Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A8EDEF2965211F1922F2FD1CE1D38B0.roa
File:                     0A8EDEF2965211F1922F2FD1CE1D38B0.roa (raw, json)
Hash identifier:          W1owhavMjbrpnscBIpp0tqDmG3E04ZHEhw/ijDhnMEM=
Subject key identifier:   C3:47:0B:23:EF:EE:F7:77:5A:03:6B:09:86:6B:13:87:DC:A1:1E:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A8EDEF2965211F1922F2FD1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:30:54 +0000
ROA not before:           Wed 12 Aug 2026 13:30:50 +0000
ROA not after:            Sun 12 Aug 2029 13:30:50 +0000
asID:                     17561
IP address blocks:        45.204.213.0/24 maxlen: 24
                          45.204.214.0/24 maxlen: 24
                          45.204.215.0/24 maxlen: 24
                          45.204.216.0/24 maxlen: 24
                          45.204.217.0/24 maxlen: 24
                          45.204.218.0/24 maxlen: 24
                          45.204.219.0/24 maxlen: 24
                          45.204.220.0/24 maxlen: 24
                          45.204.221.0/24 maxlen: 24
                          45.204.222.0/24 maxlen: 24
                          45.204.223.0/24 maxlen: 24
                          45.204.240.0/24 maxlen: 24
                          45.204.241.0/24 maxlen: 24
                          45.204.242.0/24 maxlen: 24
                          45.204.243.0/24 maxlen: 24
                          45.204.244.0/24 maxlen: 24
                          45.204.245.0/24 maxlen: 24
                          45.204.246.0/24 maxlen: 24
                          45.204.247.0/24 maxlen: 24
                          45.204.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117782 (0x1cc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 13:30:50 2026 GMT
            Not After : Aug 12 13:30:50 2029 GMT
        Subject: CN=6a7c758e-06a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:55:d7:20:57:53:62:54:95:23:e8:96:c5:
                    4d:3d:fd:a2:e5:f7:8e:16:1e:9f:f2:0c:80:7f:f7:
                    c2:9e:c1:6c:09:41:a2:9f:60:46:d6:6d:75:21:d9:
                    74:17:1b:c9:ac:19:e8:a6:b1:1a:15:be:c0:da:ec:
                    3d:05:10:65:52:a9:3c:c9:e3:bc:b5:c9:53:63:63:
                    ac:d3:1d:16:ef:e9:4b:46:08:bc:0c:eb:7e:d7:57:
                    3f:e1:34:b2:30:6f:14:ec:a1:51:dc:db:8f:16:0e:
                    3d:f9:68:4a:ad:e3:f4:e9:d2:87:18:22:09:17:8c:
                    75:61:74:c3:9b:f8:3c:4f:96:ff:44:27:4f:d4:fe:
                    a1:42:a6:d9:7a:30:bc:c2:10:8c:5e:3c:5a:b2:9b:
                    27:33:df:01:43:b4:e6:1c:1d:fe:fb:fc:20:48:f8:
                    e2:6d:d1:a7:0c:ce:6a:38:57:d9:9c:4d:30:11:56:
                    b3:97:7e:b6:2e:a5:73:55:02:eb:a6:1d:b9:eb:db:
                    b2:0b:8c:0f:b3:8b:33:8b:91:44:f2:51:70:0d:d2:
                    14:ed:24:27:67:90:81:47:71:8a:78:e4:7a:a7:62:
                    10:b3:38:5c:7c:50:80:1b:b5:53:6b:b5:38:4b:d6:
                    7d:a5:cc:f0:17:41:65:54:8d:17:fa:0e:c0:d8:0b:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:0B:23:EF:EE:F7:77:5A:03:6B:09:86:6B:13:87:DC:A1:1E:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A8EDEF2965211F1922F2FD1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.213.0-45.204.223.255
                  45.204.240.0/21
                  45.204.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:61:b5:29:a4:a0:cc:65:c4:d4:3b:bb:62:f6:4e:0d:4f:
         ff:b6:be:f3:5d:f3:d0:0b:23:3f:cd:0a:61:2d:1f:28:e7:55:
         be:5a:23:94:ba:d5:e0:f0:a8:d9:91:0f:f5:4f:d8:0b:3a:08:
         31:69:36:66:d0:1a:43:c9:3f:af:30:ff:c1:4e:2f:c5:04:1a:
         fb:65:a0:e2:c9:c4:db:b5:bf:c3:96:b9:87:95:1c:67:d0:e5:
         5c:12:60:af:e0:a0:51:a5:a8:87:46:c6:98:ce:bf:d5:c5:08:
         fb:f7:6f:13:23:48:74:6c:11:4c:d0:0d:66:20:65:39:72:fd:
         fd:59:23:a5:4c:47:61:cf:3f:94:67:b3:1f:25:d3:d6:70:58:
         6e:1e:8b:bb:99:8b:16:d1:77:b3:16:d4:89:d8:5c:40:52:71:
         53:84:e2:5e:28:2e:d7:b5:70:20:2b:a2:1c:be:2d:9d:d3:c4:
         cf:e7:10:b9:c3:da:b9:7c:1d:b5:8d:30:5e:67:60:7e:45:0d:
         74:a0:9d:94:3a:98:f0:d7:38:b1:88:e0:33:a4:66:3c:d5:95:
         e0:f6:26:78:41:4e:88:71:4f:be:a3:3b:ac:14:0e:da:67:1a:
         c3:8e:f5:a7:de:85:76:ac:e2:39:a9:ba:cf:88:66:22:43:eb:
         6e:be:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----