Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43BB3618AC2211F1894B7ABFCE1D38B0.roa
File:                     43BB3618AC2211F1894B7ABFCE1D38B0.roa (raw, json)
Hash identifier:          IxCaEdhn6Qe4+/tsLmss2OezzIl6ucyYEB2NaXOqgIU=
Subject key identifier:   D4:83:25:1B:53:AC:49:56:AC:68:2B:A2:51:C3:4A:D3:EA:6D:97:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43BB3618AC2211F1894B7ABFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:44:19 +0000
ROA not before:           Wed 09 Sep 2026 07:44:15 +0000
ROA not after:            Sat 17 Oct 2026 07:44:15 +0000
asID:                     209242
IP address blocks:        154.197.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124578 (0x1e6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 07:44:15 2026 GMT
            Not After : Oct 17 07:44:15 2026 GMT
        Subject: CN=6aa10e53-c64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:b9:f7:17:a6:9b:d0:70:fe:3f:99:bb:78:
                    55:b1:e9:22:be:4e:be:b2:b7:e2:d6:1e:7b:33:4b:
                    07:65:4d:3d:dd:0c:23:97:3a:c8:8d:cb:25:07:3a:
                    40:04:b0:da:27:ce:6a:68:0f:b7:2b:c8:5c:d4:ce:
                    f1:75:24:f8:8b:1a:8b:18:05:2d:84:0f:21:ee:f2:
                    1d:99:d8:8c:c4:9f:00:2e:47:e2:4f:dc:99:13:52:
                    40:54:05:b8:4e:be:59:d5:8d:2d:6f:84:52:bf:7d:
                    cd:b6:ca:69:d5:c8:ac:87:49:3a:e7:6a:f5:7c:4f:
                    87:c3:8f:e2:35:8e:74:df:b7:a9:69:48:81:e6:57:
                    5b:31:33:22:16:b9:3a:6d:5b:3d:e2:a9:72:50:c9:
                    a6:00:e2:d1:42:ed:6a:f1:cc:ed:43:ee:5b:a5:a3:
                    5e:5d:38:3c:90:69:2f:e4:d1:37:c1:1a:a7:90:6a:
                    e5:99:3a:43:a1:40:0c:f8:1b:1f:dd:9d:7f:a2:12:
                    4c:a4:96:ba:ab:7b:3a:fa:06:87:f2:21:04:10:4e:
                    d0:85:fb:04:aa:85:c3:03:07:00:3b:ac:cf:36:c3:
                    11:8a:33:56:6d:8d:09:61:df:e6:b4:f0:db:e1:4c:
                    e3:c8:f5:07:61:ee:7a:c0:6f:d3:a7:d8:f2:3c:9f:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:25:1B:53:AC:49:56:AC:68:2B:A2:51:C3:4A:D3:EA:6D:97:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43BB3618AC2211F1894B7ABFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:d3:28:52:da:dd:6b:48:35:54:f4:21:d5:7f:2a:8d:4e:
         ef:71:4e:5b:70:ee:ac:44:64:c0:b2:9d:0e:f5:9e:a8:57:4a:
         81:7f:43:93:e5:84:2c:09:69:74:0a:f1:c9:66:e1:4d:a6:c7:
         b5:7b:5e:73:62:d4:be:ba:6a:58:df:e0:9f:96:2e:89:f3:92:
         39:b4:0b:bd:67:38:78:e4:a2:56:10:ce:9b:bc:43:1d:6c:96:
         23:ab:7a:ac:89:08:e3:5d:78:66:8d:18:b1:07:9a:e6:2d:fd:
         a7:db:f0:57:6e:97:b9:42:12:c4:ae:33:c9:e2:89:d3:5c:bb:
         0e:7d:30:ea:ce:0a:29:e0:0f:fb:2d:1a:33:57:57:0e:52:13:
         28:a1:57:a0:ea:e4:35:21:4a:91:85:8e:7b:90:03:a3:e1:22:
         05:28:97:09:e2:c7:17:a3:bc:ac:35:70:fb:5f:d9:ae:72:7d:
         7f:bc:6e:4a:f6:e2:11:2b:0b:1c:e4:02:33:85:d4:07:b2:6a:
         ba:b7:fd:fc:af:a5:dd:71:18:16:e8:f9:65:b5:04:05:1e:a5:
         23:fd:a6:0c:34:e7:b0:f8:10:d0:0e:f8:fa:9b:c8:99:9f:5a:
         ef:c1:0a:ac:64:40:91:8c:db:c7:a1:ed:a2:7c:7b:c1:3e:4f:
         4e:15:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----