Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1C4664BD9311F1B52C26CBCE1D38B0.roa
File:                     3B1C4664BD9311F1B52C26CBCE1D38B0.roa (raw, json)
Hash identifier:          Uw2fKNeyYL+B6fzPiUSAnb8GHqjl8CH9XXfAIGFAqnI=
Subject key identifier:   BA:6E:78:4D:A7:DD:12:80:50:D7:4D:8D:07:E0:21:7E:AF:49:0F:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1C4664BD9311F1B52C26CBCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:25:48 +0000
ROA not before:           Thu 01 Oct 2026 12:25:44 +0000
ROA not after:            Sun 08 Nov 2026 12:25:44 +0000
asID:                     215691
IP address blocks:        45.198.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121265 (0x1d9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 12:25:44 2026 GMT
            Not After : Nov  8 12:25:44 2026 GMT
        Subject: CN=6abe514c-9ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:a8:05:2e:4f:aa:fd:06:ad:c0:b9:60:99:
                    b0:a6:ce:6e:9d:14:85:b3:cc:83:0b:ed:0d:4f:ea:
                    15:d4:35:fb:18:76:11:da:34:be:cf:8e:7d:9e:16:
                    b9:a2:d0:eb:d5:08:4c:c6:42:02:57:ef:77:64:62:
                    d8:a4:02:86:fc:ff:ed:5d:85:43:23:84:5e:6b:fc:
                    0a:f6:b1:ab:51:51:47:af:87:fc:e1:e9:e8:77:e4:
                    24:c8:bc:23:4b:bb:54:83:95:ae:1a:0a:65:b4:87:
                    cc:9a:f1:f6:72:4a:fc:66:07:48:0c:39:ca:5c:e9:
                    24:dc:07:ef:e9:58:c1:47:b8:0a:5e:3a:33:8a:8c:
                    d5:40:d6:bf:55:de:97:61:85:31:e7:56:ba:5e:74:
                    21:5e:d8:14:c2:18:da:00:ad:67:e7:8e:64:d6:a3:
                    0c:05:46:8c:28:ce:66:6d:c4:10:fb:42:d6:c4:23:
                    2c:e9:ae:24:75:de:f2:ef:b7:d6:51:84:07:ff:6e:
                    23:e8:db:c0:aa:ea:c8:fb:73:f3:78:b6:60:4f:3f:
                    9f:60:a1:71:24:f4:7c:8a:3b:bb:e3:83:ef:5e:e2:
                    45:35:f0:94:d2:02:53:66:3e:3d:78:66:b7:b5:9a:
                    f3:b3:74:2a:ba:85:1e:36:9d:e5:13:ab:f7:5a:5b:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:78:4D:A7:DD:12:80:50:D7:4D:8D:07:E0:21:7E:AF:49:0F:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1C4664BD9311F1B52C26CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:3c:91:e9:a7:40:58:9e:87:0d:06:7b:06:4f:fe:ef:35:
         67:0f:9b:56:87:a4:c3:28:da:f2:5f:15:98:75:32:6a:d3:a2:
         59:c5:a0:3d:27:de:ec:87:e3:0f:9e:69:ba:f8:68:15:69:0c:
         e0:0e:1c:e2:2a:43:6b:fd:9f:48:0d:21:62:45:f3:82:91:78:
         4c:cb:d0:8b:2f:35:2b:e7:88:7e:8d:70:52:f6:cc:a0:45:05:
         81:83:39:b1:38:eb:b8:78:e0:42:46:6e:98:fe:aa:02:2d:45:
         5a:fa:59:00:6c:8f:77:dc:f1:f0:b3:38:b9:8e:f4:4a:4e:88:
         ea:ad:7d:0b:fc:48:56:df:b1:7b:b6:df:e1:ce:4c:9d:05:7d:
         5a:b0:7f:ad:e2:50:52:2a:25:8e:49:fe:0b:07:ce:16:22:c4:
         e2:69:e8:e0:2d:d2:03:f4:b9:13:fb:af:93:8c:26:ae:69:2f:
         6b:b9:73:55:20:b4:d9:36:8a:dc:59:e7:d7:db:77:ed:63:ff:
         20:f1:e2:dc:2c:be:df:e1:b3:4a:92:96:15:bd:42:82:a5:57:
         41:8f:e6:9d:71:8b:79:d3:ad:68:f6:81:a3:62:db:5e:3d:e2:
         68:ad:76:dc:c7:bd:98:01:bc:22:0a:a3:5b:f0:61:29:1d:d8:
         33:9c:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----