Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/74E3E458B4CD11F0AA03ECBADAE4EC9C.roa
File:                     74E3E458B4CD11F0AA03ECBADAE4EC9C.roa (raw, json)
Hash identifier:          AY0QiwrjAafEOuB3cHJtZkwE9/VN10SzQVkJB6bXQ/Y=
Subject key identifier:   7C:67:FA:9F:F7:E7:D7:2C:80:42:A9:1C:7D:49:6C:C5:AC:C0:2F:E4
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       01C7
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/74E3E458B4CD11F0AA03ECBADAE4EC9C.roa
Signing time:             Wed 29 Oct 2025 13:44:57 +0000
ROA not before:           Wed 29 Oct 2025 13:44:52 +0000
ROA not after:            Fri 29 Oct 2027 13:44:52 +0000
asID:                     37611
IP address blocks:        197.79.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Oct 29 13:44:52 2025 GMT
            Not After : Oct 29 13:44:52 2027 GMT
        Subject: CN=69021a59-09ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:bd:20:de:cd:e6:d0:d5:28:1b:12:2b:a0:
                    b2:77:98:c0:44:25:2c:11:20:44:ce:c9:38:9d:c2:
                    85:f4:9e:42:a3:5c:d6:67:e5:06:eb:df:7d:e4:89:
                    d1:e1:c4:a2:1d:bf:01:50:78:22:7a:5b:99:61:53:
                    e3:84:4f:90:3d:11:88:91:ee:02:09:ec:4b:35:37:
                    8a:7e:2f:15:41:1d:f4:dd:11:4d:bf:bc:86:c5:03:
                    66:d2:9a:b4:e1:d8:4f:ea:5c:95:34:c8:08:43:fb:
                    9c:8a:c6:5b:0f:52:8a:64:dc:58:b5:7f:c5:66:12:
                    3a:cf:ec:46:94:a6:7a:42:07:de:65:ce:95:ca:89:
                    f3:cb:b8:77:fb:00:76:8d:e6:5a:d7:80:fa:47:f2:
                    c7:23:e6:59:58:65:3d:86:cb:4d:8a:91:5f:e1:88:
                    54:10:89:9c:9d:ca:8e:28:a3:df:f6:e1:bd:d4:9d:
                    13:a5:6b:17:ad:c6:2b:4c:85:5a:f8:09:fc:15:05:
                    ad:2d:28:3a:b7:86:35:1e:ad:29:a6:21:83:13:55:
                    28:cd:4e:5a:07:7c:bf:59:94:bc:1d:fc:f7:82:ad:
                    70:1a:92:a4:ed:bd:0c:e4:cc:73:25:85:01:f9:95:
                    b2:b8:15:b8:e0:a4:32:35:66:58:c8:ba:9d:14:b5:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:FA:9F:F7:E7:D7:2C:80:42:A9:1C:7D:49:6C:C5:AC:C0:2F:E4
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/74E3E458B4CD11F0AA03ECBADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.79.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:47:ad:1e:88:d2:73:0d:b2:1b:04:24:a4:0f:37:f5:f8:c3:
         6b:58:3d:30:ea:f8:e4:fc:9f:ce:a8:c3:cb:59:f8:41:7d:3c:
         de:e0:83:a1:cb:3f:38:7f:02:1d:d5:b3:48:eb:20:78:79:bd:
         6f:f8:77:7a:77:71:3d:6c:cf:0d:d8:ce:29:9b:63:d7:0f:d4:
         4b:8e:cc:68:28:27:c3:03:6a:61:92:2b:d2:3e:ab:a8:b6:37:
         c8:a9:96:3e:d5:da:da:8f:2f:68:b3:b8:1e:9a:0e:1a:49:bb:
         cc:78:38:16:93:12:1c:7f:77:56:72:6f:22:3e:02:73:48:b8:
         e6:73:cb:31:83:0e:b1:a1:ed:8a:34:31:67:d5:eb:f5:2c:91:
         67:cf:a7:84:48:0d:46:5b:c0:4e:e3:82:34:0c:64:92:69:23:
         a8:32:ad:87:5a:b8:3a:b9:35:25:f9:52:a1:7d:82:c0:ab:97:
         6a:14:10:a1:a4:4a:2e:1c:df:cb:5f:06:57:48:d9:b8:59:22:
         1c:34:40:9a:09:26:bb:cc:dc:c2:aa:72:4f:55:1b:7b:fb:9c:
         5e:e9:8a:47:90:bb:d9:ff:ec:d7:02:c3:32:f2:44:47:81:f4:
         c8:a9:ef:a7:67:9e:f1:61:ec:4f:09:4b:03:da:6f:89:52:1f:
         cb:bc:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----