Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980EC3E2AB8C11F1801E28AECE1D38B0.roa
File:                     980EC3E2AB8C11F1801E28AECE1D38B0.roa (raw, json)
Hash identifier:          CsZxF0xd8iJSmjvbVfvA37w+zdaECqWZf+dgNQPlpD8=
Subject key identifier:   5D:D3:39:AF:F1:76:55:56:BC:4E:BF:D1:A2:39:53:20:FF:6B:57:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E67C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980EC3E2AB8C11F1801E28AECE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:52:56 +0000
ROA not before:           Tue 08 Sep 2026 13:52:52 +0000
ROA not after:            Wed 04 Nov 2026 13:52:52 +0000
asID:                     401783
IP address blocks:        154.83.10.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124540 (0x1e67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 13:52:52 2026 GMT
            Not After : Nov  4 13:52:52 2026 GMT
        Subject: CN=6aa01338-ada1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:86:70:7e:8e:95:b2:8a:0b:9d:0e:b7:01:
                    fe:71:f0:93:21:70:ca:2f:9d:9f:d0:96:2e:1e:81:
                    ad:0d:68:88:6b:70:d2:f3:d8:43:97:24:c9:e1:41:
                    d7:29:2b:e3:43:a6:a6:2a:46:47:a9:4a:35:f4:17:
                    b8:8a:38:ef:60:00:92:79:17:6f:ac:dd:a9:be:c0:
                    4f:4d:80:2f:38:4f:f0:07:8b:8c:1d:94:aa:17:c0:
                    64:52:dd:11:99:20:20:73:64:66:df:81:1b:43:5a:
                    47:0f:18:48:bb:6d:9f:d3:34:b6:90:4d:29:88:d5:
                    1b:67:d6:ba:20:b3:4c:7c:f1:78:29:43:e8:b7:3c:
                    7f:95:f8:72:5c:fb:2e:b4:ef:fc:e1:c7:b7:36:3b:
                    24:af:7f:21:c0:66:b0:8b:a9:84:de:fb:df:57:a5:
                    10:c5:dd:f9:cd:07:de:1b:ec:fe:9c:67:00:84:fc:
                    4c:0d:3b:82:c8:e0:3b:a8:8b:a7:10:3a:0a:89:f5:
                    39:d5:98:88:9d:ab:de:d7:22:8f:6b:f6:9b:71:15:
                    25:89:00:d5:32:bc:f4:e5:3f:37:34:6a:2d:ba:90:
                    db:d5:b5:31:91:2a:7c:ba:e1:15:a3:3e:59:16:58:
                    6c:5a:7e:58:de:e3:9e:d9:a7:81:d0:f1:57:f0:b6:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:39:AF:F1:76:55:56:BC:4E:BF:D1:A2:39:53:20:FF:6B:57:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980EC3E2AB8C11F1801E28AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.10.0/24
                  154.83.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:44:25:fb:d1:2a:c9:99:78:6b:61:fc:85:7c:60:6d:60:91:
         6e:cf:f5:16:f4:ad:30:e2:fd:4f:13:47:5d:35:84:d6:db:38:
         de:3d:7d:58:ed:9f:97:92:6c:f8:51:15:e8:38:f7:f4:54:88:
         d7:a5:f6:c4:0c:2b:dc:e0:c7:67:1a:c1:a5:d2:36:96:f2:96:
         15:63:e3:19:d4:d0:cd:1f:17:3b:75:e7:5e:3a:7a:e3:ce:24:
         7c:96:27:d9:e4:cb:cf:48:1b:3e:1c:38:41:c3:18:61:22:cf:
         ca:99:5a:a7:5f:e9:a7:7d:71:1f:a1:25:8c:45:54:99:18:05:
         84:6f:bf:49:75:0d:de:c0:ed:e1:f2:ca:03:82:75:4a:27:4b:
         68:a8:f6:e7:c1:8e:c1:58:7c:7b:b5:72:c2:0a:e2:fc:c7:f7:
         d1:da:49:e5:c6:38:dd:5e:84:68:15:06:1c:64:d7:ab:05:06:
         e6:95:0e:1b:39:7c:27:74:a4:9d:86:a1:36:ab:08:2d:6b:42:
         95:a9:1c:7d:27:68:68:ba:4f:a1:c5:86:50:69:ca:06:b8:cb:
         c1:33:12:9e:9e:bc:6e:18:66:f0:3e:8d:71:dc:9e:19:cd:1b:
         3b:40:17:7d:e5:a6:2f:47:17:1a:a2:f1:87:ad:e3:15:6b:3d:
         b7:fc:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----