Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D459406CD1F11F1914310D8CE1D38B0.roa
File:                     1D459406CD1F11F1914310D8CE1D38B0.roa (raw, json)
Hash identifier:          xeSdx0jPYrOpxiEzbevMzD0c4UPRA9UsMju4qq4kiMo=
Subject key identifier:   F7:9E:17:28:3C:2F:F2:67:76:16:61:ED:3E:90:8D:8C:93:F4:DE:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DF1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D459406CD1F11F1914310D8CE1D38B0.roa
Signing time:             Wed 21 Oct 2026 07:14:55 +0000
ROA not before:           Wed 21 Oct 2026 07:14:50 +0000
ROA not after:            Sat 31 Oct 2026 07:14:50 +0000
asID:                     198566
IP address blocks:        45.198.169.0/24 maxlen: 24
                          45.198.177.0/24 maxlen: 24
                          45.198.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122653 (0x1df1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 21 07:14:50 2026 GMT
            Not After : Oct 31 07:14:50 2026 GMT
        Subject: CN=6ad8666f-738e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:6b:99:3c:f9:ab:e9:71:16:a9:50:5a:c9:
                    04:02:b6:0f:3e:cf:68:9e:40:db:de:51:04:d6:31:
                    2d:c9:bf:cc:c0:e0:36:63:55:77:f4:22:fe:e0:97:
                    e9:9e:2a:f2:fc:26:1c:8d:05:d7:24:12:c3:b4:13:
                    2f:35:b5:a9:6e:58:65:b4:b9:96:91:78:36:08:13:
                    27:a0:c9:a4:ad:7f:62:79:78:48:9f:2e:9c:c8:69:
                    03:4c:94:7a:d0:cf:e0:11:75:2d:b0:5e:95:8e:26:
                    08:12:2b:0f:99:6f:a8:68:5b:44:57:73:84:5d:20:
                    e0:90:94:7d:a6:7e:ec:8b:ac:b1:9a:74:d7:d3:5a:
                    91:49:4c:4c:64:d9:c8:00:63:30:01:a7:f0:ac:aa:
                    b5:ee:23:e5:53:86:f4:ae:e8:f3:8f:13:2c:ae:dc:
                    00:c7:75:7c:99:ad:bf:44:ee:d8:5a:7d:16:c8:8a:
                    e4:01:46:d0:f3:a0:c7:f2:03:f7:f6:8f:1a:0f:be:
                    50:68:6f:e9:1b:26:a5:d9:ad:7a:54:83:50:b5:8a:
                    f1:65:85:71:21:77:64:97:c0:5e:3d:f3:b4:cd:0a:
                    d3:12:93:02:b7:15:ae:5b:25:d9:e1:8d:80:57:76:
                    17:34:b3:fd:ad:8e:79:f9:f6:1d:eb:f1:e8:ca:59:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9E:17:28:3C:2F:F2:67:76:16:61:ED:3E:90:8D:8C:93:F4:DE:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D459406CD1F11F1914310D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.169.0/24
                  45.198.177.0/24
                  45.198.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:d2:b6:75:d9:58:e8:04:a3:bc:20:0e:77:cf:48:af:44:
         5c:86:be:6b:3f:5a:83:24:53:12:ce:db:e7:47:3d:67:45:84:
         0a:c9:6f:32:60:e5:92:41:30:3d:bb:f5:bf:c2:d0:f3:60:8a:
         67:00:ec:4b:cd:46:5f:88:b6:be:53:ce:29:4c:27:f9:c0:c5:
         d4:6c:06:6b:de:20:58:1b:29:e1:18:8a:04:62:56:7e:19:29:
         77:17:f2:28:f4:56:96:fd:23:1f:e0:33:86:7d:da:05:c6:4d:
         fd:a9:2b:f0:1a:b6:b9:f3:51:4a:46:57:77:34:e3:38:0c:ca:
         48:a9:99:cb:5a:3e:15:74:44:bf:8f:40:45:7f:40:cf:3c:f2:
         f2:1a:23:f9:73:99:b8:5c:05:9c:31:a1:fe:b2:ae:51:07:f6:
         7e:cd:17:cb:df:8f:48:a9:d7:bc:38:ba:d7:93:df:07:97:f0:
         e4:f7:65:8f:df:eb:84:80:c1:6d:ab:62:b5:6a:20:58:41:81:
         84:13:f6:55:a2:75:d6:a3:c5:c3:93:3d:de:ab:84:12:53:56:
         1c:24:15:29:5c:fc:9e:66:ff:81:bb:1c:51:07:0d:2d:12:5f:
         66:a9:a1:d4:8e:25:dd:11:ce:29:46:30:69:76:bf:a8:a9:1b:
         5c:41:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----