Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1CA85893BD11F1B892A4B6CE1D38B0.roa
File:                     1C1CA85893BD11F1B892A4B6CE1D38B0.roa (raw, json)
Hash identifier:          k85MTMtBuEcUp5WegJTJhYTZK0XA4lIMYcRUzifgv2c=
Subject key identifier:   D6:77:AC:D7:9E:9C:88:B6:77:36:C8:4F:EB:85:AD:C5:5A:91:FE:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1CA85893BD11F1B892A4B6CE1D38B0.roa
Signing time:             Sun 09 Aug 2026 06:39:46 +0000
ROA not before:           Sun 09 Aug 2026 06:39:42 +0000
ROA not after:            Wed 16 Sep 2026 06:39:42 +0000
asID:                     51142
IP address blocks:        45.195.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117413 (0x1caa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 06:39:42 2026 GMT
            Not After : Sep 16 06:39:42 2026 GMT
        Subject: CN=6a7820b2-b51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:1a:47:2a:df:12:60:15:c1:9b:3e:99:92:
                    97:c9:d0:5c:06:cf:18:a4:23:26:74:1b:12:d4:5d:
                    16:c8:3d:27:33:cb:bc:44:55:af:8b:3a:df:6a:12:
                    7e:81:de:a1:d4:c8:58:fb:3a:ce:7e:66:24:64:2f:
                    29:04:0d:be:6b:b7:4a:d6:5f:28:e5:66:b4:eb:c7:
                    da:87:b7:92:cb:a0:b7:65:65:8e:05:24:2a:3f:63:
                    ca:97:c3:69:27:5f:ec:8b:4b:59:94:71:dc:eb:da:
                    04:1d:3c:46:bc:80:4b:ff:02:ba:35:78:4c:71:f8:
                    71:c7:b3:84:f2:d1:31:7c:42:0c:11:41:81:d2:d5:
                    bc:c5:77:8f:8f:9c:01:4a:03:5d:b4:3b:b0:42:e4:
                    e5:bd:27:8b:b2:9a:9d:28:55:0d:e7:64:65:85:45:
                    f0:ff:cd:39:b1:88:2f:dd:e9:b0:ab:18:3b:3c:7c:
                    75:7f:7d:dc:33:1d:94:47:3c:84:3e:ac:b3:d4:ad:
                    b4:c1:59:54:1a:a6:62:a4:0e:40:eb:81:7f:2d:36:
                    f1:bd:b9:ab:d3:a5:05:46:b2:d3:f2:62:b8:04:5d:
                    40:39:98:71:c9:96:44:27:62:ad:7a:92:58:e3:d6:
                    9f:cc:fd:12:bc:11:ca:39:fc:ca:d5:02:58:a2:15:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:77:AC:D7:9E:9C:88:B6:77:36:C8:4F:EB:85:AD:C5:5A:91:FE:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1CA85893BD11F1B892A4B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:2c:6f:a9:2a:ab:48:92:a1:16:4d:8b:36:aa:3a:92:6c:
         4e:1e:0d:fb:30:aa:b9:f9:77:fc:6c:c0:24:9d:81:b9:ca:57:
         a9:dc:02:30:99:51:dc:67:67:ca:b6:98:23:bd:1d:68:b7:c7:
         c9:5a:a9:5a:65:76:59:a3:a2:24:e6:2b:d4:06:fa:69:92:7e:
         62:49:7d:9e:e8:e8:fd:78:15:34:04:a8:21:92:41:2e:12:bd:
         f5:de:69:38:b4:38:29:30:15:82:0c:a9:aa:e6:fa:94:18:ff:
         fb:f2:9a:aa:c5:f2:36:1d:dc:e6:80:0a:9d:3d:c9:ed:92:15:
         0c:d0:2d:16:e8:3a:63:98:2a:d8:ed:76:b4:d2:8d:66:3b:01:
         da:af:ab:15:e1:ce:75:6f:fa:ee:46:36:b8:fe:f6:1c:33:ba:
         31:99:1d:34:74:ab:fe:c8:ae:61:3c:c6:7e:11:46:a5:4f:bd:
         d4:6f:84:90:1d:3b:50:95:1b:8f:92:51:38:40:ca:db:63:b2:
         d5:49:a9:d2:d8:1b:1a:9d:01:6c:9a:92:2a:2e:7a:b4:30:95:
         3a:b5:4f:f2:ed:06:e4:17:75:74:58:46:5f:a4:8c:a6:7a:67:
         29:97:43:68:60:dd:67:4d:6f:b9:ce:2d:08:5e:28:98:38:ef:
         02:a8:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----