Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/175C9016964D11F1BA0805B4CE1D38B0.roa
File:                     175C9016964D11F1BA0805B4CE1D38B0.roa (raw, json)
Hash identifier:          VUSs4tGN7yUEV7A4E7Vvnz6ZdEu9kBruV6NHxloQvRY=
Subject key identifier:   CD:53:07:65:32:B3:22:BD:2B:0A:C4:5F:DE:3E:0B:A0:65:FD:4E:F5
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0591
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/175C9016964D11F1BA0805B4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:55:28 +0000
ROA not before:           Wed 12 Aug 2026 12:55:24 +0000
ROA not after:            Thu 10 Mar 2033 12:55:24 +0000
asID:                     37182
IP address blocks:        41.93.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:55:24 2026 GMT
            Not After : Mar 10 12:55:24 2033 GMT
        Subject: CN=6a7c6d40-27f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:bc:3a:ea:67:46:5e:af:f5:89:56:a4:90:
                    f2:8c:07:63:49:95:41:3a:16:1c:42:3f:a3:37:2e:
                    02:4d:16:57:d7:b1:cd:25:41:27:c5:b0:a5:0a:28:
                    68:80:5d:bc:6a:de:41:ea:9c:80:d9:7c:76:6f:0a:
                    5c:53:13:6e:fa:35:32:5e:9e:f5:34:8f:73:59:78:
                    28:49:ee:15:49:b6:63:cd:9a:a1:09:3d:89:5e:d1:
                    f2:42:45:cc:83:eb:9a:f1:77:37:96:f6:21:b3:d8:
                    3d:b3:9d:0e:41:13:46:33:65:21:9a:cd:33:99:e7:
                    4f:04:38:f6:ec:89:92:8b:ef:40:cb:c3:1d:10:01:
                    42:9d:61:0d:39:63:dc:ea:23:99:7c:34:d8:ab:4b:
                    1b:78:65:d0:2c:86:2f:5e:7f:cb:8a:d5:c4:9c:60:
                    59:a5:79:82:69:a9:5c:03:db:61:67:c5:61:b3:93:
                    c2:38:e7:96:d2:88:84:4f:51:8d:c6:22:77:87:60:
                    68:7c:1d:f8:36:9d:10:a2:f4:0b:47:f7:68:b6:8a:
                    8a:68:e9:3c:d7:9d:28:9f:60:89:65:f1:cd:4c:f0:
                    83:c8:1b:12:5c:38:74:ce:81:3c:4e:12:49:47:d3:
                    ca:34:bd:d3:73:45:5d:75:44:e9:55:2e:e3:aa:a8:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:07:65:32:B3:22:BD:2B:0A:C4:5F:DE:3E:0B:A0:65:FD:4E:F5
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/175C9016964D11F1BA0805B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:f4:7f:68:f0:0d:ea:b7:ca:6b:64:ae:77:cd:75:0e:3c:
         c4:5a:89:de:1f:01:04:c6:a1:ed:16:d1:81:87:17:1a:39:e1:
         b7:3f:c7:37:d4:01:6b:50:9c:87:53:ed:99:69:b9:e0:2c:9f:
         c0:4d:2a:aa:4a:f0:8d:8d:1c:81:dd:45:c6:8f:91:93:1f:f8:
         96:0f:31:b4:aa:da:73:5f:35:c3:ac:7c:cb:7a:db:2c:b7:ff:
         ac:d8:57:34:1a:8f:bc:73:b6:ee:cd:04:bb:2c:c8:24:0a:ea:
         aa:10:d3:4e:a3:01:31:49:23:cd:bf:fd:75:8c:82:af:6b:dc:
         63:86:d9:77:c9:8d:95:96:25:35:41:a5:23:69:52:8e:a8:38:
         13:e5:ed:b2:d9:85:eb:09:81:33:04:59:8b:72:9d:d8:31:c5:
         f6:e1:06:3a:3c:f5:03:1b:59:25:dd:4b:af:e3:8e:7e:00:89:
         e3:59:c7:a7:f3:50:84:85:b7:95:0c:41:18:35:9c:32:86:c5:
         6d:e0:e8:76:a1:43:18:0f:0e:8b:5c:2f:ae:3d:ba:28:82:db:
         eb:02:fb:2b:15:df:98:84:e3:a8:73:b5:4f:32:34:b1:41:56:
         a6:22:25:d5:39:3a:d4:7e:57:c7:39:66:2c:9a:6e:e4:c6:c6:
         5f:81:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----