Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DFDCBE8A38F11F190E9C5D7CE1D38B0.roa
File:                     1DFDCBE8A38F11F190E9C5D7CE1D38B0.roa (raw, json)
Hash identifier:          Z+rq2xT+ogb6YP1BCU0qfZydvr+iEY4Z8cgj7bOokkc=
Subject key identifier:   D7:4D:4E:E8:1A:FC:15:A0:F1:A5:E5:EF:45:1B:9F:A8:9F:04:0F:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DFDCBE8A38F11F190E9C5D7CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 09:50:51 +0000
ROA not before:           Sat 29 Aug 2026 09:50:47 +0000
ROA not after:            Mon 05 Oct 2026 09:50:47 +0000
asID:                     21859
IP address blocks:        45.200.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119274 (0x1d1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 29 09:50:47 2026 GMT
            Not After : Oct  5 09:50:47 2026 GMT
        Subject: CN=6a92ab7b-b6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:26:a9:b1:61:38:aa:a3:81:a5:0e:00:ce:
                    25:9a:77:34:bb:ea:18:64:02:c9:81:17:f4:39:bc:
                    ba:c9:29:13:89:ab:42:fc:0e:ce:8f:98:67:e9:07:
                    cb:b6:96:e2:09:bd:a9:72:39:62:31:c7:80:53:61:
                    a0:bc:df:75:3e:2d:22:86:fa:e9:73:18:08:fb:e1:
                    92:c3:35:48:a8:95:88:61:90:98:1b:7f:34:27:ff:
                    31:67:95:2a:22:b8:f8:aa:e3:ca:16:68:2f:c1:d7:
                    07:9d:fd:3f:09:9a:37:92:fb:5e:70:6f:52:e2:0e:
                    50:99:2c:8e:ef:6d:54:3d:8b:60:49:70:a7:f6:fb:
                    de:a3:0d:6e:bf:8c:43:b4:96:3b:44:14:a5:d3:37:
                    27:f7:e4:ea:f3:81:c1:80:04:86:3a:43:7c:bb:80:
                    0e:3b:18:6a:e0:0b:de:67:11:99:60:88:1d:3f:92:
                    d3:bc:dc:82:b7:a9:87:26:ae:50:7a:e8:d7:7f:32:
                    d5:df:87:2d:b0:8f:2d:5a:5e:b7:a5:16:c0:58:fc:
                    45:d1:fd:3d:22:8c:3b:44:5c:d0:08:f6:d5:31:c3:
                    c5:a8:cc:0f:0d:c2:d3:c8:a1:dd:98:30:c3:d0:3d:
                    16:ea:c9:bf:84:8a:06:f6:02:3a:ca:cc:90:96:dd:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:4E:E8:1A:FC:15:A0:F1:A5:E5:EF:45:1B:9F:A8:9F:04:0F:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DFDCBE8A38F11F190E9C5D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:6a:97:c0:25:11:bb:75:b5:88:f3:21:41:31:07:db:13:
         35:8f:5e:1e:fb:80:29:e8:c5:d7:04:2f:97:79:de:68:fa:e0:
         79:10:f4:09:cb:be:7e:d4:d4:e6:29:ed:14:78:34:7d:ec:e6:
         8d:6e:89:e6:53:4f:6b:19:55:e2:c6:80:b8:ad:99:36:60:87:
         74:3f:6b:e0:20:87:d9:3c:25:8c:de:05:5f:22:10:30:9b:37:
         77:ff:75:26:04:e9:1b:57:7f:44:b6:7c:01:e1:3b:89:4f:63:
         25:d3:b5:ce:76:a3:d9:cd:ca:c4:e9:4c:22:ad:8d:8c:ff:65:
         4d:dd:7c:ab:91:4e:bf:25:54:48:c4:eb:92:b2:a0:9d:82:12:
         07:ae:d9:33:9d:a6:d2:03:bd:6d:81:85:16:13:b9:f2:54:de:
         2a:e4:8d:3e:03:0d:a0:41:71:7b:34:ff:a9:df:8b:c4:e2:9a:
         a3:a9:8e:5a:0c:18:b7:1c:c7:4e:7d:5a:dd:37:2c:3c:40:73:
         25:57:cc:b6:5a:94:81:89:55:3c:ff:1d:c9:ac:51:80:d0:59:
         c2:99:bd:69:68:9e:62:bf:61:d0:03:96:a5:5e:c5:f8:91:f5:
         6e:2b:33:e7:6e:7c:0a:d1:f3:76:60:cc:2d:1d:fe:18:56:5f:
         e4:2c:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----