Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354BE9CAB19911F1A53B58DBCE1D38B0.roa
File:                     354BE9CAB19911F1A53B58DBCE1D38B0.roa (raw, json)
Hash identifier:          rE8ZdGp9DvGwc1VT4+q/9u4HmSupbSoRS1f9BXQn5Sg=
Subject key identifier:   C2:BF:57:27:60:66:EC:80:AE:4C:6A:CA:05:26:D3:E3:DC:1C:1D:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D686
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354BE9CAB19911F1A53B58DBCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 06:38:21 +0000
ROA not before:           Wed 16 Sep 2026 06:38:17 +0000
ROA not after:            Thu 15 Oct 2026 06:38:17 +0000
asID:                     147176
IP address blocks:        45.195.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120454 (0x1d686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 06:38:17 2026 GMT
            Not After : Oct 15 06:38:17 2026 GMT
        Subject: CN=6aaa395d-a05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:43:22:03:aa:51:af:e9:b9:9a:d1:e9:ea:
                    d9:88:d9:4b:83:9a:ba:ee:ae:cf:3e:f9:f9:d6:94:
                    bf:b3:01:7a:e2:25:b4:28:60:07:58:70:5a:f9:24:
                    76:b2:eb:6b:93:4e:6a:f1:3d:c1:d3:8d:1f:b5:bf:
                    07:5a:17:19:0d:fb:e8:10:36:7e:0e:d3:4e:55:af:
                    3d:85:2f:e6:b0:33:92:4a:04:8d:fd:d7:e6:d3:a0:
                    43:e3:c4:22:1e:86:b3:83:91:e8:16:f9:d8:1c:b9:
                    00:63:51:4e:28:e0:54:fe:8e:84:7b:33:06:6f:10:
                    7d:5c:e5:66:f0:2e:99:51:55:4d:a7:56:2f:57:36:
                    0b:1d:8c:8c:3e:e3:e4:19:62:48:03:56:b9:2a:d5:
                    ac:dd:a7:7f:8c:d8:32:77:70:1c:ed:2c:7b:0d:70:
                    c3:6c:bc:60:70:d0:c8:f9:ed:fe:e8:a6:23:04:2f:
                    e1:65:51:03:e2:ca:76:bf:c7:d9:bd:28:d2:dd:b5:
                    88:89:60:8c:04:c2:3f:db:09:80:48:4f:be:82:aa:
                    a0:12:b8:4d:61:f3:a3:8d:52:c3:2b:0a:4a:6a:29:
                    a1:d1:85:4b:a5:92:fe:9c:02:4e:72:c1:f6:92:f4:
                    8d:d5:91:ab:88:63:35:b6:ab:22:ea:8a:c3:71:eb:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:57:27:60:66:EC:80:AE:4C:6A:CA:05:26:D3:E3:DC:1C:1D:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354BE9CAB19911F1A53B58DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:0b:df:9d:4c:d5:d0:73:9b:bc:63:75:45:d5:0a:60:aa:
         b2:0d:65:e1:a9:13:3e:3c:be:de:78:34:c3:da:16:67:6d:0f:
         f2:32:36:b4:8b:16:4f:fa:51:ac:e6:4c:e8:c3:aa:91:ba:b3:
         ee:3a:30:5a:aa:37:d0:aa:5c:3e:dc:34:56:3e:9a:99:47:ac:
         2c:e1:cc:19:d7:0f:82:e3:3c:55:0d:17:9c:9f:09:48:6a:ef:
         5d:47:5a:06:2a:a0:2d:ca:0f:95:c7:3e:08:92:02:b6:a2:bb:
         b1:88:c5:ae:08:a7:c6:a7:9e:20:d6:70:53:bc:de:da:a0:46:
         84:71:21:54:1e:fb:b2:2f:71:4a:0c:40:3a:a7:97:8d:c3:29:
         8b:5e:ed:cb:ea:e2:08:8c:4f:4d:9a:00:0c:55:b1:7a:89:23:
         86:74:a6:0b:41:1a:dd:3b:80:aa:0f:60:3b:94:1f:5d:ed:fb:
         68:aa:25:df:8c:23:dd:79:b0:20:80:0c:76:f0:d8:56:8d:d6:
         cd:b6:67:43:a4:f7:8e:06:22:ce:75:50:88:bb:2e:a8:9b:c6:
         2b:f4:08:7a:51:34:9d:58:e3:ae:d9:33:37:3f:ee:c8:12:4f:
         ef:60:17:12:f8:54:dd:b5:e8:8b:fb:ca:59:2f:42:9f:1f:e0:
         3f:b7:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----