Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F3B088BAB8BC11F194C368C4CE1D38B0.roa
File:                     F3B088BAB8BC11F194C368C4CE1D38B0.roa (raw, json)
Hash identifier:          l4vfYtrCp+RpzwktA1W8ePUOHjYeT7dLejfcbB0DY0g=
Subject key identifier:   B7:DE:92:44:24:E7:A5:E7:AD:43:B2:70:03:BB:51:05:5E:72:03:B9
Certificate issuer:       /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial:       0324
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F3B088BAB8BC11F194C368C4CE1D38B0.roa
Signing time:             Fri 25 Sep 2026 08:41:51 +0000
ROA not before:           Fri 25 Sep 2026 08:41:47 +0000
ROA not after:            Sat 25 Sep 2027 08:41:47 +0000
asID:                     37680
IP address blocks:        154.0.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC6C8AF, serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
        Validity
            Not Before: Sep 25 08:41:47 2026 GMT
            Not After : Sep 25 08:41:47 2027 GMT
        Subject: CN=6ab633cf-15ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:34:3a:14:52:95:60:70:cb:1e:3e:7f:c3:
                    90:77:9a:67:74:ff:e8:03:c1:77:ff:10:e3:da:e4:
                    c4:7a:bd:18:42:9a:b3:7a:21:e4:72:cc:1f:3b:66:
                    ee:65:54:29:b0:f5:84:04:8b:7b:6f:6d:f7:b6:fb:
                    14:3f:71:81:7e:3d:84:b1:57:90:33:c9:98:89:d9:
                    08:99:d5:be:82:db:f5:7c:a1:5a:56:71:53:12:6c:
                    83:dd:8b:35:a3:9b:03:08:9d:00:ff:c9:78:e3:f2:
                    eb:5e:03:89:42:99:6b:50:d1:bf:4b:1c:41:5e:7e:
                    b7:cb:89:8c:82:49:1a:f2:7c:b9:24:70:5a:31:88:
                    f6:2b:39:0d:7e:7d:b1:f5:c4:65:c1:97:83:ef:b0:
                    76:51:df:08:76:90:a9:8e:04:48:2e:83:72:f0:72:
                    79:fb:b5:29:80:10:f3:e7:74:32:78:48:f0:1d:b8:
                    16:72:3c:31:67:56:0a:c7:2a:b8:66:98:9a:8a:35:
                    f0:b9:91:2b:e6:23:d5:b0:36:89:9b:be:25:5f:50:
                    09:11:db:70:01:36:fe:48:c0:13:15:57:eb:29:0d:
                    2e:26:41:f8:30:1c:aa:af:32:e0:bf:fa:4a:e5:6f:
                    ca:ef:bf:1d:e6:e0:c9:c1:3e:0d:b6:bf:fb:93:92:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:92:44:24:E7:A5:E7:AD:43:B2:70:03:BB:51:05:5E:72:03:B9
            X509v3 Authority Key Identifier:
                keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/F3B088BAB8BC11F194C368C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.0.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:f6:03:b8:dd:7a:a3:3e:0a:0a:88:51:a1:be:92:03:1f:
         26:c4:c4:c2:be:67:d0:3e:5b:74:32:3b:15:21:33:00:68:80:
         4a:74:67:ef:ad:35:80:b5:4e:df:3a:32:f8:4f:3a:18:c1:60:
         52:14:fd:75:de:60:24:70:a1:a6:5c:06:26:8c:e1:b5:b2:78:
         86:46:d2:2e:97:07:d6:73:86:aa:90:0f:41:97:8b:17:07:4c:
         7a:a3:07:0b:05:33:6b:c2:f2:41:fe:8a:10:2c:b3:a3:ba:c0:
         13:5d:1d:db:ec:ce:3b:c0:b3:b2:90:4f:ed:2a:a4:db:fa:c7:
         b1:04:ce:25:be:f9:0d:d0:76:50:62:ff:8e:41:31:37:1f:7e:
         c4:c1:6e:78:35:53:a7:3e:71:02:1b:4b:58:50:95:aa:7b:cc:
         a6:3e:a5:47:de:10:41:77:06:6a:0e:be:c0:64:a2:ff:b0:fb:
         aa:5e:cb:f9:47:77:70:66:a2:37:2f:10:3c:29:f9:90:92:37:
         ea:ff:4e:26:c3:fb:55:98:db:c3:fa:e7:4c:7d:ce:8d:1c:a2:
         74:e6:81:54:18:eb:ca:df:9b:a9:06:6a:3c:9b:4d:ce:cb:86:
         ea:fa:8e:6d:8c:a2:14:2f:08:bb:bc:f2:f1:67:f2:40:0a:be:
         2c:c5:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----