Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0350884EB0E611F1A8F67E18CF1D38B0.roa
File:                     0350884EB0E611F1A8F67E18CF1D38B0.roa (raw, json)
Hash identifier:          BwonVVTngSaGvmmeY7lkXFT839EqW2rmyxA6Bu/mNWY=
Subject key identifier:   6B:50:3A:1D:7F:E8:D0:93:45:E8:22:F7:55:E3:3E:66:A8:D5:1A:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D643
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0350884EB0E611F1A8F67E18CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:15:37 +0000
ROA not before:           Tue 15 Sep 2026 09:15:33 +0000
ROA not after:            Thu 22 Oct 2026 09:15:33 +0000
asID:                     401362
IP address blocks:        45.202.203.0/24 maxlen: 24
                          45.204.74.0/24 maxlen: 24
                          45.204.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120387 (0x1d643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:15:33 2026 GMT
            Not After : Oct 22 09:15:33 2026 GMT
        Subject: CN=6aa90cb9-c7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:83:33:f4:77:5d:de:17:39:bf:b5:fb:37:
                    66:51:9a:ed:24:00:ec:e0:3d:45:7b:49:fc:6c:7a:
                    b3:51:f3:69:a4:94:f4:a6:68:d4:f7:6e:cc:b3:6a:
                    1f:0f:b3:b4:4b:f5:49:aa:40:28:1a:ad:05:00:87:
                    b4:e1:7e:b4:fd:a4:31:6f:00:0f:b4:d7:d0:d7:27:
                    0a:ea:ad:5d:68:bd:a2:19:62:d5:2b:63:e7:9d:9d:
                    7c:ad:f3:71:d5:46:0c:e8:05:b8:48:87:c4:eb:c0:
                    08:a4:58:bd:90:29:f7:ad:83:18:d0:3f:0e:21:10:
                    f5:45:ca:26:d8:9e:07:30:74:32:f2:03:c2:05:6d:
                    e5:a7:b8:28:fa:fa:c1:ab:af:69:9f:62:20:99:9e:
                    a6:c0:1f:0f:ca:b3:65:60:78:d4:81:3f:76:0b:75:
                    4c:6f:8b:db:05:5d:74:c2:ad:ce:cf:72:eb:c7:2c:
                    46:29:7f:ea:2f:8c:60:f3:ad:98:68:19:01:09:2d:
                    c4:a2:26:84:82:0a:29:44:46:d6:9c:3c:e1:5e:ed:
                    f6:35:47:50:af:28:4d:97:58:8f:80:89:30:fa:ce:
                    67:90:1f:b5:19:c8:71:1d:3c:80:b4:78:ca:ec:ae:
                    e6:b6:78:b0:fe:f1:4d:fb:62:44:41:a5:2a:e3:58:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:3A:1D:7F:E8:D0:93:45:E8:22:F7:55:E3:3E:66:A8:D5:1A:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0350884EB0E611F1A8F67E18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.203.0/24
                  45.204.74.0/24
                  45.204.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:37:f9:8c:b7:71:18:b1:95:1f:84:b8:15:16:83:a5:c8:44:
         55:c0:d1:88:6e:73:67:b3:c9:c0:93:11:d0:28:05:85:a7:09:
         52:d1:a1:5c:96:ef:2a:92:85:c9:f3:3c:92:10:8d:a0:2f:c9:
         3d:e2:1a:c5:cb:88:7f:a8:ca:24:2c:47:23:89:11:db:72:ef:
         84:51:30:bf:da:1a:fe:9f:a8:6a:27:99:f7:3b:40:1b:c5:29:
         92:a2:42:c7:e8:61:92:8d:a0:d3:31:00:db:f8:41:4d:96:2a:
         90:50:94:06:53:c5:7b:a5:79:5f:80:3d:02:b0:c6:4d:ad:cd:
         af:0c:4e:55:c4:ad:a1:72:61:a9:e4:87:bd:91:b2:f9:9b:4a:
         7a:70:c3:e5:62:22:dc:10:6b:6c:dd:e0:f1:2a:60:33:75:5e:
         f5:31:15:c1:2c:8f:eb:86:98:e4:f2:22:dc:70:5b:b7:7b:cd:
         a6:f7:bb:16:7c:3f:39:65:7a:98:c4:61:9b:28:fd:05:d0:6e:
         06:43:92:95:18:40:7c:61:3c:3b:f0:63:08:f2:b5:e6:ea:1d:
         d9:79:d2:a3:3e:cf:fb:14:5d:8c:4a:6d:7e:0f:0d:95:62:e1:
         69:7c:4b:45:ae:f7:66:4f:e8:9f:09:4d:cc:76:05:54:68:c2:
         d0:f2:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----