Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F80A289BB511F1BC32B402CF1D38B0.roa
File:                     81F80A289BB511F1BC32B402CF1D38B0.roa (raw, json)
Hash identifier:          uObXxXHmZH1Pi82WCvDEbaLmtkiZWGHcn5jcSBKWJC4=
Subject key identifier:   B8:47:95:F1:96:76:A3:67:4C:97:EE:F7:DC:5C:30:62:5B:24:0A:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E011
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F80A289BB511F1BC32B402CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 10:05:30 +0000
ROA not before:           Wed 19 Aug 2026 10:05:26 +0000
ROA not after:            Thu 19 Nov 2026 10:05:26 +0000
asID:                     139923
IP address blocks:        154.91.48.0/20 maxlen: 24
                          154.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122897 (0x1e011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 10:05:26 2026 GMT
            Not After : Nov 19 10:05:26 2026 GMT
        Subject: CN=6a857fea-c9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:f6:06:68:87:d7:3c:c4:e5:41:fb:21:67:
                    f9:3e:47:60:d3:b2:0f:3e:33:2d:f8:68:3f:c6:2d:
                    1d:6b:e9:84:5b:b3:23:82:ac:4e:17:2c:c5:fb:76:
                    97:8d:68:19:7b:c9:85:00:e1:73:12:47:84:9e:46:
                    e3:f2:d7:c2:20:b7:a2:b9:99:6a:db:38:05:aa:4b:
                    05:4e:b9:3d:60:9f:80:71:17:21:45:65:67:a0:83:
                    bd:34:bd:1b:07:17:2a:c3:2d:0b:20:4a:50:46:6f:
                    7e:aa:98:d6:e0:a4:b0:a8:2d:f1:23:24:fa:c8:d7:
                    b3:f4:b1:1f:87:7e:20:45:c1:8f:fe:1d:da:40:14:
                    c6:47:16:d3:45:ac:e1:b8:cf:cb:59:d3:bd:20:12:
                    38:65:2d:b5:52:d1:08:40:61:bf:31:22:eb:e5:ad:
                    45:f8:5c:0e:77:cf:76:90:5b:f0:45:5a:3f:c7:36:
                    9c:74:cf:75:5b:30:93:0b:98:c9:c2:e8:e9:ca:00:
                    fc:04:52:f2:d0:8a:10:5e:e2:ca:08:b6:a4:56:44:
                    46:2d:ab:72:ea:1d:da:2b:e2:77:47:c8:e3:cc:80:
                    07:47:c8:80:0e:d8:e1:3a:5d:7e:c2:f2:6e:f1:f7:
                    d3:3e:0d:a2:a4:3e:13:c8:df:f9:a4:f5:de:e4:ff:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:95:F1:96:76:A3:67:4C:97:EE:F7:DC:5C:30:62:5B:24:0A:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F80A289BB511F1BC32B402CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20
                  154.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:62:d1:cd:2b:cd:80:79:b0:96:48:4e:53:2a:ae:6a:84:0d:
         05:0f:52:04:bb:7a:77:a7:63:0d:ec:49:c5:63:14:35:31:80:
         c8:fc:7c:30:df:b8:80:76:4c:c7:12:f6:8b:0c:ff:38:78:fa:
         73:fa:dc:d6:d6:e1:f1:cc:35:df:c9:f9:58:12:71:7e:c8:73:
         5e:59:76:4c:f7:22:46:ce:b0:1e:0b:12:73:d1:8f:35:aa:5b:
         f8:0b:93:a0:72:6c:f3:b9:8a:f8:91:81:1d:f6:eb:da:62:72:
         0e:f1:ae:f0:f6:00:ef:3c:2b:84:c8:2d:2c:da:37:2e:54:d2:
         e7:81:dc:b3:23:bc:67:19:57:58:43:ea:e0:1e:a6:f5:5d:ad:
         02:91:10:66:61:af:1c:8f:62:ec:4f:7f:01:d8:95:5e:b7:ed:
         b2:bb:17:d0:65:c2:17:44:0b:a4:c4:e7:07:d6:7c:f0:42:6f:
         2d:48:e9:3e:c8:54:32:35:ad:6e:8c:5b:55:e2:bb:11:04:19:
         51:46:13:f7:87:56:e8:d6:d6:01:40:01:b3:06:f6:e9:be:12:
         ba:0a:17:be:98:37:44:b3:88:a0:ee:e9:3a:50:5f:7c:0e:6a:
         f0:a7:21:90:23:f3:4e:27:fc:f1:c3:2e:10:66:ba:d6:8b:e0:
         25:a1:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----