Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708E80F4A06111F1BB877212CF1D38B0.roa
File:                     708E80F4A06111F1BB877212CF1D38B0.roa (raw, json)
Hash identifier:          7SM171c/N1MFjwcPgVQ3sad6REF/fsVxZE3zODXBwW4=
Subject key identifier:   37:D6:FC:5B:46:A8:67:7D:A4:68:1E:0F:D0:95:95:63:69:EB:0D:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708E80F4A06111F1BB877212CF1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:46:19 +0000
ROA not before:           Tue 25 Aug 2026 08:46:15 +0000
ROA not after:            Sat 28 Nov 2026 08:46:15 +0000
asID:                     45669
IP address blocks:        154.80.118.0/24 maxlen: 24
                          154.80.119.0/24 maxlen: 24
                          154.80.120.0/24 maxlen: 24
                          154.80.121.0/24 maxlen: 24
                          154.80.122.0/24 maxlen: 24
                          154.80.123.0/24 maxlen: 24
                          154.80.124.0/24 maxlen: 24
                          154.80.125.0/24 maxlen: 24
                          154.80.126.0/24 maxlen: 24
                          154.80.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123573 (0x1e2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:46:15 2026 GMT
            Not After : Nov 28 08:46:15 2026 GMT
        Subject: CN=6a8d565b-123a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:ba:ca:9a:a6:a6:21:49:8b:bc:b9:88:7d:
                    b7:40:98:4d:25:34:0a:32:e6:75:25:fa:57:93:53:
                    6e:19:36:e5:04:f4:11:23:87:b1:8f:2a:bb:c9:73:
                    d7:03:30:ca:f0:8a:2d:66:c0:c0:7a:0e:50:a6:73:
                    02:c2:aa:4b:1b:f0:97:38:ed:1d:92:6b:ff:0e:15:
                    b0:67:be:f4:2f:18:c3:cc:0c:fb:5d:0d:bd:68:f5:
                    e8:f6:18:43:ee:5d:4f:6f:a1:c5:3e:7f:00:22:66:
                    da:59:c7:96:99:a6:51:04:33:11:fe:28:a7:38:25:
                    9b:03:44:0b:d5:4f:40:83:eb:6a:c7:0d:0b:a9:15:
                    b6:6d:c8:e8:42:b8:7b:e6:83:89:3f:82:68:8b:12:
                    6c:a1:6a:d5:63:1b:f6:33:04:fd:f7:b6:33:bf:f1:
                    85:79:82:fa:9c:fb:71:49:60:67:79:70:28:72:fd:
                    2a:90:10:20:43:15:38:23:69:c1:2b:7b:13:4a:2e:
                    f9:b6:0e:f5:4b:ca:49:4a:b7:3e:f9:74:fd:de:a1:
                    0f:8f:f9:c9:db:30:36:9b:14:0b:c2:2e:06:5d:d5:
                    0b:0d:9d:2b:aa:8e:1c:81:1e:50:36:ed:00:49:c2:
                    71:06:51:bb:d7:60:77:9c:f2:c9:a5:76:3a:96:35:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:FC:5B:46:A8:67:7D:A4:68:1E:0F:D0:95:95:63:69:EB:0D:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708E80F4A06111F1BB877212CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.118.0-154.80.127.255

    Signature Algorithm: sha256WithRSAEncryption
         bb:44:d7:9a:d8:9e:0a:fc:84:da:0d:26:cb:ca:53:19:63:fb:
         f2:f9:46:39:dc:d3:7f:b0:63:93:59:fb:06:98:74:44:40:2d:
         a2:3e:76:1a:28:c6:b9:32:8e:17:f2:06:56:d7:15:57:82:3e:
         16:66:59:c3:01:fb:e7:91:35:93:5b:d3:bd:ba:6a:03:e8:8f:
         c0:51:23:84:8b:6b:d8:d0:92:b6:c3:92:7f:f7:a3:96:16:99:
         d9:49:94:b5:b3:3b:80:bf:61:fd:e7:70:ec:48:46:67:af:d0:
         1f:73:8c:97:7f:11:9e:c7:6c:2d:d4:37:9a:cb:fc:a4:b5:02:
         a0:a6:db:e7:95:af:b7:86:3d:05:9c:a7:9c:49:45:eb:2a:93:
         3a:8e:30:6b:74:45:8c:d9:64:49:17:be:a9:c5:31:0a:a7:a7:
         82:6e:d9:8f:a7:1e:5e:ec:02:d5:84:a9:0a:d6:6b:b7:2d:04:
         73:e4:ad:29:b0:1f:ab:93:6a:92:a4:51:db:d8:10:aa:ce:a4:
         54:17:2a:86:bf:9e:cc:15:e9:0a:79:a6:c3:0f:92:04:69:94:
         d8:8f:f0:9f:9d:e7:18:40:10:70:66:87:e0:8e:4e:0d:8e:f4:
         0f:3e:f7:53:bc:63:e4:10:07:e9:c6:fa:7c:ae:d6:7e:6a:3d:
         70:fc:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----