Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1804C9EA05811F1A2038DDFCE1D38B0.roa
File:                     C1804C9EA05811F1A2038DDFCE1D38B0.roa (raw, json)
Hash identifier:          iyD2nUizlZV6fPQ1B06GMjyxqqjrGf0mJHt9rqC1Lq0=
Subject key identifier:   B1:30:2A:0E:E3:4B:99:59:6A:E8:FD:5D:BC:7E:43:8C:F9:B4:66:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E28B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1804C9EA05811F1A2038DDFCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:44:09 +0000
ROA not before:           Tue 25 Aug 2026 07:44:05 +0000
ROA not after:            Sat 28 Nov 2026 07:44:05 +0000
asID:                     45669
IP address blocks:        154.80.19.0/24 maxlen: 24
                          154.80.20.0/24 maxlen: 24
                          154.80.21.0/24 maxlen: 24
                          154.80.22.0/24 maxlen: 24
                          154.80.23.0/24 maxlen: 24
                          154.80.24.0/24 maxlen: 24
                          154.80.25.0/24 maxlen: 24
                          154.80.26.0/24 maxlen: 24
                          154.80.27.0/24 maxlen: 24
                          154.80.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123531 (0x1e28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 07:44:05 2026 GMT
            Not After : Nov 28 07:44:05 2026 GMT
        Subject: CN=6a8d47c9-3f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:13:cf:dd:0d:2d:ed:3d:8d:1a:bc:c4:2f:24:
                    7a:d5:a7:b9:b3:61:4e:86:aa:df:af:11:1b:d5:d4:
                    28:fb:33:35:36:94:ef:55:25:15:12:69:0a:08:ec:
                    fd:e5:21:6a:16:c6:0c:eb:74:df:50:ac:3f:f0:07:
                    9d:cc:98:6d:f4:30:25:ad:82:8c:13:c1:71:52:d0:
                    2b:71:4c:a5:37:06:22:d3:e8:43:a3:c1:47:40:01:
                    b9:a9:69:00:c4:20:35:85:b1:c6:4a:f0:ae:1a:24:
                    a6:8e:26:37:c8:df:c9:56:bc:82:51:16:a5:50:ed:
                    1c:1e:39:ed:40:2a:dc:4a:88:7b:ed:af:a4:4f:c1:
                    6e:1d:d7:6e:be:85:7c:6d:7c:d5:ce:02:82:e4:0f:
                    10:a0:10:49:b0:dc:fb:9b:76:8a:9a:7c:cd:c9:40:
                    24:91:4f:0a:27:fe:70:d9:cf:0b:46:67:b8:2d:4d:
                    34:bc:de:87:f0:9c:ff:dc:68:7f:0f:87:62:d6:01:
                    53:32:34:66:df:38:2b:e2:82:3f:a0:b4:bd:92:1a:
                    10:ff:75:15:93:c8:ba:aa:a9:03:71:c6:86:70:c6:
                    a2:e8:1a:6f:fe:83:1a:2e:2b:dc:0e:4d:4f:e4:3d:
                    4d:f3:ea:a0:d2:fd:4d:54:ad:ce:1f:23:3b:74:6b:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:2A:0E:E3:4B:99:59:6A:E8:FD:5D:BC:7E:43:8C:F9:B4:66:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1804C9EA05811F1A2038DDFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.19.0-154.80.28.255

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:2d:02:bd:df:6c:c2:ee:95:02:33:1b:c8:bd:da:ea:db:
         8e:54:8c:89:e8:7c:60:2a:9b:71:a3:55:97:63:45:d1:d0:5c:
         5d:6c:8e:61:67:99:ff:60:d2:2c:6f:2b:a0:04:65:95:a4:7e:
         57:3e:2a:ea:31:aa:b8:1b:7c:63:51:f8:24:04:7c:ef:86:44:
         f0:de:6a:48:14:2e:46:b0:58:65:7b:84:42:2f:71:27:78:33:
         ed:a4:0f:b0:9a:a5:1b:41:e5:bf:a7:a0:0a:8a:fb:d2:e9:95:
         36:41:d8:16:ec:fc:a8:d7:b6:0e:31:7e:9e:08:e7:a1:5c:7c:
         37:06:cc:b0:fb:26:f8:79:52:30:6f:e6:c7:c1:a3:6b:85:57:
         02:f9:7e:a9:48:04:f7:0d:40:02:6e:38:03:33:57:41:c0:86:
         41:2a:fc:0e:27:2f:64:ee:97:8e:29:d5:3b:2d:e0:3a:6e:f5:
         38:69:2c:a5:34:0a:e5:00:93:24:ff:0b:2f:80:e7:fc:2f:ac:
         8b:05:df:b0:f8:b7:9d:ee:d7:e2:a5:59:4e:99:14:1c:42:01:
         f8:a3:51:a2:37:2e:d6:cc:47:25:bc:95:03:f8:76:55:b9:a5:
         f3:d9:a9:d4:c1:a0:70:b8:43:7c:68:e4:58:bc:24:27:63:d1:
         7b:49:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----