Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05251D5AA05711F19C6158D7CE1D38B0.roa
File:                     05251D5AA05711F19C6158D7CE1D38B0.roa (raw, json)
Hash identifier:          WgubIJqR9iQj526AdHBYIlUQnyb4e1zESU9F15iGew8=
Subject key identifier:   F0:84:5D:96:B1:49:9F:6C:AF:16:4B:4E:E1:D5:BE:A7:96:F4:51:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E287
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05251D5AA05711F19C6158D7CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:31:44 +0000
ROA not before:           Tue 25 Aug 2026 07:31:39 +0000
ROA not after:            Sat 28 Nov 2026 07:31:39 +0000
asID:                     45669
IP address blocks:        154.80.0.0/17 maxlen: 24
                          154.80.0.0/18 maxlen: 24
                          154.80.1.0/24 maxlen: 24
                          154.80.2.0/24 maxlen: 24
                          154.80.3.0/24 maxlen: 24
                          154.80.4.0/24 maxlen: 24
                          154.80.5.0/24 maxlen: 24
                          154.80.6.0/24 maxlen: 24
                          154.80.7.0/24 maxlen: 24
                          154.80.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123527 (0x1e287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 07:31:39 2026 GMT
            Not After : Nov 28 07:31:39 2026 GMT
        Subject: CN=6a8d44e0-7e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:47:fe:c1:ae:17:93:c5:14:19:0f:98:b2:
                    65:06:f1:38:a9:1f:96:38:4f:2e:e4:11:5f:9f:a2:
                    4c:fe:87:6c:c4:8d:c8:53:a7:46:c3:8e:17:ae:57:
                    cb:82:9f:f8:a5:a6:7e:f5:85:b6:bb:f6:5c:fc:3f:
                    a2:45:14:d9:62:34:3d:72:51:b3:62:8d:73:a9:9b:
                    5f:d0:2d:85:88:ee:7c:c9:ed:79:a2:bf:5e:a6:13:
                    a3:5d:b1:54:a0:5c:7c:90:f6:4a:aa:15:1a:bf:4c:
                    7f:aa:31:67:c4:07:de:a1:ce:f4:45:f5:05:9e:c8:
                    1a:5d:e4:3f:88:ee:8d:86:d3:70:8e:9c:66:3c:87:
                    ba:31:af:36:e6:90:27:41:50:4c:4a:4a:f3:87:9f:
                    70:34:ba:50:7f:ca:b2:48:24:a0:2e:3f:da:b8:e0:
                    ff:50:47:1c:14:95:e4:23:a1:63:14:d5:c9:36:11:
                    2e:37:80:de:51:3a:69:64:f3:bd:68:0d:d6:c9:08:
                    af:0b:f4:1b:34:68:16:2e:7b:7c:d9:c4:2a:fe:bf:
                    74:64:2a:2c:61:64:e0:0e:e6:99:86:f6:71:d6:85:
                    f4:d4:58:26:ae:36:a1:18:5a:7c:c4:7c:e7:dc:b1:
                    48:7b:fd:4b:f1:5f:c6:99:15:f3:3b:ff:97:28:a3:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:5D:96:B1:49:9F:6C:AF:16:4B:4E:E1:D5:BE:A7:96:F4:51:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05251D5AA05711F19C6158D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:7e:d7:ae:8c:ea:c5:d8:c4:40:6a:63:49:42:f4:4d:66:
         6d:4d:ee:eb:30:a9:00:db:3c:aa:cf:a7:a4:9a:f2:d5:8e:7d:
         cd:13:ed:b7:97:53:8f:d0:ab:ed:f1:6f:2e:01:e3:22:28:b2:
         8e:6a:ff:74:a3:85:55:38:b9:37:c2:cb:54:63:b0:d0:a7:46:
         7f:f8:7f:62:5c:c5:8d:cb:65:0f:a2:69:26:71:e9:dc:b7:d9:
         f2:9a:76:0f:6e:69:bc:e8:75:7b:9d:ed:9c:4c:44:0e:fb:16:
         b4:c8:20:2f:a8:24:da:df:95:09:84:b1:74:ff:fa:44:8b:fd:
         88:fa:d6:4d:66:f4:6b:51:82:4a:5a:dd:75:33:12:5c:20:23:
         b6:e0:d1:be:a4:1c:4d:02:af:4a:64:d0:3b:ba:16:4b:9e:2c:
         6d:54:1d:b7:aa:58:97:da:a4:dd:98:73:21:1c:1a:dd:82:7c:
         b1:f4:77:78:9b:c6:36:d2:2d:16:bb:29:5e:a4:94:c9:c2:d1:
         cc:ee:63:12:a8:05:b5:f2:6e:50:3e:6c:ad:f1:f2:6e:e0:8b:
         dc:c1:3c:04:b4:2b:19:d1:1c:8f:8a:8b:b8:80:81:98:53:f3:
         ee:43:0c:aa:88:36:6a:f6:81:b6:fa:e6:d0:1b:c3:00:b5:9f:
         fe:6d:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----