Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32FF94FEBE2911F1AA9379A7CE1D38B0.roa
File:                     32FF94FEBE2911F1AA9379A7CE1D38B0.roa (raw, json)
Hash identifier:          mD3PaRXgNCDstb/vtnN8unP59ZvSZmFoP3qWU7bn1jQ=
Subject key identifier:   BD:F8:DF:56:48:B6:D3:2D:92:CA:77:E3:BB:63:40:9B:67:55:1C:96
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32FF94FEBE2911F1AA9379A7CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:19:19 +0000
ROA not before:           Fri 02 Oct 2026 06:19:15 +0000
ROA not after:            Tue 03 Nov 2026 06:19:15 +0000
asID:                     213795
IP address blocks:        45.198.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121298 (0x1d9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 06:19:15 2026 GMT
            Not After : Nov  3 06:19:15 2026 GMT
        Subject: CN=6abf4ce7-235a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:21:82:30:64:84:b1:10:f9:9a:6b:3f:6d:
                    79:c0:e3:bb:d5:ba:93:d3:5d:bc:35:41:ed:38:d9:
                    6f:90:cf:a8:75:89:c6:be:6b:c1:5c:70:5e:6a:05:
                    cb:c9:cd:91:01:25:8f:aa:02:a9:69:41:f1:a4:bc:
                    61:8d:ca:f3:17:4a:3e:62:77:5f:0f:28:cc:6b:57:
                    23:ee:ae:0e:25:9f:28:21:a2:9e:e4:e7:13:a0:a0:
                    3d:9e:be:4b:5c:05:ff:34:a4:85:d4:f4:89:b7:a3:
                    cc:86:1c:81:58:b7:e2:72:71:e8:17:0e:b0:dd:a9:
                    64:72:34:f6:cf:4f:dd:e7:6d:d6:bc:93:3a:de:4e:
                    14:15:3f:84:82:4d:ea:7a:46:71:9a:9a:28:b7:d0:
                    c2:9b:53:70:17:09:b2:3a:22:30:5e:08:e0:87:9d:
                    31:6a:c1:25:2e:c9:75:d3:44:47:7a:69:fe:5c:78:
                    e7:d1:7e:cf:ab:02:56:e6:26:15:18:30:4c:b3:6f:
                    c1:4c:94:d9:5a:bc:bd:04:4c:73:84:90:05:fd:9d:
                    38:67:4f:d6:b8:e4:64:4c:ef:4f:4f:5b:e8:c6:a4:
                    ee:48:54:92:94:5f:f8:f4:7f:33:d8:f3:ea:91:43:
                    ed:5a:23:12:a7:0a:b0:4f:40:07:27:71:12:07:8e:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:DF:56:48:B6:D3:2D:92:CA:77:E3:BB:63:40:9B:67:55:1C:96
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32FF94FEBE2911F1AA9379A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:85:57:7e:df:06:95:a3:3d:e3:42:6c:5a:f1:d3:a1:82:01:
         4d:8b:72:c2:93:e8:76:53:75:0e:b9:d1:cd:42:cb:88:b0:62:
         ff:2b:3e:a0:28:c5:d1:68:dd:99:40:8d:e0:a3:7b:e5:8a:bf:
         69:cc:9d:c4:7f:aa:cc:af:85:2a:b9:35:e1:80:cd:8c:9c:e2:
         16:f7:ba:b0:8d:4f:c5:c2:76:59:42:4f:ed:f0:31:bb:18:91:
         26:ea:6f:4c:76:cb:d4:f9:5c:be:43:33:01:9f:00:1d:51:9f:
         ab:e0:97:ac:90:77:33:30:2d:76:d1:8c:63:b2:5f:e9:b4:36:
         c7:39:96:72:83:76:3e:ec:4d:26:9f:f0:04:29:f8:8e:aa:70:
         fa:d1:c1:d0:54:8e:45:d7:c7:7d:7f:2c:81:6d:84:c0:23:7f:
         2f:60:ad:66:5f:a9:1f:92:f0:2c:d3:3a:7e:1d:75:3b:0d:04:
         11:49:2b:ce:93:c3:a1:fd:0d:b4:2c:7b:f4:47:cd:b5:6b:81:
         d9:47:30:42:62:b0:7d:6c:69:78:c8:f6:8c:ff:e0:ee:60:b0:
         2c:dc:30:9d:77:9b:06:72:25:29:ef:6b:8f:9f:54:27:68:27:
         f5:9c:ba:a6:b2:4c:7b:b5:d1:7a:1f:67:41:97:54:a5:05:2a:
         21:c3:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----