Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CAD75CA44011F1A932300BCF1D38B0.roa
File:                     74CAD75CA44011F1A932300BCF1D38B0.roa (raw, json)
Hash identifier:          BYFtHjSCj48QXILR2+LJFOb7XNPCh6dOs+EsClQyP14=
Subject key identifier:   A4:D8:3B:4B:42:CE:73:33:F1:0E:FC:B2:4E:1B:C2:8D:C0:48:2A:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E40E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CAD75CA44011F1A932300BCF1D38B0.roa
Signing time:             Sun 30 Aug 2026 07:00:17 +0000
ROA not before:           Sun 30 Aug 2026 07:00:13 +0000
ROA not after:            Wed 07 Oct 2026 07:00:13 +0000
asID:                     44559
IP address blocks:        154.209.202.0/24 maxlen: 24
                          154.209.203.0/24 maxlen: 24
                          154.209.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123918 (0x1e40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 07:00:13 2026 GMT
            Not After : Oct  7 07:00:13 2026 GMT
        Subject: CN=6a93d501-753b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:b3:3a:3b:63:c4:43:54:d9:c5:d4:d5:81:
                    57:ad:15:d4:05:1f:4d:51:c0:2a:e0:80:0e:90:08:
                    c2:6d:a9:1c:7e:31:09:9c:d4:f4:34:3b:ca:cc:ca:
                    97:07:3f:37:e6:1d:d8:96:48:7a:19:2e:7a:9a:2c:
                    23:db:08:a7:5f:5c:63:75:b5:e8:4c:96:3a:89:b2:
                    27:09:5f:a7:8a:ff:e0:05:8a:2e:86:86:0b:6f:26:
                    a9:1f:52:e6:de:b8:1e:f0:7c:67:0a:13:8d:f5:49:
                    c1:42:45:61:b2:44:a0:42:fe:ff:65:d5:2d:54:07:
                    c7:49:a3:90:76:88:f4:4f:e7:51:67:f6:1e:a3:6c:
                    ee:00:25:1a:40:c4:28:36:d4:b2:03:01:58:81:a5:
                    0e:f1:74:25:bb:3c:9f:15:11:46:af:28:a8:c2:e1:
                    e6:9f:23:a5:0c:b3:d0:aa:d6:cd:0d:42:f3:66:42:
                    3c:a4:d5:1f:72:68:b1:f1:7d:e3:ea:d3:19:ae:88:
                    62:d3:59:af:cf:e9:60:b6:8e:d1:6e:d0:38:df:c7:
                    92:f6:20:7b:1c:c1:51:5c:41:af:6b:f8:ae:20:39:
                    d6:0b:c6:a2:bd:26:dd:a1:0b:5b:e7:04:af:59:64:
                    cb:ff:08:2a:7e:31:c5:72:21:27:cd:f8:22:3d:4b:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D8:3B:4B:42:CE:73:33:F1:0E:FC:B2:4E:1B:C2:8D:C0:48:2A:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CAD75CA44011F1A932300BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.202.0-154.209.204.255

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:d4:61:c8:1b:cd:7d:7f:d6:df:4c:d2:75:99:3e:48:f6:
         7f:7d:8a:4d:0b:91:27:00:3f:30:0a:da:55:9b:e2:ea:51:65:
         06:2b:c0:df:54:8f:aa:bc:d8:44:8a:de:37:ac:18:ec:4e:11:
         cf:57:d6:9d:9d:34:6e:93:9a:43:9c:74:42:a0:96:6e:f8:ac:
         e5:41:bf:aa:ae:4f:22:5e:30:4d:bf:fc:db:11:0e:a1:d0:1f:
         25:ac:e3:eb:d4:fd:a6:28:ad:84:ad:de:6d:ef:83:13:8e:12:
         57:6b:e8:7b:fb:75:c8:f5:e4:c7:68:05:1b:6e:46:cc:84:83:
         d0:cc:0c:e6:cb:46:23:78:5f:fe:f9:5d:2c:88:ab:24:59:9c:
         f6:0c:6d:a3:e7:73:1c:6b:df:2f:a5:8e:3f:2a:29:04:5a:80:
         fe:6d:4b:ca:24:20:2c:87:99:3f:11:76:84:d7:fa:ec:f6:c0:
         45:d3:22:7c:09:29:7d:e7:ff:96:44:af:c1:d1:2b:0a:8b:57:
         19:6e:a7:5a:95:35:0d:0c:6a:56:67:b4:cc:10:2a:0a:cd:88:
         71:d3:3b:a4:8e:88:ab:fc:c1:2d:af:9f:78:5b:48:eb:bf:71:
         29:42:6c:4a:6b:d6:5d:4d:59:d3:4a:3f:b6:d3:58:d9:bc:2c:
         5a:cf:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----