Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E36F929EC21611F195B15ACCCE1D38B0.roa
File:                     E36F929EC21611F195B15ACCCE1D38B0.roa (raw, json)
Hash identifier:          V3bBc/7xYvaOPZxpr40Lk60/h3vVBleBgRdw8yg3oWw=
Subject key identifier:   96:DB:E0:62:DA:B9:01:8E:D3:46:08:B7:48:6F:64:23:9D:C5:20:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E36F929EC21611F195B15ACCCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 06:18:19 +0000
ROA not before:           Wed 07 Oct 2026 06:18:14 +0000
ROA not after:            Sat 17 Oct 2026 06:18:14 +0000
asID:                     147176
IP address blocks:        154.197.69.0/24 maxlen: 24
                          154.197.102.0/24 maxlen: 24
                          154.197.116.0/24 maxlen: 24
                          154.197.124.0/24 maxlen: 24
                          154.215.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126102 (0x1ec96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 06:18:14 2026 GMT
            Not After : Oct 17 06:18:14 2026 GMT
        Subject: CN=6ac5e42b-8e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:48:18:0c:e3:c4:7a:98:62:12:62:d8:60:
                    94:35:d3:79:01:d9:03:75:ad:7a:fa:ba:ca:09:71:
                    58:85:7a:99:45:57:8c:02:c5:dd:76:77:9f:14:2b:
                    d8:18:a4:09:d2:df:fe:6d:7f:6b:56:28:45:ba:d8:
                    ad:d2:92:dc:04:6f:bb:0e:c8:5d:82:0e:d9:6b:0a:
                    c1:d8:d9:a9:b9:14:3c:19:22:89:4c:b4:c1:01:6a:
                    3c:6f:0e:98:c6:97:93:cb:30:75:29:97:13:a6:ce:
                    3f:ec:65:0b:0b:8a:66:67:59:84:ca:a3:a8:46:24:
                    6c:3c:f8:da:e6:61:01:d5:83:9e:29:d0:52:74:01:
                    2b:5b:f7:8e:cf:2c:2d:5d:2f:25:2c:54:7e:b2:46:
                    d8:66:7a:a7:db:0d:aa:b2:af:9e:96:ec:76:0e:36:
                    e9:67:db:b4:30:c9:1c:20:f3:31:b6:c1:48:4b:a7:
                    31:02:fa:ce:17:78:86:ae:96:4e:bc:1d:5b:d8:f4:
                    a3:d8:f3:16:31:75:35:35:a7:47:7a:bf:9b:82:b4:
                    b8:cd:b0:e0:3b:2e:c6:e1:db:c5:03:35:92:76:50:
                    a3:29:e4:38:35:5a:91:f0:17:98:01:c1:2f:3f:65:
                    1c:86:0c:8e:7a:07:31:5b:92:b0:45:79:84:f8:cd:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:E0:62:DA:B9:01:8E:D3:46:08:B7:48:6F:64:23:9D:C5:20:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E36F929EC21611F195B15ACCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.69.0/24
                  154.197.102.0/24
                  154.197.116.0/24
                  154.197.124.0/24
                  154.215.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:08:de:d9:03:99:d6:0f:23:e2:d2:ad:d6:2a:59:30:18:
         54:12:69:0c:8c:69:b9:0e:8b:7d:44:1d:97:90:19:ee:c5:7e:
         43:84:b3:f7:f5:0b:a6:bf:85:2e:6c:02:47:69:76:8d:8d:c3:
         2b:dc:46:02:91:72:33:c2:d1:49:47:ba:d4:4e:ed:5b:57:a4:
         22:ad:41:09:a5:66:a7:fb:b5:ce:d4:a8:37:bc:da:c6:41:89:
         3a:13:ae:de:16:1e:84:eb:0b:d0:36:0d:81:4e:d8:7a:5b:f0:
         ef:ab:b8:92:cb:f1:c4:62:85:a7:1a:24:7d:2c:63:b9:f7:c4:
         22:0d:9d:af:fe:bb:1d:b8:89:91:9f:9a:e2:97:26:f2:19:e6:
         11:37:7e:60:40:1d:bf:c0:d4:17:35:06:b1:a3:d1:1e:87:33:
         e4:c3:cd:6e:67:66:6e:ac:e3:de:d9:45:f9:12:78:c5:8e:55:
         96:e8:4d:0f:1c:6e:db:f7:30:05:a3:06:e2:b7:f0:bb:53:b6:
         c0:28:66:83:41:22:a6:9b:0c:c6:b1:6a:e3:59:89:41:ee:60:
         11:e2:97:5d:19:51:77:be:6c:a6:b0:24:76:6b:15:5e:9e:47:
         b3:f2:e0:b4:9f:48:bf:b9:f8:1f:27:a9:d0:57:b4:0b:d7:68:
         1e:7c:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----