Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/75865294932D11F1A019FBC7CE1D38B0.roa
File:                     75865294932D11F1A019FBC7CE1D38B0.roa (raw, json)
Hash identifier:          MXXbTDzzjrRX40vfxNiNaud9cA6FGhwRyfb8fZBGlDc=
Subject key identifier:   A1:89:6E:2B:24:C5:A8:E0:6A:56:80:02:63:25:31:EB:F5:A3:1E:D8
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A9A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/75865294932D11F1A019FBC7CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 13:31:28 +0000
ROA not before:           Sat 08 Aug 2026 13:31:24 +0000
ROA not after:            Sun 31 Jul 2033 13:31:24 +0000
asID:                     37119
IP address blocks:        105.175.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2714 (0xa9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  8 13:31:24 2026 GMT
            Not After : Jul 31 13:31:24 2033 GMT
        Subject: CN=6a772fb0-9e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:ae:05:62:10:d1:4b:06:5e:2d:05:e0:90:
                    5b:23:b6:62:94:cd:70:7e:d1:18:7c:b3:86:a3:88:
                    4a:cb:e5:1b:70:20:bf:6b:22:b4:f8:87:32:8f:e1:
                    a1:17:83:9c:27:b0:c1:64:ed:53:38:67:7a:59:c5:
                    a9:09:b0:74:a5:91:e2:6d:2d:49:be:b1:58:7a:45:
                    71:37:99:60:d4:3c:98:bc:14:1c:c9:fa:27:16:54:
                    31:07:ff:fb:8f:77:87:d7:56:60:f2:06:4c:8b:4d:
                    da:26:3b:61:a1:07:0f:e0:99:d8:2c:89:14:db:c2:
                    21:76:8b:36:48:78:ed:f0:43:ce:c0:99:34:02:31:
                    e7:64:f0:f9:b1:d0:bc:73:04:9e:3b:52:70:1b:61:
                    cf:a9:c7:a7:1c:4c:e5:3e:ae:fa:98:d8:a4:79:cd:
                    e8:e2:47:ea:f7:f9:eb:9e:57:ce:29:46:a2:d3:67:
                    38:e8:59:4b:4d:51:52:13:db:33:d7:8b:1d:62:e8:
                    cc:a3:ee:f9:01:d6:88:04:16:09:f8:14:8a:d7:b2:
                    88:a6:29:38:ac:ec:02:5a:9e:3d:b3:ab:cd:b1:9a:
                    3e:ef:1e:9d:40:86:92:8e:aa:02:a3:bf:5a:3d:72:
                    97:f4:86:88:4e:82:b9:ef:75:f9:5b:2b:e7:b0:39:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:89:6E:2B:24:C5:A8:E0:6A:56:80:02:63:25:31:EB:F5:A3:1E:D8
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/75865294932D11F1A019FBC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:47:d4:92:a0:ff:60:97:bf:62:48:32:03:d9:f6:51:f9:e2:
         74:f1:bf:42:87:5e:aa:4a:29:ad:5e:5c:b5:cd:f5:94:cd:4a:
         54:42:63:40:7d:00:5f:0c:aa:22:10:bf:7c:f1:e5:c0:f1:1d:
         8c:12:8d:fa:34:3e:e2:a5:04:b2:83:53:a3:48:f8:38:43:76:
         93:fb:ea:27:9f:0d:e4:3a:e7:cb:c9:e2:31:82:65:a0:83:b0:
         0e:f4:70:1d:fa:ff:e4:71:41:f2:a2:cc:2c:59:b6:12:10:18:
         3a:fc:82:98:46:93:c9:0c:af:b0:9e:8f:bb:bf:f6:85:54:87:
         4c:87:b7:59:a7:17:6a:0b:25:44:51:1f:93:a6:f8:22:32:c6:
         4c:f0:da:cc:cd:31:30:ff:ff:cd:f0:15:44:fe:6f:1e:d8:02:
         31:41:2c:3b:f3:e4:46:13:1a:8a:af:30:5a:be:09:d5:14:f4:
         ce:d3:3b:7b:24:43:da:a3:ad:a9:07:b9:f0:7b:df:a0:b3:84:
         c3:b1:0d:5e:b3:15:13:5a:bc:7e:c3:08:05:af:1d:94:43:43:
         f4:7b:8f:9a:0f:c9:70:9b:59:f5:53:9e:04:8c:71:4d:79:38:
         c4:ef:f3:2b:e6:e8:2c:4f:43:5e:9a:d1:ed:a4:84:c5:2d:ca:
         7e:ac:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----