Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160DBC8E4011F1A4F846EDCE1D38B0.roa
File:                     04160DBC8E4011F1A4F846EDCE1D38B0.roa (raw, json)
Hash identifier:          Bfvje8exxfRLoj4Kv4pGSp7XiyX4wq2IhNpAgjT4cUw=
Subject key identifier:   54:4E:54:60:E6:81:C7:03:80:F9:2D:AE:DD:9D:33:0B:D5:5C:48:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C913
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160DBC8E4011F1A4F846EDCE1D38B0.roa
Signing time:             Sun 02 Aug 2026 07:01:43 +0000
ROA not before:           Sun 02 Aug 2026 07:01:39 +0000
ROA not after:            Wed 09 Sep 2026 07:01:39 +0000
asID:                     151407
IP address blocks:        45.207.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117011 (0x1c913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 07:01:39 2026 GMT
            Not After : Sep  9 07:01:39 2026 GMT
        Subject: CN=6a6eeb56-328f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:e0:58:ed:18:c9:77:1d:84:9b:6f:a3:02:
                    c0:b6:05:38:41:1b:42:d3:60:f8:25:dd:4d:46:4a:
                    44:b7:91:74:14:ff:53:58:2b:75:16:1c:f3:50:56:
                    7c:02:35:c7:bd:74:d3:8a:7c:cc:64:1a:99:8b:94:
                    04:10:85:fd:18:b1:e4:87:c0:71:fc:01:ee:b7:5d:
                    f5:c1:ae:ba:a5:3a:f8:35:27:c8:9d:18:a4:f9:49:
                    b4:79:1f:30:50:92:46:80:fa:cf:58:13:cf:39:ef:
                    c2:f4:9c:f3:6b:10:19:f1:19:38:01:75:13:b7:67:
                    4e:56:96:ff:76:8f:2e:cc:87:eb:ee:94:1f:9e:65:
                    af:8c:e7:48:15:50:d0:c8:24:14:67:88:36:1a:10:
                    d2:51:fb:83:b6:a8:c2:da:2c:88:3e:f7:14:56:3b:
                    48:d7:78:bf:33:63:ad:d4:e5:57:e6:70:1c:12:e9:
                    ad:66:c3:7d:40:7e:4e:c8:c9:af:ef:a5:90:48:cb:
                    f2:ee:54:b7:81:3a:64:af:d2:e3:74:e5:d2:2f:03:
                    94:95:7c:f1:3b:c9:1b:26:41:d1:42:f5:c0:e6:cd:
                    6a:90:69:2f:5e:e4:af:fd:ae:79:b3:7d:5d:5f:5d:
                    b2:3f:1d:06:c6:c7:41:1c:f9:f0:30:f9:65:34:4c:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:54:60:E6:81:C7:03:80:F9:2D:AE:DD:9D:33:0B:D5:5C:48:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160DBC8E4011F1A4F846EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:be:6f:6e:0d:04:30:39:1d:82:64:78:72:ae:63:d3:7b:1f:
         67:d0:61:9c:05:c4:37:cd:c7:af:51:ee:4b:a4:93:51:6b:18:
         d4:59:43:f1:ee:0b:bb:7b:6f:85:87:47:aa:40:72:c9:84:05:
         c1:d1:b3:72:dd:84:cb:4f:b2:77:aa:dd:19:20:7e:25:ad:93:
         4d:d2:b9:f8:30:67:9d:7f:5a:1c:cd:3d:69:22:ca:c2:3c:f1:
         22:37:b7:a5:c4:b8:14:d6:cf:c0:df:07:22:3b:4b:cb:6f:ba:
         ed:82:5c:62:8c:1e:ec:5a:76:27:f6:2f:a8:59:02:a0:77:79:
         76:43:1b:72:3d:34:56:29:d5:b8:74:f7:90:26:05:b6:34:92:
         4d:fd:f3:b9:df:2c:f1:6e:0e:47:37:43:3f:47:3b:2e:f5:39:
         e3:10:a8:09:01:cc:4e:42:97:91:96:a5:6d:05:9a:94:2c:a0:
         54:45:5f:14:c2:dc:e3:16:18:d7:33:1e:c0:c8:4b:e0:22:6f:
         39:99:a0:25:84:48:e6:47:fa:d0:20:af:7c:5c:00:7b:f9:05:
         6a:43:fe:c3:2c:90:0f:2a:6a:08:bb:c2:0e:43:9c:be:98:c4:
         cc:af:1b:d1:27:7e:32:0e:86:b6:5e:21:09:b7:8a:62:cb:fa:
         1e:73:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----