Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1242B826D1911F0B394CF83DAE4EC9C.roa
File:                     F1242B826D1911F0B394CF83DAE4EC9C.roa (raw, json)
Hash identifier:          MS7+PVCgvog0fbmVaCW5Ek51tXvkrUSQWJ6gMTPjGqw=
Subject key identifier:   7E:AC:00:5E:34:3D:D7:BF:B0:4C:4C:C6:0E:C3:DF:EF:2F:0B:21:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01682A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1242B826D1911F0B394CF83DAE4EC9C.roa
Signing time:             Wed 30 Jul 2025 07:51:04 +0000
ROA not before:           Wed 30 Jul 2025 07:50:59 +0000
ROA not after:            Sat 16 Aug 2025 07:50:59 +0000
asID:                     401783
IP address blocks:        45.192.114.0/24 maxlen: 24
                          45.192.116.0/23 maxlen: 24
                          45.192.118.0/23 maxlen: 24
                          45.192.227.0/24 maxlen: 24
                          45.192.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92202 (0x1682a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 07:50:59 2025 GMT
            Not After : Aug 16 07:50:59 2025 GMT
        Subject: CN=6889cee8-a3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:89:68:be:79:78:83:75:99:0e:f5:30:f2:
                    2d:1a:0c:90:54:37:ac:88:53:c7:dd:61:ee:1a:07:
                    19:12:78:96:dd:c2:49:a0:76:33:ca:81:07:5a:f8:
                    48:33:76:8d:81:d5:7a:b8:ce:d3:0e:b8:ae:01:53:
                    6d:e0:d2:ac:3b:c4:99:cf:e0:46:36:41:84:db:af:
                    fc:71:d2:d3:b1:f5:b6:05:d7:e5:4c:58:0b:20:25:
                    15:d7:d2:ae:2f:30:87:83:2b:95:70:cd:68:a4:de:
                    e8:6f:e5:28:00:4c:68:a3:d6:82:11:ad:c0:85:20:
                    4a:65:ae:18:88:a4:52:44:ce:40:3d:50:ab:15:0f:
                    78:9a:86:e9:68:3e:7d:e1:03:29:51:45:03:f4:1a:
                    29:83:b3:93:65:25:5c:3a:87:a0:35:cb:d9:a8:f6:
                    59:eb:b3:2b:d2:63:a0:e5:54:ca:79:4c:aa:e6:ce:
                    7e:d2:aa:de:7f:7e:8d:56:f7:e8:22:2c:a6:31:65:
                    c1:5a:cb:14:04:c3:75:99:26:f1:49:8a:a6:6d:e2:
                    92:09:b3:99:f6:45:de:46:ad:00:0d:3c:dd:b9:ec:
                    17:01:13:56:6f:b9:4c:82:48:8e:8f:5c:c1:fa:14:
                    a9:37:38:0e:0b:e4:64:ad:93:e4:65:d2:f6:1d:5b:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:00:5E:34:3D:D7:BF:B0:4C:4C:C6:0E:C3:DF:EF:2F:0B:21:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1242B826D1911F0B394CF83DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.114.0/24
                  45.192.116.0/22
                  45.192.227.0/24
                  45.192.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:d1:5d:c8:34:6f:e7:d5:aa:a0:c8:62:03:f3:f1:d9:f5:
         a5:d1:2d:72:db:b6:1c:4e:97:34:d3:d7:38:cb:f7:ed:be:3f:
         7b:69:1f:f8:09:9f:be:e1:e7:3c:e9:11:f8:c5:89:6c:ba:63:
         d3:6b:65:ff:3b:25:90:f2:22:d1:e6:60:40:35:3c:ac:d8:a6:
         54:7f:0e:ab:64:b2:3b:33:2b:f3:e7:77:b7:cd:46:fa:0e:b5:
         ea:28:60:ca:45:9a:ba:c2:20:55:06:72:e1:30:79:4e:fb:a5:
         1f:cf:c1:20:50:50:a5:6c:52:a9:83:92:67:84:c4:42:da:dd:
         5a:0f:37:8e:63:03:f7:1a:f2:fa:39:44:82:e7:c8:a7:79:77:
         2e:3e:30:83:d3:a6:d9:5b:a6:49:3c:79:69:9a:1f:7b:7a:8b:
         ea:83:2a:ea:bb:77:60:dc:fe:e0:72:78:e6:26:c6:39:69:42:
         75:04:85:b5:91:a4:96:62:81:58:fd:76:ad:6a:25:e9:06:f5:
         43:24:d2:ba:26:0d:50:f7:98:ef:76:4d:e3:2a:dc:ea:18:b1:
         6e:2c:84:64:17:e2:ee:1b:c9:77:94:29:bb:0f:b9:4e:16:da:
         ee:c9:90:62:d2:78:ac:af:81:da:8e:6b:c4:22:a0:92:b5:fa:
         6e:ec:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:12 2025 by rpki-client