Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C672EEA05611F1AE04BECFCE1D38B0.roa
File:                     25C672EEA05611F1AE04BECFCE1D38B0.roa (raw, json)
Hash identifier:          0TV91aLCM1rwtQa+5moh4QYsUwIpQNIQEp9g3LeBYIs=
Subject key identifier:   17:AD:EA:DC:AF:C6:B7:FA:62:7D:40:F0:76:82:04:85:CA:24:F6:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E285
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C672EEA05611F1AE04BECFCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:25:29 +0000
ROA not before:           Tue 25 Aug 2026 07:25:25 +0000
ROA not after:            Sat 28 Nov 2026 07:25:25 +0000
asID:                     45669
IP address blocks:        154.80.0.0/24 maxlen: 24
                          154.81.224.0/19 maxlen: 24
                          154.91.160.0/22 maxlen: 24
                          154.91.160.0/24 maxlen: 24
                          154.91.161.0/24 maxlen: 24
                          154.91.162.0/24 maxlen: 24
                          154.91.163.0/24 maxlen: 24
                          154.91.164.0/23 maxlen: 24
                          154.91.164.0/24 maxlen: 24
                          154.91.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123525 (0x1e285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 07:25:25 2026 GMT
            Not After : Nov 28 07:25:25 2026 GMT
        Subject: CN=6a8d4369-a682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:73:a6:89:61:54:a8:35:ef:6f:d0:86:02:
                    8f:b5:89:5b:93:bb:ef:0a:5f:ce:b4:1d:3a:de:ad:
                    7f:82:a1:34:86:b9:95:be:4f:f8:5f:67:93:44:49:
                    e6:c1:36:28:77:ff:b1:70:b2:eb:2b:e0:53:f9:6d:
                    2b:3e:e7:51:05:82:66:f5:cc:49:33:94:ee:4d:47:
                    cd:f0:a0:e1:9a:d0:b9:79:76:69:fd:46:c4:1d:a5:
                    34:74:36:c7:b1:53:b1:49:d0:a2:b6:e2:97:84:b0:
                    0a:43:c6:94:8c:4b:12:e5:40:5d:29:81:a2:c1:71:
                    f2:81:16:51:63:f8:06:7a:bc:de:e3:ba:2f:9a:21:
                    b3:31:e8:4a:be:34:89:ec:dd:b7:c3:78:d6:2e:6f:
                    ca:1b:58:c6:af:5b:17:ca:3f:63:40:c5:37:e3:ab:
                    fe:b7:f3:3a:7b:f4:05:cf:e9:0a:e9:25:21:b9:34:
                    57:12:5e:34:90:44:75:83:f6:2d:30:3b:a9:4f:c6:
                    4b:71:83:e0:57:90:f5:81:1c:e1:64:53:b9:2b:cd:
                    a7:1f:40:21:52:38:fd:e6:68:82:ae:63:f1:88:2f:
                    82:f3:c4:cf:66:ae:55:f9:15:c8:7e:87:37:e6:e3:
                    b8:8e:29:d9:56:8d:67:66:92:23:1e:85:89:2c:f7:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:EA:DC:AF:C6:B7:FA:62:7D:40:F0:76:82:04:85:CA:24:F6:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C672EEA05611F1AE04BECFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.0.0/24
                  154.81.224.0/19
                  154.91.160.0-154.91.165.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:f0:1e:44:96:92:5c:af:d5:4e:12:de:df:c3:87:cd:e5:
         82:3a:9c:a8:be:77:09:ae:77:5a:d5:4f:78:84:fb:05:7a:59:
         35:db:54:f7:9e:28:ae:cc:e2:93:35:80:36:b3:dd:f4:6d:71:
         3b:49:6b:6d:94:52:57:65:19:5f:31:c8:54:73:44:84:44:aa:
         dc:f3:85:8f:f6:4f:72:04:d6:55:6e:76:54:32:8b:cf:47:65:
         e1:3c:ad:61:7a:47:8e:a4:42:a0:08:26:d2:5b:f7:bd:20:2f:
         de:bd:fa:df:72:e0:d7:5b:52:62:12:1a:25:b9:b1:2d:19:e1:
         7f:f9:1b:d0:85:87:16:0d:3e:0d:01:48:fd:44:39:19:07:6a:
         3c:b2:57:f3:ca:4d:6c:02:f1:00:c1:0b:66:ff:6e:ff:af:7b:
         1a:c8:9d:27:cc:37:e6:a0:89:3c:2f:c0:ad:7b:2a:87:b4:c8:
         2b:af:15:b7:e0:d2:fb:ec:17:b5:34:63:7f:c3:4c:41:14:ab:
         9e:ed:06:d9:2a:39:d4:0b:00:94:6b:3e:11:a5:2e:bf:58:19:
         60:c2:ae:77:e0:f1:83:3e:cd:c5:e5:39:49:42:d1:c0:ef:37:
         d1:9f:26:47:dd:d6:a6:12:59:e0:bb:df:7f:1c:98:0a:0f:e4:
         59:2c:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----