Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/30154892C3AB11F19F73DBAECE1D38B0.roa
File:                     30154892C3AB11F19F73DBAECE1D38B0.roa (raw, json)
Hash identifier:          LtjIFcLWuhSy/2qVztZJLHBmhCFvxOyi4m2Vc5wFP3Y=
Subject key identifier:   1E:30:A2:E7:02:0A:65:A0:52:6E:E0:AB:78:9C:73:7D:BA:BA:79:6C
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0A93
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/30154892C3AB11F19F73DBAECE1D38B0.roa
Signing time:             Fri 09 Oct 2026 06:32:24 +0000
ROA not before:           Fri 09 Oct 2026 06:32:20 +0000
ROA not after:            Thu 09 Oct 2036 06:32:20 +0000
asID:                     213481
IP address blocks:        165.16.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Oct  9 06:32:20 2026 GMT
            Not After : Oct  9 06:32:20 2036 GMT
        Subject: CN=6ac88a78-f3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:f5:ae:20:50:af:66:3c:73:12:c4:e9:46:
                    23:1f:75:d7:b2:a2:5a:5d:1d:27:9a:4b:0c:e2:b1:
                    e3:fa:03:8e:89:1d:6e:02:47:75:f8:d3:75:79:75:
                    bc:59:e1:4b:2b:75:6a:60:11:f2:1f:70:b3:45:b7:
                    f1:ad:14:eb:11:9d:f5:a6:2a:c3:ff:d2:1e:aa:63:
                    eb:d4:7e:d9:19:6f:ef:b4:36:cc:c0:0c:c3:e5:92:
                    60:82:3f:6b:3c:73:e0:54:49:50:4d:dd:e3:c5:ff:
                    54:0b:50:97:b5:ca:7b:ee:77:a6:06:06:24:fa:11:
                    d1:e9:9e:f0:d4:a6:ae:1b:b7:58:0a:38:73:7f:9b:
                    d9:0f:77:b3:fa:41:85:43:29:22:eb:74:14:5c:3b:
                    7a:25:46:7f:4d:f0:bb:51:7d:56:3d:aa:95:09:77:
                    9b:1b:62:0c:d3:9c:05:d9:bb:cc:53:c3:b4:be:52:
                    58:f0:03:ce:89:d9:e0:2d:3b:cc:b2:52:79:e8:7e:
                    dd:51:35:26:03:f2:8e:1d:58:f0:d0:ab:7e:c7:f3:
                    31:58:2d:81:e8:7b:d0:b8:d9:02:1c:3c:1e:89:e3:
                    00:12:17:76:8e:19:c0:be:39:aa:ec:9a:78:1d:9b:
                    54:73:66:47:4d:7a:af:c1:58:b2:f4:bf:e4:06:cf:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:A2:E7:02:0A:65:A0:52:6E:E0:AB:78:9C:73:7D:BA:BA:79:6C
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/30154892C3AB11F19F73DBAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:b8:9f:bb:cd:f9:9f:2e:5e:12:cd:b1:8f:4f:ad:22:4c:
         b5:7e:69:06:e4:74:4e:ee:a8:7e:33:b8:5f:b1:b5:42:b3:05:
         eb:56:96:7e:7f:a9:5f:89:ec:32:49:0e:b6:a5:45:30:75:eb:
         42:42:19:d8:ec:c1:0c:7f:48:c8:7b:dd:cf:fb:06:3c:b5:ba:
         14:8f:e7:0a:19:88:5b:70:e8:0d:0d:8b:e3:5f:47:63:db:53:
         55:cb:3a:db:96:1e:17:d1:f9:79:d9:9c:71:16:65:25:dc:e4:
         13:de:5b:05:ac:77:19:e5:a7:7c:4a:a7:fa:9b:c0:9c:b9:0a:
         66:bd:29:ea:40:a8:7a:cb:7c:ba:ce:be:a8:8e:0a:fd:31:99:
         e3:23:f1:26:97:77:ac:7a:0c:cb:05:63:78:a2:1b:aa:d5:00:
         0f:b2:38:35:e4:96:42:a0:40:0d:64:9d:b8:b5:0d:74:1b:23:
         35:86:35:7c:ce:17:66:21:67:8f:ab:03:e1:66:31:48:2d:d2:
         f3:14:41:9b:18:35:60:f5:75:44:6a:19:f5:d2:c3:60:47:85:
         d1:af:d9:13:00:e0:95:ce:95:67:3d:ae:8c:f9:f2:92:8f:49:
         bb:8f:95:61:fe:54:6a:af:7f:9f:c4:e0:0e:41:71:21:a0:ab:
         8a:45:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----