Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96804A3EB56711F1AB27C8F4CE1D38B0.roa
File:                     96804A3EB56711F1AB27C8F4CE1D38B0.roa (raw, json)
Hash identifier:          djaw6vonjFojwihdXygJGl/cZS4pz94Vb0PyZzN92Go=
Subject key identifier:   D1:F5:27:47:42:71:18:6E:FC:EB:1C:D5:5D:8E:6F:AC:9A:14:62:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96804A3EB56711F1AB27C8F4CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 02:53:14 +0000
ROA not before:           Mon 21 Sep 2026 02:53:09 +0000
ROA not after:            Wed 08 Sep 2027 02:53:09 +0000
asID:                     18233
IP address blocks:        45.199.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120645 (0x1d745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 02:53:09 2026 GMT
            Not After : Sep  8 02:53:09 2027 GMT
        Subject: CN=6ab09c1a-5bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:d7:83:fb:87:c8:60:75:3d:43:71:5b:b5:
                    e5:63:59:ce:d5:d5:81:d0:fc:b8:ac:17:3e:5e:78:
                    65:74:f3:d0:e9:9f:c3:e1:d1:e7:64:9d:c7:ff:18:
                    4d:d3:e0:68:78:08:a7:66:91:92:10:0c:0f:43:e9:
                    e5:76:f3:56:d2:72:e8:67:fb:ba:8c:6d:5d:83:7f:
                    dc:51:3d:3e:c2:69:7b:cd:a4:12:0d:4d:46:dd:82:
                    aa:21:e8:73:23:ce:86:a6:06:3a:c9:fc:04:f9:d4:
                    55:a5:21:a2:92:ac:49:14:d2:5d:9a:98:b7:f0:5d:
                    13:fa:f4:42:0c:63:fd:b1:19:a6:c5:9d:6e:59:ec:
                    53:60:53:4e:a0:37:84:56:0e:56:41:bf:b5:2f:32:
                    ff:26:b1:95:8c:f9:b9:28:c0:76:ae:ff:ed:34:1a:
                    91:52:9d:1c:8d:55:62:05:97:52:4f:93:75:80:5c:
                    f6:a6:de:cb:ea:ff:c7:90:63:92:9f:f2:05:e8:02:
                    cf:40:be:2b:91:d7:42:5f:a0:c6:fc:49:91:23:42:
                    1a:10:e1:a8:cc:56:c0:f2:ca:b9:e1:31:75:55:dd:
                    33:4c:59:ee:81:2f:57:94:c3:ea:dc:00:da:33:8f:
                    34:43:a4:af:51:f0:de:2a:0a:2f:21:dd:de:97:d4:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:27:47:42:71:18:6E:FC:EB:1C:D5:5D:8E:6F:AC:9A:14:62:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96804A3EB56711F1AB27C8F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:90:32:21:9b:6e:c0:fb:69:1c:3b:d3:0b:ff:f6:a3:1c:
         d2:ae:dc:e4:46:49:e5:ba:51:4b:26:36:c5:ae:e1:2d:e6:31:
         82:03:ce:c5:44:23:66:0f:e7:ba:be:8f:39:94:bd:b5:ea:b2:
         91:87:24:fa:99:2c:56:db:51:62:05:39:ea:4b:37:0b:7b:79:
         b7:2b:fc:5b:57:ef:a8:35:3e:31:8b:00:d7:d6:c2:92:fb:cf:
         e7:bb:01:ae:65:75:32:d6:14:20:29:ed:87:c6:68:6e:99:f6:
         43:ce:0a:8b:79:78:a0:e5:09:ce:17:23:77:91:51:16:ff:fa:
         77:21:a7:d9:31:53:ab:7e:0a:29:eb:9d:33:da:f4:29:42:2a:
         5c:dc:92:8b:99:aa:5c:44:7a:46:31:88:db:47:37:c4:79:71:
         c1:eb:3a:31:8f:80:d5:0a:50:f2:26:d3:23:8d:21:71:26:0b:
         af:d5:7b:b6:b2:4a:4a:d0:4c:20:5e:bb:c4:12:46:e7:6d:e0:
         1c:bd:aa:6a:da:25:a5:a4:a6:9a:23:3e:b2:c5:8d:76:e9:f7:
         68:ac:da:5e:51:86:26:84:27:0e:6d:46:8c:58:4a:ec:b5:47:
         ab:48:84:4a:85:7a:6a:5b:66:b1:f9:65:10:35:b0:7a:46:ad:
         0e:58:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----