Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4373F136C79D11F1B450DFEBCE1D38B0.roa
File:                     4373F136C79D11F1B450DFEBCE1D38B0.roa (raw, json)
Hash identifier:          EZqWARmZoXE9B0bDnJc/uRBTeGxRpVVB7B8bxj4118k=
Subject key identifier:   95:9F:B2:87:C8:30:51:CA:F4:90:E4:6E:FF:61:65:EC:B5:6C:D7:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4373F136C79D11F1B450DFEBCE1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:02:48 +0000
ROA not before:           Wed 14 Oct 2026 07:02:44 +0000
ROA not after:            Sat 21 Nov 2026 07:02:44 +0000
asID:                     395793
IP address blocks:        45.195.157.0/24 maxlen: 24
                          45.195.158.0/24 maxlen: 24
                          45.196.136.0/24 maxlen: 24
                          45.196.137.0/24 maxlen: 24
                          45.203.60.0/24 maxlen: 24
                          45.203.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122176 (0x1dd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 14 07:02:44 2026 GMT
            Not After : Nov 21 07:02:44 2026 GMT
        Subject: CN=6acf2918-edd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:35:70:1c:8d:7e:61:65:5d:c9:09:da:8b:
                    fb:00:17:c0:b9:0d:b4:65:1f:d7:ea:0f:8f:c4:91:
                    dd:60:2c:72:cc:3b:62:f5:8c:0c:e0:11:82:30:b4:
                    63:be:43:4e:de:3b:d3:15:f6:6e:60:50:83:5b:de:
                    03:27:8a:03:39:c0:b6:00:42:7a:6e:01:f6:e2:85:
                    f9:59:66:2a:61:c3:70:94:d3:77:ea:b3:e2:fe:ec:
                    2e:04:2f:3f:2e:28:c1:af:3b:5e:06:16:25:be:a4:
                    3e:68:49:6d:85:04:d8:43:93:54:4a:93:7d:8c:33:
                    16:94:2e:8c:58:72:ed:6f:55:22:27:f8:09:9a:60:
                    95:92:97:69:31:5c:6e:4a:85:f5:27:5b:0b:b3:fe:
                    47:d2:37:0c:54:4e:4f:b6:54:dc:ae:87:02:2b:72:
                    96:45:87:3b:21:95:dc:c2:e3:b6:a2:4a:62:08:e1:
                    0f:2b:af:60:83:68:38:07:ac:4c:e5:54:f6:a5:ad:
                    05:37:66:23:f3:dd:f4:92:f3:1b:78:d6:33:84:9b:
                    a5:50:a2:6c:69:c2:e4:79:0a:6a:76:1d:44:d1:3a:
                    53:f9:e6:0a:9e:1a:96:50:b0:75:19:90:06:91:48:
                    fd:da:e8:59:da:be:1f:da:fc:50:ce:e4:94:1a:64:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:B2:87:C8:30:51:CA:F4:90:E4:6E:FF:61:65:EC:B5:6C:D7:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4373F136C79D11F1B450DFEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.157.0-45.195.158.255
                  45.196.136.0/23
                  45.203.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:41:1a:02:a2:f9:05:89:2c:4a:91:39:7b:f1:7e:ba:dc:49:
         4b:f3:1f:e4:b5:c1:9e:0b:84:d7:2c:c4:0d:70:be:75:1c:77:
         a6:2b:14:18:13:b4:10:31:6e:0e:cc:79:e8:c8:59:63:03:ce:
         bd:28:5f:56:5e:60:b1:cd:87:b6:b2:73:b4:3c:cb:e3:13:81:
         cc:ca:7c:63:2a:90:f0:05:2e:5e:55:af:d5:e7:85:18:0c:d7:
         b2:14:c3:b8:12:74:34:8d:04:54:90:0f:54:b8:34:f3:36:ef:
         47:d8:af:b9:1a:4d:74:84:29:97:bf:16:3a:16:8a:e0:42:4c:
         5a:76:2e:15:6e:09:5a:44:6c:28:c7:a7:e1:56:21:88:a6:f0:
         83:94:9f:b0:37:af:7e:ea:56:10:20:73:16:44:46:05:d3:97:
         56:a9:f8:8b:58:5f:70:a5:dd:ab:73:f3:30:29:de:9a:c5:09:
         6f:65:1e:fe:f8:6c:f0:21:b7:c7:bd:3e:97:73:38:c7:f8:05:
         fa:1a:1c:38:2a:71:6d:3a:84:59:07:1d:86:6e:18:69:2d:64:
         9b:08:ff:74:ea:97:04:6b:77:d3:7d:cf:65:db:a7:f3:bf:42:
         d4:45:f4:8f:ec:25:fe:89:5d:64:09:06:9d:31:da:37:4a:6f:
         4c:8c:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----