Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/173885C6963F11F1B4DE99DECE1D38B0.roa
File:                     173885C6963F11F1B4DE99DECE1D38B0.roa (raw, json)
Hash identifier:          sljKKRTTajQPxDBI0X/jcTbwc1nGR6g6Fjk6QwtmvBU=
Subject key identifier:   03:91:B5:3F:56:66:4F:D7:84:1E:61:95:16:AA:3D:D2:F2:A1:5C:DF
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A99
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/173885C6963F11F1B4DE99DECE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:15:15 +0000
ROA not before:           Wed 12 Aug 2026 11:15:10 +0000
ROA not after:            Tue 12 Aug 2036 11:15:10 +0000
asID:                     327795
IP address blocks:        197.149.176.0/24 maxlen: 24
                          197.149.177.0/24 maxlen: 24
                          197.149.178.0/24 maxlen: 24
                          197.149.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713 (0xa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:15:10 2026 GMT
            Not After : Aug 12 11:15:10 2036 GMT
        Subject: CN=6a7c55c2-b5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:af:4f:f7:76:00:69:bd:9a:38:bd:48:02:
                    2d:ff:2b:09:f2:8c:d2:14:df:38:a2:4d:74:3e:5c:
                    99:79:63:65:7c:9a:46:0f:46:f2:f4:2c:54:48:28:
                    9b:51:c8:fd:9f:db:00:a2:ce:50:fd:15:bd:a4:1d:
                    51:ee:17:de:34:f5:d8:0f:ad:0a:f3:19:97:61:6c:
                    5f:48:78:d3:2c:b0:ff:cd:b2:90:fb:94:66:e5:99:
                    41:2c:e0:67:84:c9:5e:40:4d:cd:4d:b3:0a:b0:90:
                    96:1e:ca:e3:ce:75:e7:6c:65:a1:29:fd:ba:34:33:
                    ec:af:2f:9f:33:84:61:11:c0:6e:d1:f8:c3:c1:6a:
                    97:0f:f5:bc:98:e1:9f:89:ac:bd:30:70:03:3b:63:
                    ab:c2:11:a6:bb:c7:bd:84:2d:34:26:60:a3:8c:6a:
                    9c:51:f0:05:0e:88:f7:32:bf:f1:54:c2:ee:59:df:
                    28:c1:14:74:ea:9c:74:90:ff:0c:2a:82:27:17:7e:
                    a2:cf:1d:81:eb:e9:04:16:da:db:e3:8f:23:ae:54:
                    6c:58:e7:05:e6:55:4a:a9:4c:bb:a5:e6:6c:1e:9e:
                    76:31:44:e1:f6:fa:a0:f8:ee:5f:92:6e:7d:ac:b9:
                    38:d4:be:57:26:12:d5:d5:86:85:7c:25:d2:d2:e2:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:91:B5:3F:56:66:4F:D7:84:1E:61:95:16:AA:3D:D2:F2:A1:5C:DF
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/173885C6963F11F1B4DE99DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.149.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:d5:03:6e:0c:09:65:41:03:13:f7:9f:55:80:e2:31:5e:
         bd:fb:05:43:81:cf:28:90:fc:a4:80:da:99:02:dd:a1:46:1e:
         5e:8b:26:7e:28:1f:d0:b7:5c:88:3c:37:af:7c:79:95:f2:2a:
         58:fc:fc:c8:ab:2c:e2:7d:37:78:6b:dc:d3:76:e0:51:a3:1c:
         3b:6e:7c:c6:f4:4b:20:00:ce:a6:8f:5d:f2:96:92:f4:e2:2d:
         21:b7:81:c7:1d:6e:86:e7:be:49:09:e2:3a:13:8c:c7:27:17:
         3d:92:02:59:81:6f:a0:01:da:60:fe:51:5e:1d:3e:98:34:a2:
         f3:ea:6b:e0:e3:3e:49:96:f6:45:01:d9:b8:cb:64:9a:d9:85:
         2b:de:e2:9c:82:e4:7f:e0:ca:e5:6f:c7:51:85:a6:ab:27:91:
         6f:55:b9:c8:1b:33:a0:b2:e9:91:ea:52:be:b8:f0:65:f7:1d:
         83:cc:6e:c7:da:44:5e:d8:ec:55:d9:44:3d:d0:dc:0a:5f:25:
         76:92:0f:e0:ed:52:1a:3f:9c:cd:a6:1c:fa:38:43:1a:8e:28:
         93:b5:6b:c1:1a:9e:42:a0:67:cc:29:9f:72:99:b1:15:9e:c8:
         19:92:47:4d:c1:09:fb:3b:4e:a5:b0:14:75:62:d7:e2:c3:50:
         90:92:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----