Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2BB248B97A11F187D49717CF1D38B0.roa
File:                     3A2BB248B97A11F187D49717CF1D38B0.roa (raw, json)
Hash identifier:          tDWiMbZQ8IPgGL2AIswP70DKITBKCHigYBxvAoam+tg=
Subject key identifier:   1F:81:66:2C:EE:30:E5:75:B9:07:A4:F0:90:3C:DB:AF:32:BE:90:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2BB248B97A11F187D49717CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 07:16:44 +0000
ROA not before:           Sat 26 Sep 2026 07:16:40 +0000
ROA not after:            Sun 18 Oct 2026 07:16:40 +0000
asID:                     54801
IP address blocks:        45.199.191.0/24 maxlen: 24
                          45.202.8.0/24 maxlen: 24
                          45.202.9.0/24 maxlen: 24
                          45.202.10.0/24 maxlen: 24
                          45.202.11.0/24 maxlen: 24
                          45.202.63.0/24 maxlen: 24
                          45.204.1.0/24 maxlen: 24
                          45.204.64.0/24 maxlen: 24
                          45.204.71.0/24 maxlen: 24
                          45.207.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121030 (0x1d8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 07:16:40 2026 GMT
            Not After : Oct 18 07:16:40 2026 GMT
        Subject: CN=6ab7715c-65c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:a0:93:ed:fd:41:82:68:1e:45:45:0b:9c:
                    4d:eb:c8:28:5e:4d:02:4b:5e:ce:d2:be:7d:90:1b:
                    83:91:55:39:cd:08:9f:b5:43:ce:9e:fc:ed:94:1e:
                    3e:3e:61:77:5e:89:1c:d1:42:dc:bb:29:c0:c0:52:
                    4a:ef:34:2a:4b:33:70:5c:2d:35:fb:6a:00:74:9c:
                    03:6f:6b:25:8d:e3:4e:08:e1:9c:ad:55:50:de:00:
                    42:31:d3:56:98:1f:2c:4c:a6:92:f2:92:e7:44:a0:
                    07:ae:07:00:c4:be:a0:69:5c:2a:eb:b6:ee:dd:8f:
                    0d:e5:bd:ed:a2:16:aa:54:49:7f:47:90:7f:27:a3:
                    d3:d6:c8:dd:af:f7:85:dc:6d:34:11:6f:0f:0c:32:
                    89:43:fe:65:e3:2f:da:bf:61:78:82:94:bc:23:d3:
                    db:a3:d3:6a:27:fe:b1:99:bb:b5:96:1a:33:98:8f:
                    4f:5a:6d:e7:7b:c1:53:6d:b0:c5:62:91:50:b1:83:
                    0d:a4:6b:ce:25:5a:df:6e:76:6f:41:7a:88:64:f3:
                    21:a4:a2:5e:f2:d9:bb:7a:54:6a:06:69:76:31:cf:
                    53:f6:58:08:b4:be:c3:dd:bc:30:ba:84:5a:65:dd:
                    7c:18:9d:85:42:b6:9d:1b:ac:0c:4a:e7:b1:12:a9:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:81:66:2C:EE:30:E5:75:B9:07:A4:F0:90:3C:DB:AF:32:BE:90:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2BB248B97A11F187D49717CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.191.0/24
                  45.202.8.0/22
                  45.202.63.0/24
                  45.204.1.0/24
                  45.204.64.0/24
                  45.204.71.0/24
                  45.207.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:f6:dc:d7:7a:dd:d8:d0:50:60:bb:26:34:ab:37:b9:e9:
         56:1a:3e:be:83:35:1a:88:3e:b3:d3:db:dc:f9:c4:39:70:bb:
         f6:d2:87:17:65:12:55:f0:55:8b:3a:05:50:78:b0:4b:08:c2:
         11:19:5a:65:3a:c8:ce:64:1b:0e:ed:38:73:53:13:a3:85:ed:
         a4:11:7c:20:52:6f:2d:87:18:22:c0:c5:c2:f3:78:f0:b7:d9:
         81:30:1a:d1:26:98:79:ca:96:5a:1f:50:36:39:07:15:2b:d8:
         84:76:9b:de:6c:42:7f:3a:2f:59:1d:75:8f:54:9a:69:48:37:
         43:5e:e4:fb:44:db:68:8e:58:f5:16:a2:cd:bc:ba:26:e9:fd:
         e4:a4:7d:6c:97:87:a2:8d:1b:4e:fc:99:c3:3a:5b:b2:4d:b9:
         b2:42:23:0f:88:9e:64:6a:52:3e:f2:1b:ff:c2:97:65:55:7a:
         23:2d:ad:d8:28:2f:71:96:37:8a:ca:03:0f:e3:d7:51:f8:7e:
         ee:3c:ec:0b:0c:ed:17:00:51:5b:2e:82:93:6c:42:1f:93:b9:
         a8:16:a5:9f:f5:1c:2f:ef:8d:e9:12:cf:8f:4d:16:5b:9b:72:
         bd:ab:13:d8:b9:ba:1e:1d:55:4b:e0:73:c0:28:78:b1:f8:e5:
         86:78:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----