Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF5093FA6FA611F088325499DAE4EC9C.roa
File:                     FF5093FA6FA611F088325499DAE4EC9C.roa (raw, json)
Hash identifier:          QwHv4iP1RFSqkbYLZK6jUqFZbDDugXlcCDUQAmIqACI=
Subject key identifier:   7D:B6:6B:39:84:AE:71:DF:A1:24:08:C7:3B:70:17:D5:2E:14:EC:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016890
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF5093FA6FA611F088325499DAE4EC9C.roa
Signing time:             Sat 02 Aug 2025 13:45:49 +0000
ROA not before:           Sat 02 Aug 2025 13:45:44 +0000
ROA not after:            Sun 07 Sep 2025 13:45:44 +0000
asID:                     399989
IP address blocks:        45.196.32.0/22 maxlen: 24
                          45.196.40.0/22 maxlen: 24
                          45.196.48.0/22 maxlen: 24
                          45.196.52.0/22 maxlen: 24
                          45.196.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92304 (0x16890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 13:45:44 2025 GMT
            Not After : Sep  7 13:45:44 2025 GMT
        Subject: CN=688e168d-6049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:d6:6c:b8:ed:a7:5f:60:64:1e:33:02:44:
                    7c:c4:7e:a0:a9:ee:df:63:ba:21:c5:9c:fe:c5:a1:
                    68:db:df:91:b9:77:f8:96:d6:71:dd:8e:c6:55:bf:
                    98:ed:14:c1:1f:ff:19:53:45:4b:4b:4f:46:91:62:
                    f2:7a:82:92:c4:72:5a:8e:91:86:5f:19:f8:5d:17:
                    43:02:1a:ec:e4:fd:68:5c:a8:ba:5f:9a:da:d6:7e:
                    fa:4e:e0:44:72:dc:e7:62:2b:1a:1c:e8:31:4a:53:
                    84:14:88:0e:47:f2:6e:fc:18:2e:76:0a:07:b7:8f:
                    70:42:6e:ba:63:d3:fe:17:9f:21:2a:35:72:f2:5a:
                    8b:d4:fa:1a:78:b4:0d:43:55:77:42:f7:76:a3:e6:
                    43:11:49:71:73:d6:21:b4:37:f5:27:b6:5d:2d:56:
                    95:cd:01:d4:22:e8:26:62:de:fb:12:58:36:fe:d5:
                    2f:5c:e1:e9:70:79:d5:b3:ce:84:91:c8:18:a7:70:
                    4d:23:62:4f:d4:26:3c:d1:a9:90:a3:96:12:e3:7d:
                    88:b3:bc:2d:76:43:8e:ca:6d:d0:45:04:0a:a1:28:
                    44:42:ec:56:3d:65:89:e9:fb:4f:03:9a:89:ba:ec:
                    21:f2:b8:4a:1d:0c:70:cf:1d:9d:ec:b0:9e:8d:99:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:6B:39:84:AE:71:DF:A1:24:08:C7:3B:70:17:D5:2E:14:EC:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF5093FA6FA611F088325499DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.32.0/22
                  45.196.40.0/22
                  45.196.48.0/21
                  45.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:9a:bc:60:02:34:b9:9d:b0:de:99:fa:53:ca:ec:99:70:
         1a:8a:f3:5b:de:b8:de:fc:0c:67:96:d7:0e:aa:d1:01:ef:c2:
         d9:f8:8c:5b:c2:19:69:6c:e1:43:41:82:98:53:77:23:bc:63:
         d9:69:1f:d2:4b:69:59:73:46:ed:b3:e7:5b:bd:6e:ec:d1:4b:
         10:ed:0f:4e:9e:1e:e1:1e:3c:53:e4:5f:48:13:d1:6b:71:f1:
         5d:eb:f3:32:c6:4d:0a:dc:7f:29:27:bf:b7:bb:00:e0:ce:1d:
         51:1e:e6:fe:86:73:36:12:64:67:cf:29:13:ef:84:15:9b:d3:
         58:e3:14:fc:23:0c:e9:84:73:41:85:e7:09:eb:b5:77:92:4f:
         a5:2b:d0:d6:5a:d1:ae:5a:19:a5:e4:e5:31:72:57:bf:80:37:
         c7:d6:17:1d:12:e9:5f:90:a9:22:f5:24:be:a4:c6:28:95:96:
         91:cf:5b:57:d0:c3:dd:f1:7b:63:ca:34:50:4d:6f:82:d7:be:
         c5:78:a6:a7:f9:66:1d:0e:a6:22:b3:fa:b4:58:f2:6d:7b:61:
         5d:ce:3f:a3:f0:61:40:f7:00:82:5d:85:2a:75:96:34:55:61:
         1c:42:2a:43:32:32:21:fd:e4:61:36:68:8b:9a:7f:e0:a5:18:
         01:51:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:59 2025 by rpki-client