Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75C7CD2ADB511F1B99F6ACDCE1D38B0.roa
File:                     B75C7CD2ADB511F1B99F6ACDCE1D38B0.roa (raw, json)
Hash identifier:          HFJ8SsktIfe+SVnx3WCLKHz7GQMteGwFfcMHJ+y6r3U=
Subject key identifier:   28:D8:5C:76:3E:BF:0A:C4:9E:D0:87:A0:44:09:99:A6:7D:99:F6:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E76D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75C7CD2ADB511F1B99F6ACDCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:52:21 +0000
ROA not before:           Fri 11 Sep 2026 07:52:16 +0000
ROA not after:            Sun 18 Oct 2026 07:52:16 +0000
asID:                     22773
IP address blocks:        154.202.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124781 (0x1e76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:52:16 2026 GMT
            Not After : Oct 18 07:52:16 2026 GMT
        Subject: CN=6aa3b334-c515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:ef:ca:b1:62:10:d6:57:c1:26:ed:85:d0:
                    55:0d:43:e2:26:c5:f5:a6:ed:d6:1b:b6:0e:dd:0b:
                    96:51:30:d2:a1:ab:ba:08:92:67:5b:36:c5:ef:29:
                    9c:0b:ef:ef:17:f2:55:32:71:fc:12:0a:ab:6f:da:
                    d5:69:0a:8e:50:09:6b:ff:75:ae:41:db:75:93:f4:
                    32:f9:c1:05:a4:1c:49:79:c9:b6:77:a8:4a:ea:54:
                    52:9d:fb:70:e6:aa:90:47:61:4c:f3:66:36:58:fc:
                    3c:47:8a:4f:b7:28:4c:c2:80:76:58:70:e4:b8:da:
                    f3:39:0a:4a:68:72:d8:32:9b:3b:7a:08:fb:0f:4b:
                    b1:3a:c8:89:14:6e:ce:db:bb:7e:8c:0c:10:0f:8d:
                    eb:f3:c8:e2:d0:83:a0:60:04:4a:03:6c:3c:e4:fd:
                    e6:50:94:80:67:ba:92:5d:f2:3d:2d:77:8b:4c:25:
                    92:aa:64:42:c4:a6:21:a4:99:31:d4:41:38:57:3c:
                    4b:b0:a3:16:31:c9:ee:74:82:7c:04:2b:eb:a4:7c:
                    b2:28:3b:08:ef:73:6f:af:16:0a:6c:d3:31:5f:3f:
                    ee:28:2b:cc:a9:52:c8:0a:7b:f2:64:d3:15:26:e8:
                    e2:ab:b4:54:b7:af:11:01:dc:fb:a6:0e:04:67:9f:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D8:5C:76:3E:BF:0A:C4:9E:D0:87:A0:44:09:99:A6:7D:99:F6:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75C7CD2ADB511F1B99F6ACDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:d4:df:dc:80:51:a4:1b:b8:8b:57:17:a0:41:7d:73:26:
         ad:2e:fd:b8:bd:6d:b4:c8:8c:07:73:68:8f:80:17:b3:01:2e:
         2b:b7:e9:90:a9:df:b0:9b:cf:9d:9a:d6:3b:dd:6f:41:21:6f:
         fa:23:13:c0:e7:4b:3b:66:01:7f:ba:67:c3:3a:75:15:48:b7:
         09:5b:68:09:a6:8a:34:cf:4d:c8:55:31:3b:20:0c:35:ef:3c:
         06:3b:f6:f5:fb:4c:4a:50:a4:d2:78:96:f3:d8:59:a3:30:3d:
         04:05:b7:fc:37:a9:68:59:ec:95:74:e3:c7:7c:b9:aa:36:15:
         3c:25:0f:8c:66:fe:78:a3:7a:22:06:9c:5f:0e:64:78:9b:49:
         75:ec:63:c0:54:19:a6:f1:c1:74:fb:4b:e2:b9:37:1f:3e:ff:
         b9:48:e5:22:e7:33:da:26:3b:62:15:2f:bf:92:0d:0c:18:e5:
         e5:62:af:a2:df:81:43:ea:6c:dd:72:73:8c:cb:4c:1d:1a:50:
         c4:38:3b:0b:65:3d:1b:eb:b9:a1:d1:8b:7f:ee:93:6d:d4:07:
         75:69:65:38:45:1a:74:18:07:17:df:bb:31:b8:49:36:1c:34:
         91:d0:ad:d5:e1:7e:e6:28:a3:e9:4d:9e:4c:09:ea:1a:03:21:
         8b:41:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----