Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/395614AE964211F1BA6029EFCE1D38B0.roa
File:                     395614AE964211F1BA6029EFCE1D38B0.roa (raw, json)
Hash identifier:          QyuBb1INrn+/cQ2YciuIzau9AUi/xUasqlCunSIHwdA=
Subject key identifier:   2D:CA:7F:0A:62:05:39:9D:E9:E1:98:96:5E:F5:7F:F7:F9:74:8B:21
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0AA1
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/395614AE964211F1BA6029EFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:37:40 +0000
ROA not before:           Wed 12 Aug 2026 11:37:36 +0000
ROA not after:            Tue 12 Aug 2036 11:37:36 +0000
asID:                     327795
IP address blocks:        154.118.224.0/24 maxlen: 24
                          154.118.225.0/24 maxlen: 24
                          154.118.226.0/24 maxlen: 24
                          154.118.227.0/24 maxlen: 24
                          154.118.228.0/24 maxlen: 24
                          154.118.229.0/24 maxlen: 24
                          154.118.230.0/24 maxlen: 24
                          154.118.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:37:36 2026 GMT
            Not After : Aug 12 11:37:36 2036 GMT
        Subject: CN=6a7c5b04-9675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:8d:6a:6a:91:c2:67:36:21:51:7f:40:4d:
                    16:8e:d3:e3:cb:54:e3:70:14:d2:e9:b8:62:63:3b:
                    71:b6:7c:11:7b:c1:6c:83:ce:67:a1:c4:7c:83:6f:
                    da:74:e8:75:bc:9b:2f:ca:c6:fc:ff:12:84:88:14:
                    87:82:1f:b2:21:96:ef:44:67:11:55:92:1e:ea:f7:
                    db:79:cd:d6:63:ff:d8:a4:ca:e9:42:0a:30:48:61:
                    bc:6e:d6:ab:ff:30:d8:a8:be:ac:91:e1:9b:f4:1c:
                    3f:97:ee:f8:34:99:21:10:c7:f3:23:ca:4c:79:75:
                    ff:ba:33:d3:9d:c6:18:7e:a0:7c:40:26:cb:6b:ae:
                    68:1e:83:3f:0c:e5:72:af:f7:b5:39:78:78:d5:bb:
                    c6:ba:06:3f:3b:48:7d:4e:3e:29:26:68:65:8f:1e:
                    e7:c0:20:6c:cd:7d:fd:55:02:4a:95:96:65:01:72:
                    4d:fe:48:ae:54:fc:a3:bc:b4:a6:b8:a3:6a:8b:c2:
                    52:c4:dc:62:61:7c:9d:db:64:02:ae:99:70:83:d2:
                    63:10:ad:af:7c:da:c0:49:ba:88:73:0c:ed:91:a4:
                    70:f5:6f:2c:ab:44:7a:f5:e0:c6:62:e4:fe:2f:f5:
                    9f:8e:73:91:66:6b:87:5f:e7:44:89:6f:38:be:d9:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:7F:0A:62:05:39:9D:E9:E1:98:96:5E:F5:7F:F7:F9:74:8B:21
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/395614AE964211F1BA6029EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.118.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:60:82:88:de:73:c7:9e:5a:4f:b0:a1:d8:5c:6c:dd:b3:
         14:c4:d7:cb:3b:ca:4b:64:8c:4e:17:38:33:55:72:24:8d:78:
         92:3b:cd:41:d1:3f:83:8e:f0:9b:15:b2:d7:0d:65:3f:c4:4f:
         24:88:71:98:94:5c:d7:2e:fa:b9:5f:09:d4:28:5f:76:0d:40:
         a2:c4:cc:e5:9a:a8:6d:66:9a:8c:3b:de:c0:c3:b4:57:71:ab:
         00:25:98:ba:a6:96:3e:c7:45:0e:31:2e:e9:b5:05:2e:76:9b:
         fa:20:4d:10:c9:bd:27:1a:a2:d6:85:0f:7c:af:b9:ea:6a:03:
         d2:18:86:37:65:72:b7:a8:3b:28:44:63:31:1d:5f:bd:97:94:
         aa:6c:56:a4:40:7f:6c:2f:72:b6:66:c4:38:f1:0f:fd:e2:48:
         a5:e3:6e:d7:86:3e:ab:e5:b9:c5:fc:44:58:3c:eb:3e:d2:f4:
         6c:5c:c7:2f:61:ca:de:5d:12:11:45:a1:b7:a5:b3:85:d2:8f:
         2c:80:7c:cc:d4:6d:e5:5f:3d:aa:7f:9d:82:8f:67:65:19:3e:
         0d:de:83:cb:e1:90:52:5f:d9:a5:cc:b0:f1:e0:ff:32:d3:97:
         ad:b1:e6:61:a5:78:4a:ed:22:bc:81:65:87:f2:73:8b:51:08:
         78:19:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----