Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18980E56BF0B11F19E3D14E6CE1D38B0.roa
File:                     18980E56BF0B11F19E3D14E6CE1D38B0.roa (raw, json)
Hash identifier:          ujPYvc8Pt2dqda2+JKvQ6fasEj4qgglIBastaQ8LCM4=
Subject key identifier:   EB:0F:CA:7D:8C:D8:82:60:E1:76:6E:E2:9E:2F:6A:3F:AE:61:7B:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18980E56BF0B11F19E3D14E6CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:16:21 +0000
ROA not before:           Sat 03 Oct 2026 09:16:17 +0000
ROA not after:            Tue 10 Nov 2026 09:16:17 +0000
asID:                     63139
IP address blocks:        45.197.103.0/24 maxlen: 24
                          45.197.104.0/24 maxlen: 24
                          45.197.105.0/24 maxlen: 24
                          45.197.106.0/24 maxlen: 24
                          45.197.107.0/24 maxlen: 24
                          45.197.108.0/24 maxlen: 24
                          45.197.109.0/24 maxlen: 24
                          45.197.110.0/24 maxlen: 24
                          45.197.111.0/24 maxlen: 24
                          45.197.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121413 (0x1da45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 09:16:17 2026 GMT
            Not After : Nov 10 09:16:17 2026 GMT
        Subject: CN=6ac0c7e4-68ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:b4:1d:14:1f:fb:04:d8:75:87:e4:b6:3c:
                    b4:93:8d:66:40:27:9f:b0:88:1e:5b:b2:54:b0:8a:
                    7c:e2:a4:65:a8:0c:de:07:ec:3a:6e:04:16:83:2a:
                    c4:81:aa:39:ad:f8:7f:2a:56:72:df:36:63:7a:2c:
                    34:7c:ef:d7:f0:25:3d:d7:56:16:c4:e3:e1:f3:80:
                    42:a1:83:75:1f:ee:5f:61:bc:d1:84:d0:aa:48:3d:
                    11:ce:8b:4b:55:db:49:1c:ff:2e:a6:32:f5:31:7e:
                    60:6c:1c:dc:23:0c:7a:d1:a0:7f:bc:93:b9:f6:22:
                    45:b3:e0:dd:53:70:24:0c:b6:17:57:36:e5:1f:08:
                    6b:7f:7e:ca:f0:6b:78:43:4d:39:8e:d8:28:c1:38:
                    fa:18:e5:36:26:62:24:38:64:af:8c:b7:4e:90:af:
                    1b:af:1a:e5:78:31:4d:7c:1d:bc:9f:e0:49:11:74:
                    af:11:c8:b1:5d:51:18:b6:50:86:44:6b:93:54:f8:
                    06:de:ef:b4:79:c3:25:47:6c:0f:60:6b:97:9c:0a:
                    cf:2b:a7:bf:cf:90:2a:7d:1c:5f:15:ed:93:3d:f2:
                    54:60:f1:7f:b8:24:3e:cf:94:f6:1c:bb:14:e8:c5:
                    7b:bb:37:b4:6c:eb:29:04:bf:af:22:d1:43:03:53:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:CA:7D:8C:D8:82:60:E1:76:6E:E2:9E:2F:6A:3F:AE:61:7B:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18980E56BF0B11F19E3D14E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.103.0-45.197.112.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:3f:18:22:ac:f6:34:89:eb:58:df:3d:5f:40:18:a3:fb:
         11:e4:d4:eb:b3:41:fd:a9:de:7a:7b:5a:3f:32:5b:4e:0d:6b:
         b2:90:24:92:47:77:7d:e1:6b:1f:c8:c7:1b:ac:d1:e5:cf:61:
         ab:cb:c4:9e:92:c1:b9:b7:07:e6:0d:68:b8:09:76:46:05:28:
         a1:6e:33:d5:67:63:e9:9c:bf:b3:3c:e7:40:47:59:cb:0b:06:
         5f:35:88:0a:1f:71:f0:be:a9:a7:a6:8a:62:19:3c:bc:6a:ba:
         d9:da:89:d8:d9:1a:9d:8f:17:31:1d:3e:32:81:98:45:8a:86:
         66:4d:40:55:fd:5f:c2:01:33:87:c3:7f:1d:20:59:96:e1:8f:
         b7:b4:09:79:70:b8:fc:63:d6:03:d6:d8:7a:c7:a2:3d:fc:d7:
         87:ac:1a:69:fd:83:fc:01:23:36:47:43:ea:04:44:1d:83:32:
         c5:ca:f9:48:a3:50:21:cd:51:f8:38:64:7d:53:4d:21:af:bd:
         65:97:38:54:5c:bf:1c:93:8f:52:69:ce:af:83:d2:91:6a:d4:
         91:de:b0:60:6d:57:bc:68:4a:1b:93:ce:38:04:85:9e:7a:96:
         73:be:fe:30:ac:0e:0a:d8:a4:5e:1a:47:03:8e:e8:ab:20:6f:
         5b:29:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----