Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F61440ADD711F1947EAF15CF1D38B0.roa
File:                     69F61440ADD711F1947EAF15CF1D38B0.roa (raw, json)
Hash identifier:          lAgKGEljpe+X0nu6O9kBc37IS0wn/F7MDPAfDSWSm4U=
Subject key identifier:   C6:BD:47:25:E1:53:E6:A2:E8:91:41:7E:06:1B:3A:C2:39:2D:53:32
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D569
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F61440ADD711F1947EAF15CF1D38B0.roa
Signing time:             Fri 11 Sep 2026 11:53:34 +0000
ROA not before:           Fri 11 Sep 2026 11:53:29 +0000
ROA not after:            Sat 10 Oct 2026 11:53:29 +0000
asID:                     401615
IP address blocks:        45.192.196.0/22 maxlen: 24
                          45.192.200.0/22 maxlen: 24
                          45.192.240.0/24 maxlen: 24
                          45.192.241.0/24 maxlen: 24
                          45.192.242.0/23 maxlen: 24
                          45.196.218.0/23 maxlen: 24
                          45.196.234.0/23 maxlen: 24
                          45.196.234.0/24 maxlen: 24
                          45.196.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120169 (0x1d569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 11:53:29 2026 GMT
            Not After : Oct 10 11:53:29 2026 GMT
        Subject: CN=6aa3ebbd-a073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:68:c7:b3:a7:dd:8d:29:5b:f5:97:74:b2:
                    d6:90:54:af:18:7d:af:2d:8f:29:b4:67:d7:58:2d:
                    63:db:ed:9f:c1:e8:94:67:8d:ed:1f:f9:2f:4e:4d:
                    b6:ab:8b:31:f4:66:09:cd:9f:7e:cd:59:03:11:20:
                    96:d1:04:5d:f8:3e:69:6f:6b:76:fc:2c:ac:0b:71:
                    0d:fa:6a:d8:b6:8e:b2:03:a8:22:bf:ee:ae:a9:e5:
                    32:2f:16:1f:18:7c:dd:a3:0e:6f:00:ad:1a:dd:4b:
                    e7:ff:7f:64:24:60:2e:83:89:04:22:b2:20:ef:a2:
                    ae:21:2d:f0:0c:8d:f7:47:ff:24:1c:b3:49:03:e4:
                    8a:7f:13:21:58:dd:ea:d6:0c:59:a6:ea:fe:7c:d1:
                    db:3d:67:8e:60:83:69:09:68:74:02:3f:ad:e0:a8:
                    79:4a:52:1b:6d:3e:59:20:d3:9d:68:c3:40:96:c8:
                    d5:01:2d:6f:a4:7d:c8:2f:4e:bb:e9:4f:2c:35:7e:
                    40:53:fa:b3:a6:06:e8:45:e6:d9:93:37:29:b5:22:
                    d0:5c:9c:7e:2d:8e:13:9c:c1:97:bb:95:10:3d:c8:
                    9d:c2:36:20:44:9d:60:57:5f:7e:05:b7:bc:27:38:
                    cd:05:fb:33:20:dd:3f:95:fb:25:d4:e3:b2:5b:e0:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:47:25:E1:53:E6:A2:E8:91:41:7E:06:1B:3A:C2:39:2D:53:32
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F61440ADD711F1947EAF15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.196.0-45.192.203.255
                  45.192.240.0/22
                  45.196.218.0/23
                  45.196.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:b8:92:3d:80:c6:e8:53:15:ab:b1:df:c2:d2:e8:e8:a1:
         2c:35:cc:af:c8:f2:d1:cd:1c:b5:14:7d:5b:c2:41:e2:07:d9:
         91:14:94:e9:b7:23:c5:52:e2:f3:fc:af:de:91:74:76:67:45:
         c8:45:b8:0f:a4:f0:80:5c:e0:a4:de:48:33:e9:02:89:99:91:
         b9:b2:6c:3c:ea:d8:2b:cc:65:82:1c:cd:61:95:9b:fe:e0:2d:
         96:38:d8:31:59:53:6a:6a:b9:96:74:6d:eb:d0:05:aa:b1:d4:
         2e:bd:97:df:d0:30:64:48:a3:54:65:43:88:f0:6c:e4:f7:de:
         de:cd:bb:8f:3a:ed:63:82:9f:09:9e:73:b3:ea:6d:13:44:27:
         39:2d:04:d7:2e:c7:ac:6a:f4:86:37:ed:d5:f4:f0:8e:76:18:
         64:a4:ef:98:16:e1:5d:4b:9d:ea:8c:1d:8d:78:2b:f8:c2:29:
         77:a4:0e:90:71:3e:f3:19:6b:6e:84:c5:b3:7d:56:3a:61:ee:
         1b:f9:4a:99:90:65:dd:44:ed:b5:a1:e9:8e:d8:8f:00:ec:7b:
         1c:f9:ec:e5:cb:4c:8d:a9:61:db:91:8f:1f:3e:b9:34:f9:63:
         28:ee:03:a2:2a:42:99:35:78:17:e5:18:a2:e8:5c:ed:b7:46:
         cc:80:80:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----