Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/72BC5C90964111F185D9FBEACE1D38B0.roa
File:                     72BC5C90964111F185D9FBEACE1D38B0.roa (raw, json)
Hash identifier:          Mxu0IHDBtQ0gMB1uc7mq59dmgNdwE/tx0wzZZlIE8+8=
Subject key identifier:   C4:96:1D:37:F2:8E:35:16:2F:DA:F8:6D:4D:A0:6B:4B:65:08:5C:FB
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A9F
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/72BC5C90964111F185D9FBEACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:32:07 +0000
ROA not before:           Wed 12 Aug 2026 11:32:02 +0000
ROA not after:            Tue 12 Aug 2036 11:32:02 +0000
asID:                     327795
IP address blocks:        154.118.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719 (0xa9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:32:02 2026 GMT
            Not After : Aug 12 11:32:02 2036 GMT
        Subject: CN=6a7c59b7-7285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:1d:bf:76:71:5b:de:85:49:c4:a3:a6:67:
                    cf:4d:9d:57:29:f0:69:5c:95:14:54:74:11:96:ed:
                    e2:a0:18:e8:d1:0f:3b:08:c0:4a:90:57:c1:e3:09:
                    86:bc:07:1c:f7:2e:6f:d5:5f:06:08:69:53:a5:38:
                    37:b0:ee:09:5f:ff:24:56:83:f9:46:ac:08:ac:44:
                    3b:68:b1:d0:dc:f0:d6:80:1c:b0:44:fc:ab:8c:23:
                    35:e3:e4:69:41:53:ce:e8:a7:87:d3:fb:b6:cd:16:
                    3b:77:51:33:69:e8:12:f9:9b:59:38:cf:73:ca:de:
                    6a:00:ed:0f:c6:f1:48:ff:10:79:73:8d:b8:bd:66:
                    3d:b2:12:f4:e0:b4:e7:86:8c:03:8b:23:60:1d:b7:
                    21:cf:d9:f3:11:16:d9:c7:86:bb:b1:84:37:b6:be:
                    ff:97:83:19:10:5d:9d:e6:ac:26:6c:f3:ab:da:a4:
                    cc:83:b0:ed:da:b6:9e:80:89:31:c0:41:ea:89:5d:
                    a9:a9:07:53:bc:e5:36:b5:fc:ea:5d:c4:6c:38:dd:
                    91:6b:60:02:3a:d3:17:0d:dd:6c:67:52:ec:8d:19:
                    bb:16:0f:90:84:1e:15:6e:cf:f6:63:8b:64:95:87:
                    4f:be:0c:bc:d0:55:cd:ee:b1:21:2e:ea:a7:5c:08:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:1D:37:F2:8E:35:16:2F:DA:F8:6D:4D:A0:6B:4B:65:08:5C:FB
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/72BC5C90964111F185D9FBEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.118.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:17:ed:21:8c:bd:64:23:b0:9d:a9:0c:5e:2f:58:77:f7:
         35:6a:37:a2:0b:8d:71:92:e3:c6:75:74:f8:00:69:eb:d8:2c:
         5b:bb:eb:05:c0:2d:43:8b:33:b9:f3:2a:1d:80:3a:e4:70:be:
         c4:59:d5:b9:1f:8e:20:fc:0f:99:a8:73:aa:69:ea:10:7c:6c:
         be:d3:b4:c9:e9:bc:06:42:4c:8b:8b:f9:b8:7f:98:41:f7:df:
         eb:29:8c:e9:c5:34:83:8d:c1:7d:3c:09:90:4d:45:e5:ed:01:
         0c:f4:b1:eb:75:f8:e7:d8:33:37:0b:81:ed:93:d9:cb:d5:d3:
         1e:ca:3a:9d:71:4b:68:06:b1:d7:66:94:82:c9:ee:71:5a:75:
         59:ff:5c:49:af:15:6d:da:9d:1c:27:d9:b1:49:4b:a8:3e:8f:
         6f:62:9e:09:5b:67:dd:b2:2f:1b:b7:a2:f3:1f:bd:1d:41:5c:
         13:57:a7:f0:70:42:54:30:33:27:b6:b2:67:07:7d:38:58:38:
         d2:83:3b:83:2b:73:73:ec:87:1d:fb:ef:cb:7a:5a:cd:d9:2e:
         c9:5f:ef:0a:0c:be:25:ff:d7:91:4d:dd:0e:c4:4d:fb:10:28:
         9b:17:15:b9:ce:e4:3b:a5:f2:6d:8a:c4:56:e1:f2:1a:37:05:
         50:5e:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----