Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FD79DE89EB711F184DD60B5CE1D38B0.roa
File:                     3FD79DE89EB711F184DD60B5CE1D38B0.roa (raw, json)
Hash identifier:          ETMYKs+esSpJrs9X4SR4kWb3cV5JaDaQ22ybL2tktCA=
Subject key identifier:   7E:CC:E5:34:43:F7:86:3E:C4:89:38:C5:93:3C:72:F0:3B:FC:F8:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D015
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FD79DE89EB711F184DD60B5CE1D38B0.roa
Signing time:             Sun 23 Aug 2026 05:55:32 +0000
ROA not before:           Sun 23 Aug 2026 05:55:27 +0000
ROA not after:            Wed 02 Sep 2026 05:55:27 +0000
asID:                     4907
IP address blocks:        45.197.232.0/24 maxlen: 24
                          45.197.233.0/24 maxlen: 24
                          45.197.234.0/24 maxlen: 24
                          45.197.235.0/24 maxlen: 24
                          45.197.236.0/24 maxlen: 24
                          45.197.237.0/24 maxlen: 24
                          45.197.238.0/24 maxlen: 24
                          45.197.239.0/24 maxlen: 24
                          45.202.0.0/24 maxlen: 24
                          45.202.1.0/24 maxlen: 24
                          45.202.2.0/24 maxlen: 24
                          45.202.3.0/24 maxlen: 24
                          45.202.4.0/24 maxlen: 24
                          45.202.5.0/24 maxlen: 24
                          45.202.6.0/24 maxlen: 24
                          45.202.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 05:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118805 (0x1d015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 05:55:27 2026 GMT
            Not After : Sep  2 05:55:27 2026 GMT
        Subject: CN=6a8a8b53-5d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:6f:93:c8:b7:3d:95:ed:8d:9b:19:db:38:
                    fb:1d:e8:1b:aa:d0:e5:74:87:d3:90:c8:05:42:6e:
                    a1:59:d2:9e:e2:b5:c0:ba:e8:89:93:7a:9b:8d:f6:
                    4f:03:4b:85:21:2f:8a:00:dc:d8:de:f6:6c:29:af:
                    89:bd:fc:67:a6:00:9a:a0:84:94:cb:cd:78:e5:99:
                    b2:41:2c:8a:ed:b0:9d:d9:be:24:bb:c6:d0:83:d9:
                    5c:d5:e8:a6:3e:bc:d8:82:3d:c6:61:51:30:c8:69:
                    80:84:e0:56:94:60:13:99:56:a1:38:48:54:e3:de:
                    14:d1:2a:eb:59:28:66:6f:41:b5:61:30:29:4c:62:
                    4b:97:2a:e3:d0:bd:91:d6:32:88:1d:7a:f7:95:42:
                    45:fb:02:c4:5c:50:96:e7:81:78:66:2e:76:61:eb:
                    fa:4f:f4:31:f7:c4:8a:2d:98:01:39:f0:af:a4:80:
                    a3:74:f2:4c:1c:50:09:f0:6b:aa:84:62:87:bd:b5:
                    4d:e7:2b:18:2a:19:60:00:f6:87:16:cb:35:c6:53:
                    10:68:4e:3a:13:b3:ce:67:a8:86:dd:af:3c:20:d4:
                    ba:4d:1e:67:6b:4b:f3:a0:0d:ed:30:5f:97:2b:be:
                    1c:b0:c1:a9:40:bc:73:6a:06:96:32:e4:69:8b:36:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:E5:34:43:F7:86:3E:C4:89:38:C5:93:3C:72:F0:3B:FC:F8:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FD79DE89EB711F184DD60B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.232.0/21
                  45.202.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:79:b9:bd:c4:cc:1b:57:f3:f4:56:27:eb:d1:e4:8d:09:c5:
         61:09:20:0a:6c:19:46:f3:31:ad:19:b7:71:06:6b:17:52:f1:
         00:70:0d:6e:2e:db:fa:e2:e3:0b:ae:3c:ca:db:a8:dd:5a:6c:
         39:c5:a4:f8:8a:8e:e8:78:34:fa:fe:8c:79:68:a7:68:db:f2:
         74:d0:45:a7:e2:c7:b7:e7:00:e9:a4:41:d6:4e:91:6f:59:0f:
         b0:d4:f2:7a:c5:6f:8c:ea:98:9c:17:1d:53:8d:68:e5:d4:f6:
         c2:fd:f2:58:9d:db:d5:c6:c0:05:69:a9:41:17:13:64:31:1e:
         f8:01:d5:ce:2d:2d:b0:44:7d:95:e1:68:9a:04:8d:00:a8:f8:
         3b:69:f9:d1:37:67:c0:0d:48:c4:19:fe:cb:53:2a:be:dd:11:
         76:54:e9:35:63:d1:4c:ed:0a:bd:57:4f:bb:0a:84:66:a5:ae:
         e1:f3:23:c1:63:7b:80:f6:10:db:0a:1e:67:57:43:7b:db:fd:
         84:04:a0:65:a1:da:e1:72:e7:e3:05:e1:f8:1f:c1:af:0d:ef:
         05:23:dc:a5:fc:22:12:09:c5:9f:f8:73:7d:d5:c1:29:fb:99:
         79:78:e6:b2:20:93:91:a5:81:f7:3b:5a:72:eb:5d:c8:41:5d:
         56:11:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----