Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/284E09F2A09A11F19A2665E5CE1D38B0.roa
File:                     284E09F2A09A11F19A2665E5CE1D38B0.roa (raw, json)
Hash identifier:          u4s7W4AeX+9w69pBqCY0XiznrH9hxmJdxR9Yz6cFOgw=
Subject key identifier:   F9:2A:37:D0:F0:0F:67:93:EC:C1:73:63:73:74:3E:CA:69:77:EB:51
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       03B0
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/284E09F2A09A11F19A2665E5CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 15:32:19 +0000
ROA not before:           Tue 25 Aug 2026 15:32:15 +0000
ROA not after:            Sat 25 Aug 2029 15:32:15 +0000
asID:                     37577
IP address blocks:        197.239.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Aug 25 15:32:15 2026 GMT
            Not After : Aug 25 15:32:15 2029 GMT
        Subject: CN=6a8db583-3c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:ed:49:1d:2e:54:f1:59:e9:fa:ed:60:d5:
                    b5:98:be:5a:11:7c:a2:1e:b2:b2:d2:87:15:6b:29:
                    80:51:0a:13:36:76:10:55:6f:a4:2d:df:31:ad:d6:
                    8f:9e:83:e2:ad:b4:7b:32:30:85:b1:87:7c:87:1f:
                    56:d3:f7:be:92:77:dc:82:1b:a2:92:2e:53:75:05:
                    7c:da:89:56:70:c4:1a:f3:51:06:62:06:21:5a:53:
                    ba:9c:6f:e8:41:0d:03:60:65:c6:b4:f8:17:74:65:
                    36:09:82:2b:dd:74:89:57:f4:a7:6d:77:6c:a2:19:
                    dc:3a:b7:db:c9:cd:59:95:4a:b9:ed:8e:66:9e:f4:
                    22:26:18:14:3d:c1:83:f2:38:c7:b2:ba:31:fd:d2:
                    04:cd:a2:d0:64:27:8f:41:b8:de:ca:a3:9d:39:3b:
                    dc:de:a6:dd:84:d6:55:ae:50:16:14:a3:c9:0d:a9:
                    a8:8a:05:50:33:bc:35:ad:e1:a9:c9:c6:ec:d7:04:
                    0d:f4:e6:6a:e7:8c:9b:52:de:9f:dd:99:48:ab:cf:
                    77:04:0d:fc:9c:26:36:1e:62:fc:44:1e:0b:f2:cc:
                    55:b5:1e:3d:3c:af:56:2e:76:23:db:e8:af:ff:64:
                    57:80:de:56:aa:15:8a:e8:cf:cf:76:3e:bf:6e:bb:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:37:D0:F0:0F:67:93:EC:C1:73:63:73:74:3E:CA:69:77:EB:51
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/284E09F2A09A11F19A2665E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.239.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:c7:c5:35:8d:a6:65:04:0a:41:83:18:ce:b9:6e:ea:8f:
         34:bd:0c:eb:73:de:2d:22:fd:2a:3d:c9:88:d8:c9:70:2b:fa:
         b0:67:a0:52:66:51:45:c2:c1:af:46:af:57:37:0c:c9:96:69:
         1c:5d:9e:d7:c9:53:e4:f8:bd:61:94:fc:12:ae:71:44:20:72:
         bf:bf:6e:1e:cf:09:3f:db:c2:38:70:73:43:ff:68:27:34:fa:
         4f:b9:70:13:81:ed:41:8e:51:96:81:c1:6a:c8:67:b6:eb:26:
         45:82:32:ed:c7:11:32:a6:1a:07:8a:e4:ae:fd:3b:4a:30:c4:
         3f:ca:9a:d6:21:bb:d4:4e:8e:f7:98:85:65:26:52:80:7d:62:
         77:6e:91:07:d2:96:9b:c7:32:2d:87:ff:32:e0:41:ab:7b:d8:
         c5:14:44:19:a9:17:99:9d:91:9b:6b:57:b5:cf:48:d8:26:ac:
         76:20:d4:04:75:de:22:ad:4d:4e:16:6c:bf:9c:cc:93:12:7b:
         68:02:c7:8a:60:2e:58:34:ff:c1:39:bc:45:91:07:8d:89:fb:
         ca:a0:58:5f:4c:fb:26:51:66:ad:51:91:b3:25:76:83:71:e5:
         36:9e:92:d3:06:3f:1d:8b:f2:6c:f6:6d:68:f3:54:54:28:11:
         cd:1e:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----