Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB1FF169F9D11F184B593ECCE1D38B0.roa
File:                     3FB1FF169F9D11F184B593ECCE1D38B0.roa (raw, json)
Hash identifier:          iKYCrx+f4wAEc9jRjTbuA3Uknit2WSqoJGt5ieplU9I=
Subject key identifier:   EB:66:6D:BB:C6:D8:05:19:CA:CA:57:4C:A6:46:87:F0:2B:4A:F6:6C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D075
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB1FF169F9D11F184B593ECCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:21:56 +0000
ROA not before:           Mon 24 Aug 2026 09:21:52 +0000
ROA not after:            Thu 19 Aug 2027 09:21:52 +0000
asID:                     216047
IP address blocks:        45.204.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118901 (0x1d075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:21:52 2026 GMT
            Not After : Aug 19 09:21:52 2027 GMT
        Subject: CN=6a8c0d33-afc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:60:4c:b3:73:8f:d7:2c:b4:93:8b:79:0e:
                    da:21:29:cc:2d:75:19:44:c0:9e:05:93:51:26:7d:
                    32:f9:f9:b7:b7:eb:0b:8b:44:8c:50:47:b5:62:a6:
                    71:0a:d1:2b:70:7a:a7:0d:f5:67:ca:0b:0d:3a:1e:
                    54:ab:4f:3a:03:b5:91:19:b4:43:c5:6a:85:ce:98:
                    64:b7:db:01:f3:f9:20:f5:75:0a:00:cc:5a:9a:d9:
                    89:af:1e:b0:5a:da:d8:11:16:6e:b1:30:fa:29:2a:
                    0f:82:cf:3f:c3:84:5b:58:e6:42:dd:44:d6:e5:3c:
                    5d:95:55:64:48:86:a3:f8:07:ef:52:30:1c:c8:81:
                    a8:65:86:f3:21:57:05:a2:e6:d0:bd:99:9f:e7:dc:
                    48:a9:bc:39:d7:cf:5e:bd:ad:34:17:23:27:bf:54:
                    a7:05:06:58:74:1e:e5:3c:d1:81:b4:dc:87:70:b1:
                    ce:63:71:91:99:1b:9b:5a:40:6d:e7:e5:34:58:c4:
                    d9:34:39:08:6a:e4:6b:80:4b:fe:93:e9:8e:f0:bf:
                    ac:d7:a9:c7:bc:be:61:e2:5a:d7:68:6d:62:bc:0e:
                    62:90:e2:43:b0:46:2a:b8:66:e1:38:9e:85:b0:86:
                    c6:2a:7f:79:dd:39:97:c9:e7:32:ce:5f:dc:62:75:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:6D:BB:C6:D8:05:19:CA:CA:57:4C:A6:46:87:F0:2B:4A:F6:6C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB1FF169F9D11F184B593ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:73:51:b8:82:14:38:e2:28:67:16:ff:64:39:ba:a7:3c:80:
         fa:88:04:7a:48:7e:1f:c9:cc:9a:ec:8d:b5:f0:2a:12:a6:3e:
         08:0d:8d:6b:63:1a:70:f8:2b:5a:e3:17:d3:c8:34:4d:ab:65:
         06:db:dc:12:60:eb:6f:70:52:b1:20:26:51:cd:9d:0d:a0:21:
         f5:1f:40:d1:2b:7c:4b:b7:36:af:fa:90:71:00:ae:b8:71:dc:
         63:52:42:9c:16:f3:76:5e:02:ca:9f:73:48:14:4b:dd:06:16:
         a4:e7:8f:28:c7:61:ae:3b:f9:16:5f:89:56:65:4d:81:3b:c9:
         3b:70:14:ae:ce:b4:01:94:46:9c:a3:66:44:00:a0:f4:20:e3:
         a0:5e:3d:3f:5a:22:71:d0:36:72:6e:3d:64:5f:fe:28:8a:3b:
         d1:5a:e3:07:46:4c:f6:b6:a4:4c:47:b8:b5:ea:7b:9e:e3:59:
         3a:8a:8a:1b:92:16:2f:d2:63:47:c3:f0:cd:c4:80:d3:a9:7f:
         4d:dc:72:49:10:59:76:af:97:b3:2c:ec:72:13:29:ea:1c:33:
         d3:08:03:9b:c5:ff:05:0b:03:30:7e:b7:fc:b0:cd:da:c4:46:
         c9:93:28:86:47:77:d3:31:6c:75:61:6e:e4:21:9a:c0:02:f4:
         fe:d8:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----