Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D659DA2ACFA11F1A16E88D9CE1D38B0.roa
File:                     3D659DA2ACFA11F1A16E88D9CE1D38B0.roa (raw, json)
Hash identifier:          A+OUAFC75hJroRx5Hd/VzKnII+uAZe4qnkSI7Iv0Mgs=
Subject key identifier:   21:59:65:23:A9:D2:19:1B:29:80:94:66:A6:75:EE:72:7F:25:30:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D659DA2ACFA11F1A16E88D9CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:30:20 +0000
ROA not before:           Thu 10 Sep 2026 09:30:16 +0000
ROA not after:            Sat 10 Oct 2026 09:30:16 +0000
asID:                     139613
IP address blocks:        45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.207.224.0/19 maxlen: 24
                          45.207.224.0/20 maxlen: 24
                          45.207.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119981 (0x1d4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:30:16 2026 GMT
            Not After : Oct 10 09:30:16 2026 GMT
        Subject: CN=6aa278ac-7fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:2d:1b:2f:6b:14:9e:8e:ea:74:3c:cc:24:
                    82:f8:6f:ce:fe:17:0f:97:22:bb:d8:16:75:55:4a:
                    d7:28:91:7c:8b:ae:0e:d4:d2:81:e4:90:0f:db:ff:
                    87:43:14:b5:ad:c7:07:f2:dc:5e:e2:f0:10:28:9c:
                    e3:f8:fa:27:cd:5c:94:c7:63:c6:17:28:66:ad:f3:
                    3e:2d:42:61:4e:24:cb:86:d4:af:a8:4b:b7:b6:9d:
                    4c:de:60:db:6f:c1:bc:4d:05:b1:54:b3:36:45:1f:
                    15:63:4f:52:6e:ce:a2:6a:89:d6:ce:7c:ef:fc:32:
                    e6:68:8f:78:27:d9:fe:f2:2e:4b:45:8b:cc:36:ed:
                    38:4a:f0:88:21:44:50:6f:a9:38:4c:7d:72:ec:37:
                    f4:79:74:46:fa:7a:28:b3:81:83:ef:b0:31:c7:55:
                    e9:89:a2:d7:eb:2d:a7:d7:35:c2:87:ec:63:a3:22:
                    c4:ae:87:d4:fc:4a:79:90:10:cd:c5:b3:ac:7f:36:
                    27:d9:44:b0:9d:ec:56:b8:75:47:3a:fa:c8:3e:a8:
                    ab:b3:d7:92:d3:df:32:55:4b:15:a8:4f:c6:b5:7e:
                    97:6a:45:fb:c9:8a:55:3e:50:be:1a:2e:7b:85:57:
                    ac:72:dc:ed:da:8c:63:25:21:09:4e:62:26:a2:1f:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:65:23:A9:D2:19:1B:29:80:94:66:A6:75:EE:72:7F:25:30:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D659DA2ACFA11F1A16E88D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.216.0-45.201.231.255
                  45.201.240.0/20
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:01:74:7e:16:47:17:7b:83:52:5c:11:73:a4:7c:a1:9d:
         d4:26:9f:5f:22:c9:f1:ab:66:65:23:2f:71:d8:db:82:b4:3b:
         ad:6e:a9:54:62:52:ea:da:61:be:49:84:3d:63:b7:bd:3b:21:
         08:66:0e:a1:43:c3:71:57:5c:bd:4f:fd:89:e4:56:dd:27:ff:
         a8:d9:39:de:a1:c8:44:5d:6f:ba:a1:8b:87:34:95:a4:6a:ba:
         a3:dc:01:fe:4e:fb:e3:bc:fe:2d:69:4e:95:1c:23:a1:a3:f7:
         44:8a:64:99:04:50:72:d4:59:d6:f0:1a:b3:4f:57:ac:0f:3c:
         92:16:a6:3f:c3:6c:ee:86:ac:f4:57:df:56:ac:33:e9:34:f5:
         82:67:da:73:47:a0:67:08:56:93:f7:ba:97:e9:fd:31:c9:c7:
         52:08:4e:b1:ad:19:15:cf:3c:b6:32:68:b9:56:d7:61:ce:9a:
         d7:39:f4:91:d2:5f:31:40:98:5a:35:c6:7b:f3:95:20:70:9d:
         55:bc:23:18:f6:9d:67:a9:9f:18:7f:f3:ed:e7:53:dc:12:de:
         93:b3:bc:76:8a:70:12:e0:af:89:a5:b4:66:4b:3a:de:1a:0a:
         b2:96:4d:37:65:53:a0:46:4f:02:ae:30:fe:70:a1:84:ba:05:
         b6:3d:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----