Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9F702A9B911F1BFF9D6AACE1D38B0.roa
File:                     75E9F702A9B911F1BFF9D6AACE1D38B0.roa (raw, json)
Hash identifier:          lneT09azclL3dZNhOgJstggUgl5VewuN5+pulYxDh/E=
Subject key identifier:   B8:46:C6:F0:EE:9E:19:4E:F6:86:91:70:2E:60:BC:39:A7:BB:CC:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9F702A9B911F1BFF9D6AACE1D38B0.roa
Signing time:             Sun 06 Sep 2026 06:09:04 +0000
ROA not before:           Sun 06 Sep 2026 06:09:00 +0000
ROA not after:            Sat 10 Oct 2026 06:09:00 +0000
asID:                     215691
IP address blocks:        154.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124344 (0x1e5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 06:09:00 2026 GMT
            Not After : Oct 10 06:09:00 2026 GMT
        Subject: CN=6a9d0380-f271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:c3:a4:00:fd:08:e9:f4:f5:7a:dd:f4:b4:
                    30:59:cc:99:03:f0:dd:3d:7a:b8:e3:c8:d5:d9:5e:
                    07:3d:ce:71:4a:74:8f:31:c7:c1:7f:7f:28:3d:1f:
                    c6:ac:74:d3:97:9f:c5:87:54:fc:ef:7d:a3:93:53:
                    3b:b3:37:bd:56:4d:ce:bd:32:3d:0c:4d:18:34:67:
                    09:d5:49:68:d3:04:5f:fe:b8:e7:6d:fe:ae:33:f0:
                    fc:55:3c:6d:d0:c7:86:dd:07:b8:7a:74:1c:03:bc:
                    66:3a:ff:6b:f9:9b:97:2f:bd:d2:21:62:02:bc:5e:
                    53:30:47:92:ba:3f:f8:43:a3:c9:02:8f:61:ff:0f:
                    c3:9b:3a:a7:6f:a2:5a:fd:bb:bb:a8:5b:0c:dd:01:
                    5f:d2:af:29:32:c4:0a:43:af:75:3b:78:3d:d1:80:
                    8e:16:ee:d5:72:57:65:55:ea:9d:4f:be:93:da:79:
                    92:da:6f:e5:10:a4:9e:8f:d8:68:70:0f:63:fe:ad:
                    55:d8:2d:f1:3a:b3:75:49:0c:64:d9:aa:2e:cf:95:
                    0d:b1:20:02:f0:98:dd:83:bb:a7:99:35:09:5c:d6:
                    22:e0:db:7d:45:21:9a:55:2c:d0:42:6e:c4:24:82:
                    01:25:26:a7:e3:fb:75:cb:eb:45:fb:40:2f:09:f0:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:C6:F0:EE:9E:19:4E:F6:86:91:70:2E:60:BC:39:A7:BB:CC:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9F702A9B911F1BFF9D6AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:ad:30:2d:5f:f9:90:b9:99:c0:97:fe:42:49:c5:6e:08:
         06:da:28:d0:4f:b4:1e:23:23:11:90:e2:e6:83:dd:af:6c:3b:
         50:d7:84:86:00:26:34:1a:e9:59:e0:fb:d4:60:b6:09:01:23:
         c4:22:4c:3b:a3:d1:36:a8:cc:59:7b:9b:ed:c6:98:f1:4b:c1:
         32:9a:fd:86:33:89:b4:26:ec:17:90:22:c9:4c:0d:91:a9:e1:
         38:66:fe:fc:2e:22:59:4f:a4:e2:74:e1:43:ee:eb:ca:4c:f7:
         d0:d6:95:dc:e1:bd:79:77:9f:dc:3f:1e:5c:3a:4e:31:00:c6:
         cf:45:14:5d:0c:49:69:4f:fb:d4:6b:9c:23:47:67:f8:f7:6d:
         9e:2f:57:79:57:49:98:4d:ac:c5:5f:80:84:7a:d9:f4:d4:42:
         86:ed:94:61:cf:ba:5d:3c:7a:84:8c:55:82:84:4f:04:67:df:
         bc:bb:a3:f7:21:62:91:06:9b:f0:42:75:7e:3d:7a:f4:5e:e7:
         1d:cf:ef:9d:4d:61:38:6d:a5:42:94:b4:ce:15:45:a0:5b:e3:
         9a:97:88:d9:cf:7c:01:8f:d4:30:57:f2:90:85:4a:24:61:4e:
         ba:1c:45:59:8b:66:7f:35:e6:ef:cb:47:ec:83:aa:9e:05:01:
         e7:32:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----