Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D551649AE111F180906FFCCE1D38B0.roa
File:                     46D551649AE111F180906FFCCE1D38B0.roa (raw, json)
Hash identifier:          L4McAnU7H+5ltAxX5sH1A0V/fZ7rGaz/fL/L+Jz8I5Y=
Subject key identifier:   D6:E6:50:A4:34:D6:EC:FE:56:88:4B:10:85:EA:FD:D7:50:E3:A7:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D551649AE111F180906FFCCE1D38B0.roa
Signing time:             Tue 18 Aug 2026 08:46:17 +0000
ROA not before:           Tue 18 Aug 2026 08:46:13 +0000
ROA not after:            Thu 24 Sep 2026 08:46:13 +0000
asID:                     201814
IP address blocks:        45.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118156 (0x1cd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 08:46:13 2026 GMT
            Not After : Sep 24 08:46:13 2026 GMT
        Subject: CN=6a841bd9-9808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:14:7e:ab:eb:ba:31:5f:8d:86:34:ee:17:
                    c9:47:0c:3c:ab:a4:95:e3:68:75:3d:23:b2:e3:36:
                    24:93:d9:6f:b5:2f:8b:3e:e6:7d:5c:f4:06:9f:c6:
                    d6:cc:ee:35:fc:57:30:30:5b:21:17:70:fa:7b:f0:
                    18:ee:ff:96:bf:7c:1b:aa:6d:94:0c:30:83:2d:07:
                    ec:44:a9:95:e5:a7:c1:f7:c9:cc:4e:f2:29:32:c3:
                    bd:7e:94:75:ff:cd:79:bf:51:12:cf:de:71:74:60:
                    7d:83:d2:9a:0a:e2:32:0c:58:35:15:0d:42:d9:3e:
                    df:cf:b2:a1:6f:c5:bc:71:4a:9f:c2:55:9d:a7:b5:
                    09:78:0b:73:48:9e:1e:74:21:01:80:f3:bb:2f:0a:
                    68:48:51:26:6c:69:31:b4:14:0b:da:82:0e:58:5f:
                    60:3f:dc:cc:ef:eb:b5:53:c2:7e:07:c2:0c:33:86:
                    cb:7b:83:37:3a:23:06:25:40:c2:d3:49:b3:da:b7:
                    06:07:11:82:22:f8:01:de:36:c4:16:ac:63:6b:09:
                    8a:cd:c8:e6:6c:e2:f3:4b:88:6f:78:b4:f3:b5:ee:
                    a8:57:ee:50:bb:e6:49:91:c4:3e:1b:cd:c5:ec:8d:
                    f3:32:45:27:cf:ea:5f:ca:6d:6a:99:a7:de:b3:b2:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E6:50:A4:34:D6:EC:FE:56:88:4B:10:85:EA:FD:D7:50:E3:A7:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D551649AE111F180906FFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:4d:4c:c7:4d:9f:3f:6f:73:da:ab:39:94:ae:41:df:4e:
         f7:c5:14:7f:30:f9:86:02:48:1f:4d:6f:c7:46:1a:9c:05:60:
         22:03:07:0c:97:44:73:3a:47:03:4b:7b:2d:05:2d:3e:a4:fc:
         a9:55:09:9e:56:1e:5e:e2:f1:2f:1c:7c:90:09:f6:69:d5:5f:
         ea:de:c9:aa:6f:eb:13:3d:ed:55:5e:ba:29:bd:c6:07:f9:69:
         18:9d:6e:e1:92:bc:17:5a:3d:8e:7b:9d:f1:a5:98:b0:ab:a2:
         15:6f:02:f6:23:af:0b:28:32:ac:d3:b0:f1:e9:38:e0:43:ee:
         83:40:2b:56:85:7f:ea:62:fd:58:ca:55:4b:2a:41:62:d9:43:
         40:6d:cd:29:8f:e0:58:86:5d:87:c3:67:da:56:64:06:21:54:
         18:81:a3:99:67:9b:41:ec:3b:52:ff:aa:3d:d2:5a:dc:f2:0c:
         2c:a8:70:a5:86:20:d1:b7:67:c6:10:50:a7:c5:b6:c8:1a:1d:
         93:9d:0e:b9:9f:92:47:91:98:5a:d6:89:17:e6:54:52:52:77:
         2e:ce:89:fe:17:fd:6b:6c:68:2f:0e:d3:f4:0b:98:0b:9b:e5:
         47:bf:c7:a9:af:ec:d8:06:55:a6:53:9e:d3:08:be:4f:d5:71:
         44:8a:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----