Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F08818AA14F11F191562CB3CE1D38B0.roa
File:                     3F08818AA14F11F191562CB3CE1D38B0.roa (raw, json)
Hash identifier:          hJqmpbyI0Z4veqkwJsKnkuw40q237Fe/phNf+irbcQQ=
Subject key identifier:   EB:63:69:A9:83:82:ED:DB:C1:13:FA:E4:86:6B:83:BD:EF:C8:2C:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F08818AA14F11F191562CB3CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 13:08:36 +0000
ROA not before:           Wed 26 Aug 2026 13:08:32 +0000
ROA not after:            Sat 25 Aug 2029 13:08:32 +0000
asID:                     17561
IP address blocks:        45.203.104.0/24 maxlen: 24
                          45.203.105.0/24 maxlen: 24
                          45.203.106.0/24 maxlen: 24
                          45.203.107.0/24 maxlen: 24
                          45.203.108.0/24 maxlen: 24
                          45.203.109.0/24 maxlen: 24
                          45.203.110.0/24 maxlen: 24
                          45.203.111.0/24 maxlen: 24
                          45.203.112.0/24 maxlen: 24
                          45.203.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119129 (0x1d159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 13:08:32 2026 GMT
            Not After : Aug 25 13:08:32 2029 GMT
        Subject: CN=6a8ee554-fcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:d5:a2:fe:bf:fd:84:06:7d:12:74:70:c5:
                    56:61:a2:8b:1f:ba:f8:44:08:05:cc:21:c0:3a:fb:
                    6f:43:ac:58:bf:47:5b:31:79:5d:63:77:aa:dd:2a:
                    ab:d3:a6:12:2e:b9:04:81:1e:d0:e6:18:4a:c1:93:
                    3d:18:5b:74:dd:0a:86:7f:37:1f:65:45:7a:5d:39:
                    9e:02:df:5b:93:59:85:10:7e:ac:87:b9:2b:3e:68:
                    9d:87:e2:9a:dc:b8:0e:7d:bd:20:96:cb:8c:10:c0:
                    22:2c:f9:3c:a3:0f:81:27:d1:a5:7a:d1:83:6e:1f:
                    32:c1:5b:74:b2:af:70:11:eb:ec:a3:00:cf:a2:a3:
                    3c:61:0c:02:1e:fc:0c:0d:57:a9:70:34:e5:dd:72:
                    48:5d:6b:79:4b:4d:6b:f7:25:7b:e5:e9:10:12:ea:
                    9d:a6:7e:7d:d2:a8:1b:56:2d:d3:26:b5:5e:92:02:
                    a9:1c:ec:a9:7a:ed:f9:d5:02:ca:da:c5:37:21:60:
                    5b:7a:ae:d9:ab:8e:09:b7:33:07:0e:2c:56:d9:b0:
                    67:4c:c4:c9:ba:6f:a5:8d:1a:e0:75:45:34:c9:21:
                    9b:6c:81:61:e8:9c:dd:2b:6f:8a:60:02:56:2c:ac:
                    44:c2:ed:37:cb:72:33:2d:0d:29:a9:f9:76:23:92:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:69:A9:83:82:ED:DB:C1:13:FA:E4:86:6B:83:BD:EF:C8:2C:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F08818AA14F11F191562CB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.104.0-45.203.113.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:93:30:c6:a0:0a:c1:a4:9c:6d:7c:fd:e2:f7:95:3d:ec:
         ea:53:2f:2e:f3:36:b3:38:79:1f:e9:4b:93:12:09:e6:bc:41:
         f5:8c:c7:8b:d6:f8:08:cd:f9:1d:1b:09:f0:44:7a:33:54:0e:
         31:7b:10:6c:c7:fe:12:53:08:8f:43:31:6c:bc:4e:f9:79:d8:
         a2:14:a0:e4:55:02:bf:88:47:22:1c:a3:fd:a1:cd:df:0e:16:
         f3:59:31:2e:03:4a:a4:04:0f:32:36:14:fb:94:38:e9:5f:80:
         59:58:c3:df:37:b5:a6:66:74:20:cb:3a:41:37:48:05:cb:e7:
         09:2e:2c:4c:99:47:b0:36:16:37:5e:bd:5f:81:76:d0:ef:1d:
         93:16:10:fd:9c:2b:b3:bd:78:7d:bd:04:10:ec:27:fe:01:2e:
         87:35:e6:1a:eb:d3:c2:41:4e:de:ec:ef:42:07:bb:1c:30:57:
         f5:a7:c2:83:41:7b:02:df:7a:04:a6:02:09:d8:c4:65:1e:0f:
         cc:32:45:ba:d4:e8:17:d5:56:ed:6a:00:59:e1:93:1a:a7:ab:
         47:5e:01:a4:e2:a6:4d:37:e1:d4:6d:e6:a9:2a:4a:e5:31:43:
         4b:9c:d6:be:1e:d9:ca:7a:26:da:08:f9:52:27:e3:17:98:05:
         83:33:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----