Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E8C50EC20411F1AC563FC9CE1D38B0.roa
File:                     39E8C50EC20411F1AC563FC9CE1D38B0.roa (raw, json)
Hash identifier:          Bny//yvcqwmRiMolSU0XHxYVHVEqxb2f+FLxGF1phG4=
Subject key identifier:   7C:D7:8D:F1:9A:4B:3A:0A:21:98:09:6E:F5:E5:BC:5E:91:2D:C0:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E8C50EC20411F1AC563FC9CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 04:04:44 +0000
ROA not before:           Wed 07 Oct 2026 04:04:39 +0000
ROA not after:            Sun 15 Nov 2026 04:04:39 +0000
asID:                     401650
IP address blocks:        45.195.106.0/24 maxlen: 24
                          45.195.107.0/24 maxlen: 24
                          45.195.108.0/24 maxlen: 24
                          45.195.109.0/24 maxlen: 24
                          45.195.204.0/24 maxlen: 24
                          45.195.205.0/24 maxlen: 24
                          45.195.242.0/24 maxlen: 24
                          45.203.199.0/24 maxlen: 24
                          45.203.211.0/24 maxlen: 24
                          45.203.212.0/24 maxlen: 24
                          45.203.245.0/24 maxlen: 24
                          45.203.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121745 (0x1db91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 04:04:39 2026 GMT
            Not After : Nov 15 04:04:39 2026 GMT
        Subject: CN=6ac5c4db-82b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:b7:57:b3:83:77:95:43:c4:63:b0:95:69:
                    b2:0a:4b:6c:87:86:65:9c:5d:c5:5b:b3:3e:e8:ae:
                    46:10:ce:3d:58:b2:63:37:73:1a:30:91:46:09:ac:
                    fd:ea:51:ba:53:c8:27:43:36:52:d0:73:1f:27:d5:
                    5c:33:a5:98:16:ec:d9:64:59:23:68:b9:a3:cd:5f:
                    1f:4d:41:75:cd:60:5a:ab:e7:86:ef:a4:05:ed:18:
                    c8:de:08:0a:e3:a4:95:78:7d:48:c0:91:d2:a1:92:
                    45:f7:b4:0a:c6:6a:3a:4a:72:91:64:1d:7b:8c:4f:
                    d1:84:2b:cb:9d:05:98:6b:99:4c:f3:95:b9:c0:3b:
                    df:9d:3e:4b:3d:f9:c9:da:62:eb:81:8e:55:26:c7:
                    ba:38:3b:f6:72:a6:ee:b4:9e:7e:9f:e3:dc:85:11:
                    3d:31:28:e5:bf:b0:01:54:5c:38:f0:4e:32:c9:88:
                    e3:b7:cd:2c:da:11:c5:69:0e:7c:71:09:7a:82:1a:
                    d4:2b:0c:4b:77:40:6a:c8:7b:29:f0:45:3a:e0:01:
                    f6:9f:66:f5:41:26:e9:c4:97:a0:c1:46:b0:e7:0f:
                    1b:bc:f1:9d:5d:2a:03:14:ad:97:39:15:c3:48:fe:
                    bf:fe:51:b3:af:4d:53:98:ef:b9:9c:7b:fc:bc:00:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:8D:F1:9A:4B:3A:0A:21:98:09:6E:F5:E5:BC:5E:91:2D:C0:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E8C50EC20411F1AC563FC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.106.0-45.195.109.255
                  45.195.204.0/23
                  45.195.242.0/24
                  45.203.199.0/24
                  45.203.211.0-45.203.212.255
                  45.203.245.0/24
                  45.203.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:76:c9:2c:2f:be:0c:25:4a:6b:52:ab:44:c6:e0:1f:f6:
         2b:a6:56:9f:0c:a0:da:e4:72:2a:7d:fd:d9:79:c1:bf:aa:af:
         9a:14:5d:2b:c2:37:c0:a1:f2:47:b1:1b:6e:40:8b:aa:e7:45:
         48:81:87:74:e6:b3:37:2d:44:70:56:d8:17:2a:b0:db:d6:0c:
         e1:c5:97:99:4a:3a:04:2a:9f:1f:34:c8:fe:03:73:53:15:1e:
         18:01:ec:46:f9:18:75:ac:5e:66:7a:5a:62:5a:e0:6f:1e:b3:
         c1:0d:e1:4d:c3:c7:51:5d:32:76:43:9c:89:41:eb:8f:b2:c0:
         f1:51:f1:2a:d0:f1:f2:b1:8f:20:1c:23:a4:47:c5:98:b5:54:
         30:6c:b5:dc:62:a1:87:d4:ab:33:0f:98:95:5a:1a:d4:31:45:
         5a:f9:45:17:4c:0f:e4:05:fe:34:66:ec:60:7f:8e:27:ce:30:
         93:90:db:91:7d:a3:c5:2a:4a:78:a2:37:fa:42:5e:c9:32:5e:
         ef:b1:c6:b9:3e:cd:a1:18:51:9a:ce:71:53:cf:79:94:1a:fd:
         ec:b1:5f:cf:2f:d5:11:41:e9:93:8d:db:9e:bf:2c:1b:fa:4a:
         4a:9c:8e:21:93:7d:cc:5b:de:a3:b3:f7:c2:90:bb:39:77:b4:
         4b:50:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----