Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08318696FC11F19FA134E3CE1D38B0.roa
File:                     EB08318696FC11F19FA134E3CE1D38B0.roa (raw, json)
Hash identifier:          B8YbLJfYYOSzInCzBLWh4y4L/M7OETyy73Vnkc9l72o=
Subject key identifier:   F5:8E:61:EE:F5:05:3A:FD:B1:DA:F2:12:27:1B:F1:A2:E5:96:26:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08318696FC11F19FA134E3CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:54:05 +0000
ROA not before:           Thu 13 Aug 2026 09:54:00 +0000
ROA not after:            Mon 21 Sep 2026 09:54:00 +0000
asID:                     401783
IP address blocks:        154.82.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122609 (0x1def1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 09:54:00 2026 GMT
            Not After : Sep 21 09:54:00 2026 GMT
        Subject: CN=6a7d943d-f03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:c5:6c:66:8a:79:2f:98:54:04:e8:35:6b:
                    af:ad:43:79:1f:e9:2e:18:45:6f:24:e7:b6:19:c3:
                    c8:02:b0:38:e7:80:28:47:44:45:d8:a0:8e:9f:aa:
                    10:46:ba:ee:36:8e:ed:31:79:45:7c:df:05:4f:c4:
                    2f:67:2a:44:dd:7c:d2:24:8b:91:3f:94:96:1b:ff:
                    19:15:78:e6:e7:ec:01:ad:6f:a9:a9:7d:9f:6e:26:
                    d4:ee:48:38:5d:80:1a:e1:4e:b1:40:03:73:50:c4:
                    f4:41:5a:7e:0d:a9:a3:e5:fc:68:dc:00:62:68:95:
                    a4:50:94:53:01:ba:6f:c9:16:ed:6e:5d:fa:a8:de:
                    62:11:5d:53:ec:1d:21:79:f2:a7:b2:fa:06:24:96:
                    5c:8e:1f:eb:c6:a2:26:7b:e5:0c:87:34:08:96:d3:
                    2e:1f:b6:df:68:80:8c:30:ea:27:f2:08:e6:a2:14:
                    a4:21:23:dd:78:d3:1e:95:89:0d:64:3a:14:38:51:
                    1f:74:36:9a:aa:0c:6a:5d:89:e0:90:d3:de:62:ec:
                    df:af:55:ee:51:ba:f0:2b:9d:ce:12:a0:9a:68:be:
                    a4:1e:84:ee:2b:b5:0b:d9:7d:07:67:7f:62:59:ce:
                    e6:36:ef:95:c2:c7:19:93:c4:b2:ff:87:ae:2a:ae:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8E:61:EE:F5:05:3A:FD:B1:DA:F2:12:27:1B:F1:A2:E5:96:26:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08318696FC11F19FA134E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:33:a6:8f:a5:cd:6e:eb:18:fe:38:96:f8:82:9d:e9:f2:db:
         b3:58:97:f4:1e:6e:0f:fc:f9:59:8d:a4:1f:05:3b:9d:d8:d4:
         11:2b:4c:55:03:66:9c:a3:85:a0:10:d6:bd:08:3c:f0:db:a7:
         3a:4c:e4:7a:ac:39:3d:35:96:52:44:e4:15:7e:ee:50:f5:f5:
         6f:f5:f1:90:ba:af:3f:54:0e:37:d7:a8:6a:37:ab:b5:d5:a4:
         57:ea:f0:fd:6a:47:8f:a7:7c:d2:fa:21:d8:17:9e:36:4a:51:
         28:b8:ba:55:46:eb:0e:42:10:61:0d:d1:30:59:14:80:21:54:
         d1:1d:ee:22:8f:2a:14:2e:76:9f:86:28:9b:b9:e2:63:e3:bf:
         77:c0:44:13:a4:af:ac:dc:c0:57:fb:d1:6a:d2:8f:42:71:fc:
         fe:b4:e4:39:07:21:8c:8f:17:9c:13:b7:4a:35:7d:f7:3d:5b:
         92:f5:10:1f:46:55:b6:d3:a0:47:4c:e0:ff:85:f7:4d:c4:b7:
         86:5b:84:32:34:42:1e:5b:91:48:b3:11:f8:d0:be:9d:40:78:
         24:0b:8c:26:be:03:bd:d4:86:94:7e:f8:77:3d:2d:5a:c3:fa:
         f5:67:3f:02:f7:f1:87:cc:c1:80:68:20:7e:b3:01:e7:aa:45:
         56:e2:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----