Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37C737EEBD9311F1B55624CBCE1D38B0.roa
File:                     37C737EEBD9311F1B55624CBCE1D38B0.roa (raw, json)
Hash identifier:          piy0svIX0eWNoCDSh5XV91rA4eeTntj6yCkAEerb1As=
Subject key identifier:   14:86:B3:59:C4:60:7D:A2:D9:DE:CD:75:09:01:E7:7E:0A:74:61:55
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2249
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37C737EEBD9311F1B55624CBCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:25:42 +0000
ROA not before:           Thu 01 Oct 2026 12:25:38 +0000
ROA not after:            Sun 01 Oct 2028 12:25:38 +0000
asID:                     174
IP address blocks:        154.16.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8777 (0x2249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 12:25:38 2026 GMT
            Not After : Oct  1 12:25:38 2028 GMT
        Subject: CN=6abe5146-5da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:c3:87:50:e0:55:f0:7f:36:69:f0:0e:2b:
                    87:c1:97:a9:85:75:78:ee:c1:df:48:12:31:d5:f7:
                    88:27:b0:02:bc:29:5e:05:fa:3d:ef:27:2b:d9:d5:
                    5b:a5:bf:e4:90:dc:9d:16:3e:95:dd:10:9b:be:46:
                    19:a9:42:62:30:6a:28:9e:9d:48:bb:f5:e4:17:d9:
                    45:7b:fa:ee:a2:39:73:0f:29:bf:c3:25:99:1f:95:
                    35:b0:f4:0e:cd:76:9d:a4:88:b9:79:ff:bb:97:48:
                    67:47:df:92:bb:f2:02:39:5c:34:4f:a3:0a:6b:47:
                    40:48:dd:2f:51:6c:5c:c6:fe:b4:d4:d8:db:9f:cc:
                    54:3a:9a:3b:bb:27:f1:3d:e6:77:db:1a:17:ea:ac:
                    83:81:fe:38:81:97:e5:c6:4c:87:b1:cb:03:37:60:
                    7a:25:d5:3e:a0:56:5b:20:54:55:84:63:ed:8d:ab:
                    bb:0d:b9:25:79:7d:be:1b:57:f4:dd:cd:27:57:1d:
                    93:72:7b:8f:b2:74:f6:0d:0e:92:5d:19:25:57:2f:
                    1e:91:bf:a7:40:d3:57:88:12:bb:62:95:bb:a9:de:
                    a4:3f:0b:ac:ce:74:41:17:48:67:5d:c3:e8:99:d8:
                    06:6a:ed:a3:43:e5:93:19:0b:35:9a:92:fc:eb:ef:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:B3:59:C4:60:7D:A2:D9:DE:CD:75:09:01:E7:7E:0A:74:61:55
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37C737EEBD9311F1B55624CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:43:a2:07:15:09:02:8e:b2:54:4c:b1:cb:8f:b5:b7:74:e2:
         bf:78:3f:0e:14:5d:1b:7d:5e:73:2b:ea:b4:69:e2:7f:e3:d1:
         b4:c5:d2:76:63:5a:42:64:95:1c:db:ae:35:9c:b6:7e:1f:49:
         2a:ca:06:af:eb:02:de:8f:e7:9d:6c:74:19:05:28:2a:45:b8:
         aa:2a:62:d3:86:fd:ef:79:34:7b:65:bf:fb:d2:46:f7:45:68:
         e9:d1:d5:36:98:77:de:b3:4e:1b:5c:3d:c1:b0:f4:10:89:5f:
         3e:93:3d:5d:84:48:d5:8f:56:10:b7:59:e9:65:aa:53:9f:cd:
         8b:ed:ec:b6:00:4f:4b:19:a9:f3:73:ae:a5:61:e8:c3:21:df:
         f6:f0:22:0e:88:51:0b:cf:d5:da:00:43:91:3b:09:ef:95:f0:
         eb:9f:70:16:32:d0:50:3c:be:c9:34:59:31:68:e1:56:32:d9:
         24:c8:d5:6d:92:53:b7:92:07:50:bc:ba:00:69:98:98:e9:33:
         85:23:01:3a:87:ae:97:d2:f9:38:53:bc:b7:94:09:65:2a:de:
         95:b7:28:60:1f:08:86:54:35:44:85:6c:bb:3d:a6:03:4c:bb:
         cd:3d:42:4c:17:90:16:1a:fb:a0:ed:2c:b1:8f:33:cd:e3:ff:
         9f:a5:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----