Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/5075B72EA07F11F19DC28DC4CE1D38B0.roa
File:                     5075B72EA07F11F19DC28DC4CE1D38B0.roa (raw, json)
Hash identifier:          /ArDdwdoGWG1ZDZLLnsuKl2hwJVYrbVGC2AjePdTwDM=
Subject key identifier:   9F:92:B3:1F:47:C3:7E:AC:8E:C9:B2:77:7D:B9:0A:2D:E7:A5:27:93
Certificate issuer:       /CN=F365DBE0AF/serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
Certificate serial:       0742
Authority key identifier: AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/5075B72EA07F11F19DC28DC4CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:20:10 +0000
ROA not before:           Tue 25 Aug 2026 12:20:06 +0000
ROA not after:            Tue 31 Aug 2032 12:20:06 +0000
asID:                     37479
IP address blocks:        197.155.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 02:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365DBE0AF, serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
        Validity
            Not Before: Aug 25 12:20:06 2026 GMT
            Not After : Aug 31 12:20:06 2032 GMT
        Subject: CN=6a8d887a-2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:7e:24:b5:a0:65:ff:cb:ae:62:11:71:09:
                    52:58:49:e2:70:45:91:f6:1e:93:eb:9d:58:77:76:
                    6b:4f:ee:61:c6:c4:2a:cc:88:c5:5b:12:d8:66:b1:
                    77:83:1b:15:37:1d:4d:54:aa:2c:1c:74:f3:8c:f4:
                    5f:cb:d5:22:b8:4c:36:6f:e7:0c:23:e1:bf:31:72:
                    23:18:bb:ea:1f:0b:e0:17:df:db:b1:89:ea:68:77:
                    66:e5:46:74:a0:98:c3:ba:82:04:14:e4:b0:7c:5f:
                    6d:c0:6a:cc:b8:ba:83:d5:96:ec:9f:79:c0:e0:8b:
                    e2:8b:07:a8:16:1b:66:c9:1d:a8:bb:30:b5:ed:2c:
                    bc:71:52:43:69:d1:15:ec:6b:5a:8c:d9:ba:78:5b:
                    bf:bf:bd:7f:3b:bd:da:73:81:de:dc:7d:8b:16:bd:
                    60:32:a2:e9:dc:13:b2:3f:e8:0a:d9:00:e2:cf:cd:
                    52:04:b8:4b:4b:5e:e6:96:f3:c8:41:e9:5e:3a:64:
                    ff:36:0a:d4:00:53:21:b5:d5:62:c3:87:65:fa:c1:
                    2e:c2:9a:2a:e2:34:e0:f6:b6:bd:c0:02:b8:3f:b2:
                    60:d0:91:eb:7a:d3:22:b4:6d:75:cb:80:f5:6d:22:
                    c9:33:82:a9:66:33:83:3a:c4:5e:13:a3:d1:af:53:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:B3:1F:47:C3:7E:AC:8E:C9:B2:77:7D:B9:0A:2D:E7:A5:27:93
            X509v3 Authority Key Identifier:
                keyid:AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/5075B72EA07F11F19DC28DC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.155.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:39:3c:90:9e:c2:b6:27:40:52:6c:5d:91:fb:1a:bd:29:12:
         5f:ed:98:70:2f:64:f8:15:2a:aa:eb:40:bc:1b:55:11:1c:aa:
         63:56:2a:80:6c:4f:20:94:49:5c:33:88:9a:7b:36:32:ad:0e:
         29:56:ff:c1:00:ee:e7:d7:be:03:ff:f1:37:9a:0c:66:11:b3:
         24:12:82:51:4d:48:5b:f9:05:25:b1:4b:45:86:71:c3:3f:b2:
         13:0e:eb:c1:5d:7d:d3:86:3a:8e:d0:7b:fe:5e:81:2f:9a:8c:
         b8:59:7f:3a:69:94:91:86:27:6b:e9:cb:54:d2:0f:c7:0d:b8:
         9e:0b:35:64:87:f1:e0:68:24:23:c2:99:5e:05:df:16:28:c8:
         0f:33:b3:b4:1e:bf:ee:91:7e:4b:c4:63:4a:4f:c8:2c:f4:a4:
         eb:f0:43:0d:a7:f6:bf:d7:3f:7c:46:1b:de:a0:7c:c6:3a:35:
         ad:b9:fa:c5:84:af:1f:93:46:a8:e9:ba:ab:63:9d:4b:34:29:
         13:64:bf:c3:c0:f4:d3:c4:91:2a:4d:f4:3a:38:fb:9f:44:13:
         68:b1:77:73:00:69:62:54:05:a4:97:90:0b:37:2b:c4:df:2b:
         60:f5:38:b8:d1:38:33:1c:49:31:ca:40:d5:3e:63:f4:2f:b6:
         17:d7:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----