Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B75E46C6E711F19AEEE7C7CE1D38B0.roa
File:                     70B75E46C6E711F19AEEE7C7CE1D38B0.roa (raw, json)
Hash identifier:          bgtCRuLhvUCMYA95GD2SpRVUeWW2inAp5cNtALmo0rM=
Subject key identifier:   C9:EE:CD:46:55:A9:83:42:EB:05:5F:7B:F6:95:53:8E:E9:2C:82:2A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B75E46C6E711F19AEEE7C7CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 09:21:16 +0000
ROA not before:           Tue 13 Oct 2026 09:21:11 +0000
ROA not after:            Sat 21 Nov 2026 09:21:11 +0000
asID:                     274973
IP address blocks:        154.95.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126418 (0x1edd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 09:21:11 2026 GMT
            Not After : Nov 21 09:21:11 2026 GMT
        Subject: CN=6acdf80c-f600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:e3:c1:cd:a5:05:fa:2e:c5:7f:ce:f2:41:
                    53:90:ea:f7:a4:57:66:07:fe:fa:81:b5:c2:f8:ce:
                    64:46:df:c3:36:e4:05:70:17:01:2f:e6:08:45:e4:
                    55:b3:96:cb:d3:38:49:75:e5:85:7a:c9:fa:31:8b:
                    0f:26:d3:e9:7e:9f:13:cd:d4:b2:4e:6d:ed:3c:e7:
                    f9:fd:ab:51:c9:a8:5c:54:a1:b4:a4:de:9c:7c:03:
                    95:b5:9f:36:7c:d9:24:ce:b2:1b:6e:5d:66:c0:ac:
                    b3:b6:c6:ce:6c:c3:fe:ea:4a:ca:43:42:da:c8:4f:
                    94:ed:02:bc:02:ff:3f:5c:2b:22:e2:a9:f9:18:e4:
                    bd:86:b7:ad:fd:0d:e7:54:48:51:f3:ca:64:7b:96:
                    18:99:b9:12:fb:d5:f3:7c:7b:73:76:83:32:83:62:
                    df:96:74:94:92:22:52:e7:69:c3:64:e7:e6:ad:50:
                    14:f3:96:c6:20:b3:fe:6e:aa:7a:08:a4:63:a4:ed:
                    32:bc:5d:04:71:50:fe:2e:84:17:9d:7c:eb:eb:c9:
                    25:98:f1:6f:b3:de:b0:49:38:cb:b5:e9:69:d7:23:
                    39:b7:2c:47:5d:4e:1a:67:a6:48:98:88:ab:d7:d5:
                    3e:09:61:28:6a:5a:53:a4:e7:79:18:b7:03:f7:e1:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EE:CD:46:55:A9:83:42:EB:05:5F:7B:F6:95:53:8E:E9:2C:82:2A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B75E46C6E711F19AEEE7C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:f3:63:4f:aa:ce:83:fd:bc:73:56:d3:b5:27:14:51:b4:
         fa:0c:2f:f5:45:20:ad:31:dd:d2:52:23:08:92:bd:ea:28:5e:
         4d:4c:b0:2e:bc:bb:83:51:a2:ca:66:da:44:04:9a:2c:30:c4:
         a4:4b:c3:58:20:eb:6b:da:4a:f6:fa:59:13:f0:4a:ab:b0:23:
         eb:5e:8b:d3:aa:41:41:80:9e:82:c8:0f:d5:73:a7:5e:17:53:
         cf:3c:1f:97:7d:bb:f5:64:58:84:60:51:b0:01:1d:16:4f:0a:
         57:c8:ed:e2:d8:6e:0a:97:c6:7b:06:25:13:b7:04:98:fb:d4:
         87:e4:19:75:c1:9f:c6:31:5e:4d:ec:a5:97:2f:7b:de:a9:32:
         2b:b9:b3:83:e1:01:45:4c:e4:b0:59:73:31:fb:7f:d2:b0:e6:
         cd:53:2f:70:83:33:06:ad:af:37:01:07:c1:ed:d4:87:3f:d1:
         e9:5b:62:88:01:0b:5f:9b:5b:bf:1a:3c:b2:e0:94:ec:98:9d:
         7d:b2:d6:9c:7e:85:fd:8a:22:03:7a:52:58:b6:8f:e6:87:a3:
         fa:9c:8e:89:e8:06:16:ba:8d:9e:60:eb:4f:c7:30:ab:5d:02:
         aa:67:d8:1b:2a:32:fc:90:79:f5:78:4a:00:e0:07:b8:8c:a4:
         a4:f9:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----