Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69E69F2AB26311F1BFE7DDA0CE1D38B0.roa
File:                     69E69F2AB26311F1BFE7DDA0CE1D38B0.roa (raw, json)
Hash identifier:          jFLhN4s+mnK4bvlMRawhGQPtJLJMY36QpDtFbMYJv+Q=
Subject key identifier:   DD:18:A3:03:4D:BA:CF:68:93:24:97:65:1E:F4:83:DB:FB:15:A5:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69E69F2AB26311F1BFE7DDA0CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:45:48 +0000
ROA not before:           Thu 17 Sep 2026 06:45:44 +0000
ROA not after:            Sun 27 Sep 2026 06:45:44 +0000
asID:                     197574
IP address blocks:        45.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120492 (0x1d6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 06:45:44 2026 GMT
            Not After : Sep 27 06:45:44 2026 GMT
        Subject: CN=6aab8c9c-4174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:4f:6a:a8:91:c2:e6:2d:d4:4c:32:46:d3:
                    d1:2b:f5:c0:e5:8a:fa:29:72:9b:73:d6:91:0f:b5:
                    84:6a:4e:96:f6:0f:4d:6c:a4:c6:79:c8:7c:15:54:
                    14:18:ff:86:47:8e:c1:0c:8a:95:49:2f:5d:2b:e8:
                    f6:1a:53:eb:f1:48:a9:70:7c:b8:20:18:77:d6:2e:
                    94:7c:75:75:54:d0:f9:34:9b:49:c5:e1:30:f8:a9:
                    5b:f7:ae:16:e7:10:50:01:c9:67:1e:e0:89:ec:9b:
                    d8:ca:91:11:1a:3d:7c:3c:96:e6:e6:58:92:41:7b:
                    a0:0d:32:6c:04:6a:b7:8a:13:0b:97:6a:df:e5:26:
                    85:6b:bf:c2:b6:28:e2:e3:2f:ae:14:fe:2d:30:17:
                    19:f2:2b:d4:3b:8f:2b:2b:bb:ed:f6:80:79:e2:c3:
                    8a:93:3b:f7:d9:09:02:94:d7:01:bd:df:30:8e:2d:
                    86:4b:d1:e1:e5:f3:94:6a:30:28:9b:1c:c8:10:f1:
                    7a:ce:ca:09:bd:ae:c0:0d:70:a3:75:df:f9:a6:07:
                    94:90:ab:a5:bc:b4:63:15:77:95:2c:64:d3:b2:7a:
                    55:7b:d9:c8:b8:50:56:3f:77:19:03:ec:9a:55:b8:
                    b9:96:61:cf:87:20:81:8e:38:9a:85:ec:c7:69:32:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:A3:03:4D:BA:CF:68:93:24:97:65:1E:F4:83:DB:FB:15:A5:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69E69F2AB26311F1BFE7DDA0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:89:4f:3f:ac:8d:77:8e:55:3d:7c:00:81:9b:c4:49:d8:
         17:41:40:75:92:a4:36:af:fe:c0:44:2f:58:c2:53:05:84:ed:
         ad:fe:a2:69:31:45:38:ba:9f:20:7d:4d:89:2e:05:34:88:4b:
         f0:66:dc:f1:75:ac:5c:67:b3:e5:40:9b:47:07:5e:9a:95:ce:
         4c:1b:a2:36:1a:38:79:fc:94:d5:cc:6a:af:fb:75:50:63:4f:
         98:63:e4:45:36:fb:6a:8e:54:4e:b3:00:11:56:59:3d:5e:a4:
         cc:dd:a2:3e:bc:97:dc:73:7f:14:ec:33:1e:be:86:59:76:17:
         09:9c:40:28:74:18:85:ba:48:9e:72:ac:63:df:a7:f1:a6:fb:
         60:82:c6:3b:ad:a2:6f:b8:97:00:60:f5:a6:b3:cd:81:92:d2:
         8f:de:c2:46:98:12:4c:3e:8b:5d:f7:d2:09:46:fe:94:ab:c2:
         d2:b8:4f:c1:bc:5f:e3:ff:3d:56:73:4f:23:7d:54:ee:8c:e5:
         d7:1a:0f:0c:c9:ed:99:45:cf:16:a4:ce:8c:8a:16:7f:11:05:
         c2:e4:32:69:b8:7a:60:b8:eb:9a:6f:f7:d2:65:ab:c2:a1:73:
         18:7f:88:40:bc:42:da:ac:94:c3:fd:1c:ce:8d:ff:e8:2e:42:
         17:88:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----