Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B886FF80A90D11F19DBFFA14CF1D38B0.roa
File:                     B886FF80A90D11F19DBFFA14CF1D38B0.roa (raw, json)
Hash identifier:          1jKT3HR8bsVlOJzA8VP+NuVC7KOZ9rTRNEv2kNbOmsA=
Subject key identifier:   11:B7:B6:E1:96:C7:1C:5D:4A:62:72:D2:6D:14:CF:9F:86:34:30:CD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D37B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B886FF80A90D11F19DBFFA14CF1D38B0.roa
Signing time:             Sat 05 Sep 2026 09:39:42 +0000
ROA not before:           Sat 05 Sep 2026 09:39:38 +0000
ROA not after:            Tue 13 Oct 2026 09:39:38 +0000
asID:                     401362
IP address blocks:        45.202.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119675 (0x1d37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 09:39:38 2026 GMT
            Not After : Oct 13 09:39:38 2026 GMT
        Subject: CN=6a9be35e-26fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:9d:29:70:c2:ba:dd:60:a0:70:d9:39:ee:
                    02:1d:02:d2:5c:98:9f:6e:95:9f:3f:2e:bc:6f:ce:
                    ea:26:e5:27:27:e0:94:49:9d:6a:6e:13:79:cc:86:
                    be:73:ff:a3:6a:57:0c:84:45:9a:b0:ed:0d:08:14:
                    c0:07:20:b1:72:f8:b9:05:44:4c:a3:8e:7a:d8:87:
                    9f:bb:2b:87:d1:8b:7d:dc:40:45:9f:06:6f:c5:9b:
                    66:31:c6:00:5e:27:b9:4e:99:03:c7:a4:c5:a0:94:
                    a2:a2:e1:9c:3f:7a:55:48:df:0d:22:71:04:fb:92:
                    4c:b0:a9:06:78:4e:9d:4d:fd:f2:bb:20:69:a0:6c:
                    d1:b2:2d:8c:ba:be:66:c3:d4:2a:cc:b6:00:11:56:
                    6b:16:c8:e8:87:b5:76:fe:ec:ec:a7:5f:dd:74:ae:
                    1f:7a:4a:d9:fb:37:d9:3d:c2:17:91:44:29:60:be:
                    1b:8d:ff:b3:18:99:a7:57:c5:89:b1:50:f0:7a:f2:
                    7d:cb:5b:5e:aa:1e:7a:b7:d2:1a:c0:15:4c:20:c9:
                    0d:52:fd:4e:f1:42:a9:08:e2:fc:6d:3f:12:0a:61:
                    ad:b0:e9:85:a1:ce:34:63:20:98:76:a2:f8:13:97:
                    c0:e1:17:88:09:cf:99:08:bd:d2:9d:6a:26:8e:ff:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:B6:E1:96:C7:1C:5D:4A:62:72:D2:6D:14:CF:9F:86:34:30:CD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B886FF80A90D11F19DBFFA14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:ba:f7:f8:22:e8:8f:75:89:88:9f:d0:e2:ac:44:2f:fd:
         a6:12:2a:49:bf:8e:6d:31:e6:87:ef:7d:d4:7d:80:50:14:d0:
         35:cd:ef:9b:28:11:eb:56:2e:a0:25:89:dd:91:9c:34:d6:1e:
         a2:68:d7:e2:7c:c3:a0:5d:d9:29:8d:ca:38:13:56:b3:76:e7:
         9f:36:72:1b:50:c9:f2:1f:94:78:1e:20:17:a1:b4:c0:a5:42:
         2a:f9:59:60:c9:19:c1:10:97:83:de:09:16:9c:0e:41:5a:fa:
         3b:cb:4d:4d:1b:dd:b2:83:6b:b7:c0:35:6a:4f:57:d9:b5:46:
         49:e2:8b:46:17:b0:ed:fc:97:72:51:17:16:99:ba:2b:43:31:
         37:2a:ba:6b:07:54:39:5d:d1:59:81:41:69:fd:fd:77:8e:2b:
         eb:d8:e9:d3:70:04:63:40:ce:be:75:2d:ae:86:51:ef:8c:19:
         7b:dc:9f:52:7d:3c:a5:ca:e1:11:8c:a0:e1:8d:0c:be:4f:6f:
         3d:94:34:8e:e4:db:64:a5:f8:66:36:96:cb:09:18:c7:da:4b:
         f1:be:4e:c4:9e:2d:8e:e8:da:8a:db:3d:9a:3d:21:af:2a:d8:
         47:1f:08:e1:4f:99:c3:9b:4d:ac:c4:66:17:66:41:d4:4d:4f:
         a9:fa:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----