Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/75FD7FDC965611F1BD8175EACE1D38B0.roa
File:                     75FD7FDC965611F1BD8175EACE1D38B0.roa (raw, json)
Hash identifier:          A++E8QHj4hLBa8riAmj4iXBzww6dIixtvtgIi87wQME=
Subject key identifier:   B9:32:DB:AD:05:0D:D0:47:A7:AB:9C:5D:2C:C4:7A:14:2C:8D:2C:25
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       016A
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/75FD7FDC965611F1BD8175EACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:02:32 +0000
ROA not before:           Wed 12 Aug 2026 14:02:28 +0000
ROA not after:            Thu 12 Aug 2027 14:02:28 +0000
asID:                     329530
IP address blocks:        102.202.72.0/24 maxlen: 24
                          102.202.73.0/24 maxlen: 24
                          102.202.74.0/24 maxlen: 24
                          102.202.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Aug 12 14:02:28 2026 GMT
            Not After : Aug 12 14:02:28 2027 GMT
        Subject: CN=6a7c7cf8-9132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:71:be:66:a2:88:e3:4a:82:b5:23:e3:ef:
                    d5:4d:26:41:ad:bc:e5:48:82:20:5e:61:bf:b1:8f:
                    36:02:7a:d3:8d:e9:2a:20:bb:4f:79:01:b0:fb:6a:
                    66:f4:74:d2:30:5a:08:0d:06:e0:28:6d:0d:21:83:
                    79:8d:2d:9b:08:da:3f:15:86:aa:9c:67:20:dc:b5:
                    e3:9f:32:3a:a2:5f:4a:56:69:e0:7e:d8:6b:74:56:
                    fb:e2:36:b1:d3:5d:37:86:2c:1a:ec:e8:2f:28:47:
                    5b:fc:6f:45:a7:b3:b5:18:ba:11:1c:fd:16:25:9c:
                    c3:a1:1a:d1:4e:9e:e0:88:ce:34:67:30:12:01:7c:
                    df:c3:79:64:9f:cb:ad:ba:ff:ee:3c:b2:11:06:da:
                    99:f6:64:26:8a:30:60:15:12:af:75:81:a4:b3:59:
                    49:f3:ee:74:f3:5f:ac:ba:0e:62:cb:20:34:bf:ee:
                    c5:b5:24:61:11:96:43:cb:17:9a:13:c8:55:f8:1f:
                    f4:b6:4c:5b:0c:52:48:d6:a2:5f:fa:06:1e:55:e8:
                    b9:41:ce:5e:03:33:8e:c0:79:9e:53:18:6f:c7:99:
                    c2:d8:9b:4d:41:49:47:84:12:92:d3:d0:b9:dc:ff:
                    51:53:f4:ec:c7:e8:a5:eb:94:44:92:70:1f:6e:09:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:DB:AD:05:0D:D0:47:A7:AB:9C:5D:2C:C4:7A:14:2C:8D:2C:25
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/75FD7FDC965611F1BD8175EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:ef:eb:00:dc:cf:31:fb:70:32:b9:26:f4:5e:ac:4d:40:
         dc:b9:89:9f:c5:83:d1:14:de:26:a6:f3:7a:0f:19:b3:be:82:
         db:dc:00:32:1f:6f:67:27:d4:00:c0:16:d7:7a:93:ff:0d:6e:
         9d:5a:8d:4b:bd:a7:1a:96:c8:c1:40:d4:45:34:0d:9f:1b:f5:
         42:a1:cb:86:ec:36:cc:8c:6b:7e:6b:50:15:e9:fa:52:59:c7:
         06:49:0c:db:58:62:50:54:38:4a:92:6b:cd:91:ce:99:11:a2:
         55:4e:f9:5d:62:46:b4:cc:40:11:a6:b5:fd:71:db:f7:7b:4f:
         bf:69:79:59:f9:11:7f:46:49:16:26:ba:35:26:0e:6d:26:62:
         cd:8e:29:b5:08:94:96:4f:65:f6:b1:b3:f6:21:20:88:8a:c3:
         0c:5f:9c:f7:56:5c:54:74:e3:bd:94:02:21:34:ba:11:f6:46:
         62:2c:f4:d7:8e:5a:a8:19:0c:81:6d:37:30:03:eb:27:14:00:
         c7:df:0d:08:ff:a9:d8:94:d4:ee:cf:07:fc:87:8f:cc:e1:5d:
         e5:10:29:1a:8f:c0:6a:5e:9e:4c:d8:e6:0e:3f:26:93:69:c3:
         e1:d1:6d:95:d8:c4:f4:f1:e6:5e:16:03:24:87:49:ce:95:49:
         9e:58:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----