Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0DBED58B3F711F1A4DBA311CF1D38B0.roa
File:                     D0DBED58B3F711F1A4DBA311CF1D38B0.roa (raw, json)
Hash identifier:          rLawVDZ12gUA5cQ95IYBXo+WktHfr5GP8/eSRsFWu1Y=
Subject key identifier:   0D:7D:4E:D4:AA:A3:84:82:A3:1B:E2:A8:52:8B:16:88:BD:07:71:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0DBED58B3F711F1A4DBA311CF1D38B0.roa
Signing time:             Sat 19 Sep 2026 07:00:37 +0000
ROA not before:           Sat 19 Sep 2026 07:00:33 +0000
ROA not after:            Tue 27 Oct 2026 07:00:33 +0000
asID:                     134824
IP address blocks:        45.194.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120557 (0x1d6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 19 07:00:33 2026 GMT
            Not After : Oct 27 07:00:33 2026 GMT
        Subject: CN=6aae3315-621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:0e:b9:78:0a:72:ef:22:ad:2b:f7:ee:7c:
                    14:d5:da:15:ba:4f:b8:91:e7:e1:be:b8:52:63:50:
                    74:5e:17:31:85:3a:02:10:05:0b:5f:d8:5d:36:e9:
                    5d:07:de:16:6d:84:d5:bb:55:37:49:49:96:28:3d:
                    fe:4f:9d:a4:db:d3:0d:f1:0b:f0:cd:a2:7f:b1:2b:
                    74:a7:ba:ce:10:96:c6:31:20:25:0d:5e:4d:3d:ac:
                    66:78:25:79:d6:6a:ab:37:98:06:30:8f:27:c4:12:
                    fe:49:0c:e6:99:16:23:5a:5b:ec:3d:e7:40:1c:b5:
                    b1:84:b9:40:7c:f3:8f:4f:52:6b:7d:ec:d1:cf:2a:
                    dc:36:1b:fa:a7:d6:c7:f2:1e:ec:21:4a:06:fc:7a:
                    4a:51:8f:2e:36:7a:12:5f:70:79:4b:ef:e8:7e:a5:
                    ec:e1:19:50:c1:84:e7:af:71:58:ff:5d:fe:80:bd:
                    01:c3:4b:f9:cb:db:70:77:68:f5:78:04:06:6d:44:
                    cc:ef:3b:b2:a8:6a:a4:76:2b:da:f5:26:1a:ea:7c:
                    29:9d:01:f6:97:ab:44:c8:88:28:ea:6d:78:38:f2:
                    ab:ad:f9:52:bc:69:d8:e6:6b:78:1d:0f:52:82:25:
                    1b:0c:7a:a1:04:26:c4:94:21:ac:aa:e1:72:84:48:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:4E:D4:AA:A3:84:82:A3:1B:E2:A8:52:8B:16:88:BD:07:71:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0DBED58B3F711F1A4DBA311CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:c8:14:49:39:17:e0:fa:15:3c:36:a5:5c:6b:ac:04:0a:
         a6:8a:ac:48:7b:fe:01:32:69:54:ae:b9:36:24:af:ba:7a:80:
         25:e9:65:22:72:14:0f:88:02:be:eb:26:5e:69:3f:fa:3b:6a:
         4d:ef:03:e7:2f:72:16:dc:78:d0:5e:7c:ae:50:f6:8a:d3:00:
         31:05:d2:77:26:19:fb:ce:df:1f:56:59:89:f5:f4:97:07:6e:
         67:54:76:9f:4a:18:6e:96:dc:14:26:29:d9:6a:84:11:e1:7c:
         e7:e0:e1:67:7f:7e:4d:bb:c0:b6:94:19:e2:87:2c:f4:12:38:
         38:fa:70:fc:42:fc:ee:d4:e2:37:02:cb:63:5c:55:e7:f3:15:
         75:c0:88:bd:a0:bf:d4:b9:1b:15:89:62:de:94:97:44:56:f8:
         5b:6a:1f:e0:61:93:30:06:94:45:cc:30:6b:00:ab:9d:b8:e2:
         68:c8:cd:c3:f0:d8:28:9d:68:cb:2c:8a:be:b4:35:85:7f:01:
         ba:fc:7e:33:cb:63:a0:0d:e4:7f:3f:49:1a:5d:4f:94:1f:d5:
         5e:57:e7:f7:9d:9d:00:e8:79:45:68:92:95:04:b3:4c:d0:d9:
         1a:09:d1:78:4d:b4:b5:40:3b:ef:42:e8:6f:32:cc:db:b1:d6:
         95:8c:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----