Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/836EFB6AB97D11F1A1B968ADCE1D38B0.roa
File:                     836EFB6AB97D11F1A1B968ADCE1D38B0.roa (raw, json)
Hash identifier:          M8CZy9UkzVT2aog8fu+MQijpJAD11ev/TYR32n7pMjY=
Subject key identifier:   C2:E6:08:E5:4B:34:1F:2B:F1:A7:1F:DD:9A:A6:A2:EA:A2:17:62:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EACF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/836EFB6AB97D11F1A1B968ADCE1D38B0.roa
Signing time:             Sat 26 Sep 2026 07:40:16 +0000
ROA not before:           Sat 26 Sep 2026 07:40:12 +0000
ROA not after:            Sun 18 Oct 2026 07:40:12 +0000
asID:                     54801
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125647 (0x1eacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 07:40:12 2026 GMT
            Not After : Oct 18 07:40:12 2026 GMT
        Subject: CN=6ab776df-7672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:f9:26:86:c5:9e:16:f6:43:a0:e0:a0:aa:
                    3b:d9:fc:48:5b:ee:76:e7:66:ec:62:4d:e5:d3:6e:
                    c7:be:68:09:89:41:dd:ee:64:cb:69:5a:56:46:04:
                    0e:3c:13:b4:fe:55:0f:4d:ce:5a:b9:55:c8:df:9e:
                    46:56:69:89:71:7a:3f:16:bd:c3:55:11:8c:f4:dc:
                    1e:bd:24:f1:c8:9f:97:df:1f:c3:42:98:e4:ff:2b:
                    22:b5:fe:22:f4:2d:a1:bd:81:b5:13:c0:c4:75:fc:
                    86:df:f2:35:47:10:17:29:2d:d3:14:9c:23:55:cb:
                    22:a3:de:a0:c7:01:61:de:01:0d:e8:0a:ab:45:94:
                    79:0d:21:b5:5d:1d:27:78:d8:4a:c9:9a:7d:f3:98:
                    3e:f5:c9:fc:7f:e8:24:1c:6d:47:f1:25:fc:83:db:
                    32:58:11:b4:41:67:bc:f5:38:e3:93:31:e6:67:7f:
                    b8:91:14:3c:4b:da:c3:65:2e:be:fc:de:6f:11:b8:
                    df:6a:a3:9b:58:91:7a:cc:5c:10:29:b7:92:fb:92:
                    70:0c:10:e7:4a:99:0b:fd:ac:bf:bd:4b:5a:0d:09:
                    e5:df:d6:41:c3:bc:23:80:1b:c4:93:73:fb:9e:02:
                    83:e5:59:5a:71:df:4e:28:6d:be:c4:f5:35:31:36:
                    96:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:08:E5:4B:34:1F:2B:F1:A7:1F:DD:9A:A6:A2:EA:A2:17:62:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/836EFB6AB97D11F1A1B968ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:25:7a:7e:a8:c1:f3:2c:54:d0:4a:8a:13:25:3f:1f:e9:
         7f:ad:12:67:4c:e9:67:cb:ad:76:88:3e:10:31:e3:3a:9c:5e:
         3a:2f:b0:1f:78:c0:96:3f:c9:9b:0d:a5:22:a7:48:fe:6f:b8:
         ec:3c:0c:ba:b6:68:bd:2c:d6:88:fc:75:59:ec:b0:95:db:88:
         ef:19:5f:d2:a5:c1:36:52:5e:99:32:12:60:f6:da:61:65:08:
         c1:df:46:cd:0e:36:12:bb:be:5b:51:3d:e4:1d:b6:a8:34:05:
         22:b5:84:5a:92:3d:c1:8a:f0:e5:5e:65:77:96:dd:b5:a1:0a:
         6e:38:5d:68:35:e0:04:7c:dd:36:1d:5c:f5:fb:f3:c4:2f:24:
         17:ee:17:ad:1f:ca:d5:3b:cb:7d:73:57:e4:c7:01:6f:b2:93:
         07:ef:d1:e8:78:96:4c:2e:56:1b:34:27:d9:4c:5a:74:92:61:
         20:34:99:68:fb:9c:12:ab:56:df:8a:08:13:4a:e5:aa:5f:06:
         c4:8d:64:11:57:6f:cb:58:55:9b:04:ab:77:5b:87:00:c0:0c:
         33:84:f1:b2:b8:bf:b1:93:d2:70:b0:43:52:e1:4f:39:13:07:
         e4:28:54:ce:d7:42:ca:ce:c1:0b:b0:1c:3d:12:32:b6:d1:57:
         e2:44:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----