Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00B2A35CA69F11F1B40433E0CE1D38B0.roa
File:                     00B2A35CA69F11F1B40433E0CE1D38B0.roa (raw, json)
Hash identifier:          RoVoYxI8Q3khseGVtNBJ+xZLuIpyFfR1bSnLVvWCNOU=
Subject key identifier:   86:26:4B:1A:61:CE:DF:65:9C:2C:81:5C:E0:BD:C4:A5:90:66:7E:7C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E47B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00B2A35CA69F11F1B40433E0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:22:07 +0000
ROA not before:           Wed 02 Sep 2026 07:22:03 +0000
ROA not after:            Fri 09 Oct 2026 07:22:03 +0000
asID:                     151352
IP address blocks:        154.82.136.0/23 maxlen: 24
                          154.82.136.0/24 maxlen: 24
                          154.82.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124027 (0x1e47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 07:22:03 2026 GMT
            Not After : Oct  9 07:22:03 2026 GMT
        Subject: CN=6a97ce9f-5bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:18:7b:70:c2:4a:30:a6:de:15:de:d5:f9:
                    9e:6c:ec:99:6e:6a:55:db:15:a0:c8:ff:21:5a:77:
                    6f:c0:9b:0c:e1:14:be:52:e0:ba:61:e3:96:00:3c:
                    17:e6:4c:9a:84:e1:21:80:42:fc:f1:b6:0d:60:bb:
                    79:7e:c6:c4:99:38:f9:8b:20:ad:c7:30:11:d4:9d:
                    95:2c:7a:40:db:8d:03:a1:e2:fd:e2:12:27:61:c7:
                    a1:be:cd:7c:c1:8e:32:a3:fe:dc:a0:bd:87:1d:93:
                    04:69:49:20:b7:9e:f2:7c:57:7a:fa:63:f0:d3:14:
                    78:dd:7a:58:25:4e:1c:f3:cf:61:1f:99:aa:16:e4:
                    d4:b9:15:47:af:dc:6e:04:41:20:0c:5c:93:10:be:
                    fd:e8:17:48:8f:4b:6a:3a:53:c0:dc:d7:bd:b4:ce:
                    e1:a4:ac:33:a5:d4:2b:b2:93:df:25:12:80:6e:dd:
                    e6:0a:6e:07:96:0a:07:c6:14:16:cf:c0:60:a7:aa:
                    f1:27:c6:ed:fe:f7:6a:14:a6:ab:04:39:34:71:18:
                    02:3e:17:4f:7b:2c:3d:49:67:18:65:51:4a:06:9b:
                    9f:9d:97:4f:a2:35:57:84:d9:95:5b:15:45:25:2c:
                    06:b7:be:fd:e6:91:18:d2:13:2e:07:f5:01:e2:04:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:26:4B:1A:61:CE:DF:65:9C:2C:81:5C:E0:BD:C4:A5:90:66:7E:7C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00B2A35CA69F11F1B40433E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:0d:41:5d:14:60:a9:75:23:ed:62:fa:7b:99:ca:92:e0:
         b6:fb:c2:4b:0d:47:0e:4f:fe:26:42:37:d4:d2:c3:78:8d:39:
         2c:3b:51:d0:92:fb:29:f7:22:a4:5c:32:b6:26:58:fa:d3:80:
         a4:99:52:4e:66:8f:2a:7a:d3:fc:6c:2e:59:c7:a1:51:10:16:
         fe:1c:44:e6:ea:53:bb:73:7f:bf:df:9f:e6:c6:c4:c8:da:12:
         2b:90:ea:97:bd:a3:8c:68:39:16:cf:a0:53:c0:5b:72:62:5b:
         bb:e4:ef:81:d5:1f:a5:8d:5e:8b:07:29:99:01:22:eb:8e:0b:
         4a:1e:99:22:96:ed:9c:c5:5a:58:d6:df:b3:a1:23:82:db:e6:
         9d:07:0b:b4:1f:8e:1b:32:77:c5:1b:b7:2a:3b:51:58:39:44:
         e6:be:8f:5c:14:31:ac:ee:70:54:70:b3:97:93:0d:39:90:66:
         4f:9d:e4:07:29:3d:a5:1f:b8:41:11:b0:84:71:20:7b:39:be:
         7e:93:e7:5d:dd:c3:e4:7d:49:9b:63:1b:01:2c:89:57:71:6b:
         e3:88:60:6f:a7:a5:af:a4:ca:fa:61:58:b4:4e:7d:67:d4:80:
         ab:91:71:7b:39:2b:58:a3:ab:44:23:21:1b:54:30:66:89:9c:
         d2:c9:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----