Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE081F5EA05E11F1AB5AFA03CF1D38B0.roa
File:                     CE081F5EA05E11F1AB5AFA03CF1D38B0.roa (raw, json)
Hash identifier:          PPrD5FkyonpHy/4zbUJPd9NyE8RoUcvBxysqkU5O0DA=
Subject key identifier:   F7:28:60:85:A9:EC:53:5B:DF:64:7B:A5:46:BB:FF:E7:C4:E2:97:83
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE081F5EA05E11F1AB5AFA03CF1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:27:27 +0000
ROA not before:           Tue 25 Aug 2026 08:27:23 +0000
ROA not after:            Sat 28 Nov 2026 08:27:23 +0000
asID:                     45669
IP address blocks:        154.80.88.0/24 maxlen: 24
                          154.80.89.0/24 maxlen: 24
                          154.80.90.0/24 maxlen: 24
                          154.80.91.0/24 maxlen: 24
                          154.80.92.0/24 maxlen: 24
                          154.80.93.0/24 maxlen: 24
                          154.80.94.0/24 maxlen: 24
                          154.80.95.0/24 maxlen: 24
                          154.80.96.0/24 maxlen: 24
                          154.80.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123562 (0x1e2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:27:23 2026 GMT
            Not After : Nov 28 08:27:23 2026 GMT
        Subject: CN=6a8d51ef-7bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:ce:bc:31:87:45:0c:66:89:e7:9d:ca:14:
                    b0:c3:ad:fd:36:52:af:63:a9:42:de:f4:51:c3:83:
                    af:0f:ef:42:b3:23:d0:a7:20:c2:98:21:3e:4e:57:
                    60:ec:54:31:bc:4b:c1:10:d8:b5:c9:32:17:2e:47:
                    a2:9d:05:0b:ad:f3:7c:7b:fa:2d:91:16:c1:7b:b1:
                    83:1b:4c:4e:ea:bf:e4:eb:a8:49:f8:a4:c2:75:b4:
                    ba:43:6e:a8:19:12:1b:d7:ab:6c:7d:c7:6e:67:a3:
                    fb:ba:a6:37:c2:a1:e6:04:d0:d4:1c:cc:6c:ee:05:
                    f9:7b:97:85:21:05:cd:3d:27:97:a0:15:29:6e:59:
                    8d:94:3d:c7:3c:9a:c5:5e:75:21:19:70:49:ac:4c:
                    2a:08:5d:24:35:16:71:ee:25:c0:54:c4:90:52:8f:
                    d8:71:2a:76:10:36:05:03:59:a7:40:ac:24:0c:f8:
                    ff:9c:de:d8:13:42:9f:85:a8:c1:45:b1:7e:60:4c:
                    82:b7:b2:cc:38:eb:a2:e8:c8:c7:a8:db:78:2b:88:
                    c5:c3:b8:df:83:27:37:2c:b4:9a:40:81:a0:65:a4:
                    60:be:e0:45:71:d9:d3:d2:9f:71:ab:a5:da:12:af:
                    c8:9d:66:ab:bd:ef:ea:58:e5:0e:16:f3:89:96:99:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:60:85:A9:EC:53:5B:DF:64:7B:A5:46:BB:FF:E7:C4:E2:97:83
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE081F5EA05E11F1AB5AFA03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.88.0-154.80.97.255

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:0a:ad:50:7e:20:76:e0:98:db:6b:2e:a6:6e:3f:41:29:
         62:cf:a5:57:5c:c2:0e:e9:01:4d:d0:c0:d9:27:7c:61:03:2e:
         27:b4:7c:14:30:63:af:47:ad:ec:ed:df:23:9c:ec:30:76:b6:
         d9:40:1e:6b:80:67:4c:93:6b:8c:a1:6e:2d:f7:c1:99:30:4c:
         e1:d7:bd:bc:c2:a7:b6:ed:ef:a1:0c:57:30:67:81:7f:38:67:
         c0:59:cc:be:96:73:26:a0:b8:42:b1:1b:c3:ff:b7:99:9a:74:
         c0:45:e0:4c:bf:7b:11:60:16:bc:57:ba:ff:03:7b:fa:47:01:
         85:52:9e:48:77:b5:16:90:13:2f:1c:7b:48:0b:fc:f8:8a:fd:
         e0:0c:07:16:e7:92:21:dc:12:93:4a:1c:49:3e:14:d9:1b:14:
         f6:1c:78:5d:a8:ce:9b:35:14:1a:50:0e:c4:07:66:60:db:b4:
         8f:98:b3:07:3c:a7:23:b0:af:84:96:b7:1b:da:0e:a0:9f:ad:
         b7:c4:47:c5:34:a1:3c:c7:78:08:2c:6e:9d:b1:c2:1e:1b:d4:
         f9:b1:43:1b:58:f0:a4:16:1a:02:85:d2:b7:29:3c:10:e3:31:
         74:bc:11:3f:7b:7d:e6:90:de:68:17:cd:d8:c9:d5:32:be:85:
         54:26:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----