Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A29986C00411F1AE65DDB7CE1D38B0.roa
File:                     21A29986C00411F1AE65DDB7CE1D38B0.roa (raw, json)
Hash identifier:          1fITJGX9MBIbgKykO/OGHON8ALpfux6OiURW2RyITsw=
Subject key identifier:   02:7D:4D:45:5F:12:3E:AA:69:7A:DD:71:51:1D:FF:E8:C6:55:96:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A29986C00411F1AE65DDB7CE1D38B0.roa
Signing time:             Sun 04 Oct 2026 14:59:00 +0000
ROA not before:           Sun 04 Oct 2026 14:58:56 +0000
ROA not after:            Mon 12 Oct 2026 14:58:56 +0000
asID:                     137535
IP address blocks:        45.194.19.0/24 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 14:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121617 (0x1db11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  4 14:58:56 2026 GMT
            Not After : Oct 12 14:58:56 2026 GMT
        Subject: CN=6ac269b4-5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:cf:05:df:c0:c8:2a:a3:51:56:12:3f:4c:
                    ad:43:03:09:6a:4a:f4:df:28:51:a8:78:d2:53:38:
                    b9:95:32:fd:7e:25:93:94:62:65:1a:33:ee:3b:06:
                    f1:e2:b3:32:59:30:11:3f:81:5b:f8:d6:be:86:e6:
                    98:af:60:29:67:b8:52:bf:88:8f:4f:41:ec:ac:c8:
                    e3:d8:7a:e6:cf:b0:b9:5b:7a:6e:34:c4:ca:d2:dd:
                    7f:39:be:73:c8:0c:5c:2b:87:ba:b0:70:68:16:44:
                    5e:62:d8:fa:fa:75:b9:5e:2c:55:35:f8:a7:f1:92:
                    41:ff:86:1e:70:f5:79:1d:d2:26:a8:e2:8e:9b:7d:
                    42:43:18:5b:c3:ab:07:a1:65:78:77:75:94:02:96:
                    5f:35:ac:fb:4e:ce:b1:6c:af:53:c6:fd:54:c5:4a:
                    0a:f6:82:59:49:23:73:76:9f:12:80:c2:68:30:82:
                    08:bc:54:9b:a5:e4:9c:c5:5c:fe:ac:77:47:a8:c0:
                    4d:db:41:07:cb:cc:73:98:37:76:3f:2f:52:d7:de:
                    ec:7a:b6:df:f4:9f:db:61:07:9c:2e:00:64:f6:6d:
                    83:16:b0:c3:8d:4c:63:3b:e1:7b:c5:02:f7:f6:1f:
                    b9:01:e7:90:d6:8b:29:29:9b:ce:71:cd:f9:c5:c3:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:4D:45:5F:12:3E:AA:69:7A:DD:71:51:1D:FF:E8:C6:55:96:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A29986C00411F1AE65DDB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.19.0-45.194.22.255

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:7b:47:6d:70:fd:71:50:4d:2c:ec:2c:6a:5e:de:9e:e8:
         04:44:15:6c:e0:d2:e7:c0:d7:1b:99:24:36:5b:88:b5:28:8e:
         13:e7:cf:26:d6:5e:7b:20:88:ed:0b:fe:c5:21:de:1c:1b:92:
         1f:2d:fe:29:06:4f:9c:ad:0d:7a:7c:a5:b2:92:37:90:79:eb:
         96:13:58:75:20:74:56:87:eb:79:3f:13:c9:a8:d5:71:b9:c2:
         87:4d:44:bb:db:37:56:00:71:bf:8a:27:84:7a:67:d5:c9:34:
         db:c7:da:40:1d:2c:d4:be:0e:c0:e5:f3:3b:17:5a:f5:09:27:
         73:73:15:25:79:c8:66:64:39:f8:41:0f:83:b0:93:14:5a:be:
         c2:9f:7e:40:77:50:28:fd:19:9e:a1:7b:76:16:2e:a5:83:6d:
         50:2f:e4:cc:c8:86:14:ef:16:e7:56:37:1f:ee:d3:71:28:36:
         78:0a:63:99:1b:c8:5e:4e:08:c0:2c:92:b1:9e:a8:0e:cc:b5:
         7d:e9:18:9e:b8:ce:22:5d:ce:2b:61:56:d1:c4:81:ce:54:24:
         8a:96:0b:70:98:1e:eb:86:5b:af:29:b3:d8:ea:14:b8:7b:da:
         49:d6:2b:92:b7:9b:aa:ed:4b:c2:8c:99:37:14:ba:97:46:8d:
         80:56:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----