Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16ACAD20989811F1868050A2CE1D38B0.roa
File:                     16ACAD20989811F1868050A2CE1D38B0.roa (raw, json)
Hash identifier:          +6jbq4XoxV/epNk93BTZ8eGGwU0ZOEm26uj/RsAldzQ=
Subject key identifier:   A6:B5:90:99:4D:65:ED:89:1C:4C:CF:BC:E4:16:13:F8:1C:D3:3D:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16ACAD20989811F1868050A2CE1D38B0.roa
Signing time:             Sat 15 Aug 2026 10:57:21 +0000
ROA not before:           Sat 15 Aug 2026 10:57:17 +0000
ROA not after:            Tue 22 Sep 2026 10:57:17 +0000
asID:                     397071
IP address blocks:        45.195.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117996 (0x1ccec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 10:57:17 2026 GMT
            Not After : Sep 22 10:57:17 2026 GMT
        Subject: CN=6a804611-5cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:43:ff:1c:39:3d:e2:b8:d6:a1:8c:dd:9c:
                    bb:92:b6:93:38:16:a5:ce:59:31:b3:23:93:a8:3f:
                    8f:ed:72:ad:54:b7:3b:d5:c0:1a:a8:61:ff:c6:a3:
                    4f:9c:38:32:aa:ba:3e:77:77:2a:df:35:c8:15:c1:
                    96:d0:a1:35:40:4b:33:9a:75:30:8f:6a:1f:55:93:
                    e1:8f:c2:2a:1d:da:ec:ec:08:81:f9:c7:d9:84:bf:
                    44:82:1c:0b:4c:b5:0c:3a:ab:29:8d:b6:eb:24:ac:
                    a2:c4:c1:b2:6f:17:68:56:e1:7a:9e:b7:c7:8d:02:
                    f9:9a:43:e5:41:e7:ac:56:82:9b:49:42:b0:57:4b:
                    b2:46:9e:8f:9d:d0:1e:8b:89:4f:38:79:22:ed:1c:
                    10:7c:95:bd:7e:b9:a4:af:d8:8d:7e:8e:a5:87:63:
                    1c:92:10:9b:40:ca:e3:7c:d4:21:a4:d4:31:58:c4:
                    37:c1:af:5f:26:38:49:8d:e3:ee:15:06:40:7e:99:
                    b1:2f:9c:2f:a5:df:10:66:8c:10:fc:25:00:f9:35:
                    6b:c0:e3:e0:ae:65:b9:12:fb:bf:0c:3c:a6:e2:e0:
                    75:34:f8:32:51:59:d9:75:d5:6c:72:4b:e0:e0:03:
                    ec:fa:98:5e:0f:53:bf:4e:50:04:c1:31:83:d2:3a:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:90:99:4D:65:ED:89:1C:4C:CF:BC:E4:16:13:F8:1C:D3:3D:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16ACAD20989811F1868050A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:4a:36:bd:b2:05:21:1f:28:4e:15:f7:18:af:90:3f:0d:
         55:17:17:2c:3a:d1:84:52:21:0f:50:73:52:74:10:51:99:e3:
         41:43:e6:65:80:bb:9e:91:7d:40:67:9b:84:d5:3e:c1:71:d2:
         e1:99:4f:56:bc:34:4c:a7:95:57:2d:91:fe:ee:4d:95:19:a9:
         9f:b8:4e:17:88:f9:ed:88:12:26:ad:4d:49:d9:2e:79:df:17:
         bf:fd:53:be:35:dc:0a:9b:5c:28:4f:a1:77:cb:9a:a0:14:81:
         9b:a3:36:75:4e:dd:86:33:91:9c:67:cb:c2:1a:88:93:23:0a:
         9f:bf:25:93:32:33:ba:c8:25:3d:41:26:4a:c5:91:14:b9:28:
         5e:31:a6:68:13:48:41:ed:e4:9e:09:19:7a:ee:ce:39:a3:c3:
         66:b3:66:35:41:aa:97:fe:d4:ce:41:de:28:07:fb:cc:18:c2:
         8f:0e:46:b0:30:92:05:08:7b:b2:d7:1b:80:67:55:ac:65:29:
         9c:6a:19:92:13:cc:4e:42:8b:77:89:b5:eb:f6:cf:61:85:d2:
         72:2c:82:cf:0e:7a:a5:27:eb:41:a2:56:7e:1d:1b:5c:d1:6d:
         0d:bc:b9:5b:05:50:dc:ff:e7:8e:55:03:b2:2e:68:92:5d:d8:
         65:03:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----