Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335C45F6A2E411F180C77FCACE1D38B0.roa
File:                     335C45F6A2E411F180C77FCACE1D38B0.roa (raw, json)
Hash identifier:          GAp41vW6l+PSVjeYYx5vc72M9Bp4nFFMKvaXAf46GvY=
Subject key identifier:   77:FB:F8:4C:3A:96:8B:D9:62:69:48:8E:19:77:74:59:1C:F4:15:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D191
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335C45F6A2E411F180C77FCACE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:27:23 +0000
ROA not before:           Fri 28 Aug 2026 13:27:18 +0000
ROA not after:            Sat 04 Sep 2027 13:27:18 +0000
asID:                     398704
IP address blocks:        45.202.216.0/21 maxlen: 24
                          45.202.216.0/24 maxlen: 24
                          45.202.217.0/24 maxlen: 24
                          45.202.218.0/24 maxlen: 24
                          45.202.219.0/24 maxlen: 24
                          45.202.220.0/24 maxlen: 24
                          45.202.221.0/24 maxlen: 24
                          45.202.222.0/24 maxlen: 24
                          45.202.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119185 (0x1d191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 13:27:18 2026 GMT
            Not After : Sep  4 13:27:18 2027 GMT
        Subject: CN=6a918cba-4880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:9b:e3:de:8d:d7:8e:07:bc:df:02:cd:ad:
                    63:cd:95:11:1a:b2:cc:ce:ce:0e:52:80:87:1f:a4:
                    6d:f9:0d:97:65:85:22:91:3a:27:d4:1c:3b:68:da:
                    1c:69:b3:d1:92:4d:20:9a:2a:b9:ac:04:95:14:f9:
                    75:16:32:22:27:b0:44:53:a4:33:82:f3:7e:a6:97:
                    23:38:da:98:97:29:8d:6c:80:0b:50:11:34:f9:3d:
                    c5:94:ab:8f:08:46:78:27:53:90:47:69:7e:99:fc:
                    93:c1:e0:37:29:da:74:96:b0:de:68:2f:9c:47:8b:
                    0e:9c:13:69:56:01:71:95:76:34:eb:f7:78:fc:1d:
                    6a:81:47:12:ba:c1:ae:8d:1d:e8:51:14:41:96:70:
                    9e:62:e8:f3:18:7c:fe:86:fa:a6:05:b3:cc:be:d2:
                    57:e0:bc:2d:52:4f:f8:41:e5:ea:ab:43:66:4a:c6:
                    23:27:21:c9:15:a6:80:d1:5e:ac:ce:fb:48:b8:56:
                    8d:83:0f:d8:f7:5b:4c:ce:6c:01:e3:68:a8:d2:85:
                    46:3e:c7:6e:98:34:3a:19:71:7a:58:3b:bd:a3:45:
                    81:88:08:48:ed:e2:2c:70:6b:c7:1e:5e:fa:ef:e3:
                    be:4d:d6:f9:10:a5:c1:98:d7:f6:3a:a9:3f:3e:a5:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:F8:4C:3A:96:8B:D9:62:69:48:8E:19:77:74:59:1C:F4:15:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335C45F6A2E411F180C77FCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:40:0e:52:8b:d4:e8:e0:fb:d5:be:0d:43:7b:ac:18:84:
         8c:95:ad:b4:60:1e:40:4b:a5:c6:b0:87:28:4d:5a:84:97:e7:
         99:74:bf:c8:bf:64:61:07:40:8f:e7:c4:1f:2b:b4:75:a8:1e:
         fd:13:11:05:3b:c2:30:58:4a:1e:bc:0e:5d:79:2a:aa:1f:b1:
         9e:59:e2:ac:06:cf:d2:c1:95:20:e7:31:60:74:eb:0e:59:ec:
         5c:89:25:b4:b6:2e:27:91:92:cd:79:37:70:7b:bd:b7:cf:b2:
         bd:ba:7b:fa:ca:a1:64:7a:38:7f:3f:4f:c2:43:5b:59:97:2f:
         0c:95:b7:72:1c:4e:fd:e1:4b:e1:a1:7a:dc:c8:93:f9:7e:98:
         1e:89:f5:0e:cd:fc:bb:e1:69:6d:58:22:32:66:d8:2f:84:0e:
         5e:89:86:c9:8e:4e:1d:d4:c4:2b:6d:1c:46:0c:84:1c:da:eb:
         25:90:58:e2:52:f5:7e:79:c0:f9:39:75:13:0b:2d:5a:34:76:
         4a:5d:dc:bc:1b:c1:c5:f7:34:7a:3e:f2:52:d6:e8:7a:fc:b4:
         f5:05:68:0e:de:21:ec:37:2d:67:3e:89:66:7e:19:da:7a:61:
         be:7a:b1:e3:34:89:55:2d:33:44:59:08:fd:ea:e0:26:a1:bc:
         5c:c4:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----