Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70314450AB5311F1B7F3D3D9CE1D38B0.roa
File:                     70314450AB5311F1B7F3D3D9CE1D38B0.roa (raw, json)
Hash identifier:          9tOr87G9b4kobPZ8ZuQbYGW58wLjaDpeWH5tcthTXTY=
Subject key identifier:   54:AC:07:11:09:F2:35:D8:C2:B6:96:58:9B:F2:AD:AB:2C:97:2E:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70314450AB5311F1B7F3D3D9CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 07:03:48 +0000
ROA not before:           Tue 08 Sep 2026 07:03:44 +0000
ROA not after:            Tue 13 Oct 2026 07:03:44 +0000
asID:                     8796
IP address blocks:        45.205.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119757 (0x1d3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 07:03:44 2026 GMT
            Not After : Oct 13 07:03:44 2026 GMT
        Subject: CN=6a9fb354-4cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:d0:f8:b7:e1:5c:11:5b:28:2b:54:a3:47:
                    c9:e9:27:82:e1:43:7b:ee:63:2c:46:d9:a7:18:d2:
                    1e:ca:4d:46:3d:f7:03:02:26:3f:bd:48:8e:70:62:
                    fe:63:60:4c:7e:d2:55:8d:16:ae:63:a5:ad:5b:f5:
                    91:75:09:c2:7c:52:b9:ae:d0:e4:32:5a:3c:09:de:
                    8c:58:62:e3:ab:a2:a6:4d:5f:ba:94:4d:8a:29:34:
                    d5:e9:d8:8c:b4:52:a7:2a:c2:a9:36:bc:8c:a0:2b:
                    6c:49:3d:ee:42:ac:72:c3:ea:0f:7b:91:87:89:0c:
                    a1:44:f3:ff:4e:70:cd:5e:59:01:f3:bc:70:dd:36:
                    a9:a1:7a:72:ca:4e:48:53:dd:4e:24:2f:06:03:14:
                    fa:d8:1f:0a:02:f8:2b:ef:c7:43:0b:bb:e8:7a:63:
                    31:2a:49:d9:b6:78:e2:35:8c:f4:1c:04:b4:51:be:
                    07:e9:52:32:b2:e6:f8:07:4e:7e:78:61:de:aa:31:
                    00:e2:1b:4b:13:cf:de:b1:2c:b1:32:34:ca:c4:41:
                    c1:9d:20:b8:68:00:6c:b6:2f:85:6e:86:bc:67:a8:
                    e4:6e:ad:e8:cf:12:49:f1:93:8a:ca:3b:da:a0:20:
                    9d:78:ae:76:26:ac:4f:73:5a:e3:29:f4:6c:99:ae:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:07:11:09:F2:35:D8:C2:B6:96:58:9B:F2:AD:AB:2C:97:2E:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70314450AB5311F1B7F3D3D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:9e:85:43:f4:05:4d:3e:06:c7:a1:16:92:c8:22:7d:12:
         73:b5:14:78:3f:14:28:c5:5d:57:ef:6c:8a:53:c7:05:a3:bf:
         c5:f4:66:ed:cb:6b:9d:af:86:5e:43:a1:ad:ef:e0:26:c0:de:
         1e:f6:11:3c:25:69:6b:89:e1:2d:75:8e:03:08:d9:2b:13:a7:
         b8:e9:98:35:dc:71:09:15:d6:ad:0b:ec:fc:c9:33:1e:a3:ee:
         a9:88:7e:1d:a0:35:06:8e:32:06:26:b1:83:99:b1:9d:fe:1c:
         bc:ca:31:ec:8a:2d:78:3c:e8:da:ce:1d:49:92:68:83:95:ad:
         61:f3:86:ba:50:f0:b7:c6:16:b9:17:c2:be:e6:0d:fa:1b:f5:
         4a:39:cc:9c:a6:ab:40:da:a4:b1:90:d0:b4:95:d4:22:89:f8:
         53:1f:97:87:76:63:4a:73:6e:95:3b:78:2e:14:92:60:7e:08:
         58:53:66:95:d0:4b:0a:9a:4e:41:d1:de:e4:c9:ce:2f:0b:c7:
         ff:ef:b0:02:42:2e:64:e8:14:20:cc:ac:3f:f3:fe:c7:6c:a1:
         53:2f:56:0b:40:7b:06:01:bf:5f:f8:cf:d8:6a:ed:1b:02:08:
         70:04:70:08:b4:90:a6:c1:61:ec:2f:21:87:99:f4:63:b3:6f:
         cc:56:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----