:f9:ac:23:
         a8:1a:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----