Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25E95DB0BF3011F19D9767D1CE1D38B0.roa
File:                     25E95DB0BF3011F19D9767D1CE1D38B0.roa (raw, json)
Hash identifier:          0TNGD9qpdkff+XiYJN+OfC8R1FlpUfAYSE37Y1eKM2M=
Subject key identifier:   0D:91:F6:41:90:CC:4D:62:75:A7:65:9D:65:9E:A3:44:13:1E:99:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25E95DB0BF3011F19D9767D1CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 13:41:34 +0000
ROA not before:           Sat 03 Oct 2026 13:41:30 +0000
ROA not after:            Sun 22 Nov 2026 13:41:30 +0000
asID:                     40779
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121473 (0x1da81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 13:41:30 2026 GMT
            Not After : Nov 22 13:41:30 2026 GMT
        Subject: CN=6ac1060e-e8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:f2:88:d9:01:d9:bc:05:9c:25:2e:20:c7:
                    37:92:5c:52:1a:cd:47:25:5b:8f:8f:aa:8d:99:a8:
                    25:fb:18:56:78:29:d4:c6:b0:17:92:fd:f3:19:f4:
                    82:8f:65:7c:65:db:e3:ad:b8:52:81:f4:3e:47:4c:
                    6d:af:0c:cb:02:5a:64:a6:8b:55:5b:9d:68:c7:60:
                    00:1b:89:38:6d:36:4b:df:e5:cc:68:01:fd:b1:4a:
                    e4:44:ab:fe:2e:b0:f8:8d:87:ae:58:ca:27:df:53:
                    de:96:92:23:a3:e4:4d:6a:29:fb:91:6b:00:a7:cb:
                    9b:9c:f0:bc:bc:6c:ab:86:36:b6:72:a0:0e:a4:b5:
                    04:f6:79:a8:8a:8e:8e:7d:aa:94:39:30:66:3f:f8:
                    30:33:4d:b2:fb:27:a8:70:ba:0c:cf:4e:32:89:81:
                    11:0d:b5:7f:fd:c1:68:35:bc:69:f9:69:3e:af:80:
                    ea:9b:00:03:74:e6:2a:e8:6f:32:78:4c:cb:b0:14:
                    1c:78:7d:77:49:ec:51:ab:f7:ef:3a:7e:53:ff:c6:
                    62:34:97:68:dd:16:b7:c6:62:cd:53:d3:e8:44:f1:
                    4a:06:9d:ce:4a:32:b1:8e:17:76:d6:f1:94:94:74:
                    ed:30:ec:ec:c7:06:78:3f:9a:45:b6:a3:81:6b:6d:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:F6:41:90:CC:4D:62:75:A7:65:9D:65:9E:A3:44:13:1E:99:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25E95DB0BF3011F19D9767D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:63:1e:2a:fa:06:39:c9:3e:82:85:9a:b5:16:2f:81:14:56:
         35:4a:74:c4:75:5c:5d:21:fe:2f:ec:ac:0e:c3:39:49:72:5c:
         1c:50:72:9d:00:09:cc:a8:26:25:a3:78:9e:66:26:78:f4:07:
         e6:2c:25:a2:32:af:28:25:21:35:39:3e:72:7e:e5:c7:6a:31:
         0a:75:1b:03:63:a0:f7:ed:ca:d3:d1:83:2d:9e:d8:a0:8c:6a:
         54:2d:8e:f6:c8:c8:e2:06:ad:2a:f4:63:c9:6e:ab:3d:7c:09:
         12:d7:47:d8:12:a6:80:89:b3:aa:7f:7b:2b:c2:a7:99:76:cd:
         be:5a:96:69:c7:a9:b8:0d:cc:bd:14:1d:39:80:40:21:d4:3e:
         7a:46:9e:1c:60:d1:09:7a:6c:6e:28:ce:32:1a:7b:e5:c0:38:
         cf:74:ee:d2:fb:a0:e5:1d:77:ae:ef:68:00:3a:af:82:f0:19:
         95:a6:eb:fd:e6:48:a6:a4:57:69:12:46:56:94:c5:d1:e1:ed:
         1f:0f:a3:3c:d9:46:cc:78:0d:83:48:5b:5f:f6:4e:7e:56:e5:
         fe:5d:fd:f8:60:3e:1a:e4:87:c4:c1:49:b9:62:98:c2:68:bd:
         23:8f:7b:b8:48:9a:f9:7f:89:74:e6:ca:7d:38:bb:f0:8f:29:
         8e:cb:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----