Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E8DF969B9811F18F7E75D3CE1D38B0.roa
File:                     47E8DF969B9811F18F7E75D3CE1D38B0.roa (raw, json)
Hash identifier:          q48SK5eodpx4JoGQ/BORPVNMZys4z7+Bni18CqXwFvE=
Subject key identifier:   AA:5D:52:BC:EA:9F:0A:85:23:A9:B3:6C:0E:26:4F:27:9B:2F:D3:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E8DF969B9811F18F7E75D3CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:36:17 +0000
ROA not before:           Wed 19 Aug 2026 06:36:13 +0000
ROA not after:            Fri 11 Sep 2026 06:36:13 +0000
asID:                     197574
IP address blocks:        45.194.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118277 (0x1ce05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:36:13 2026 GMT
            Not After : Sep 11 06:36:13 2026 GMT
        Subject: CN=6a854ee1-b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:28:1c:7b:b3:a2:9c:62:e2:b4:99:55:7e:
                    0f:d3:4b:b6:a0:66:05:f9:3c:97:72:69:bd:52:e1:
                    67:ac:c5:3a:b0:f0:38:c3:31:be:82:d2:12:ff:2b:
                    ff:88:f8:b3:c3:98:27:a4:20:b6:d6:e6:67:cb:90:
                    22:37:bf:8b:d3:72:7f:2e:a2:a3:94:f8:40:ab:72:
                    70:0f:f6:70:06:34:7f:0d:a8:01:a8:bd:78:3f:da:
                    aa:bb:d9:7c:34:2d:ec:37:e0:7f:d2:f4:d0:cf:6a:
                    a9:f6:7c:1d:5a:3e:08:9e:49:e2:32:24:49:9a:64:
                    82:f6:a3:fb:10:9b:20:68:b7:33:7e:3d:80:22:b5:
                    b3:12:d7:e2:21:8f:ac:87:90:6c:09:65:59:22:1d:
                    2d:08:90:6c:ff:3d:f3:a2:58:36:81:72:3a:55:6c:
                    e5:6b:71:57:ca:de:7e:ab:27:82:82:ef:80:08:5c:
                    3f:4c:c2:25:84:80:41:24:46:cc:24:e6:e2:61:2d:
                    38:20:59:9d:4d:1e:ae:46:10:66:f4:11:8b:7f:cd:
                    f6:b7:a2:28:55:ae:12:48:ac:1a:63:17:eb:4b:a9:
                    8e:97:21:82:88:9f:eb:9c:42:67:57:a9:a6:ea:5b:
                    03:37:20:e0:5c:33:ed:5f:77:1f:5d:f0:01:35:b2:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:52:BC:EA:9F:0A:85:23:A9:B3:6C:0E:26:4F:27:9B:2F:D3:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E8DF969B9811F18F7E75D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:b6:96:c9:37:3f:64:4a:fe:87:10:ec:74:e1:35:13:3b:
         c4:18:1b:d0:41:d4:27:2a:e6:2f:87:51:a4:d9:a7:1f:72:69:
         d7:72:35:9e:84:ee:56:54:d1:d6:7c:bd:8c:9b:a6:f1:ee:11:
         14:24:9a:fe:11:ec:0d:d4:47:54:a7:f0:97:63:ee:a9:c3:b6:
         f0:95:0d:01:5d:fe:17:fa:bf:67:9d:07:10:88:c0:7f:00:a9:
         69:9c:80:8c:f0:21:f1:a3:cd:e8:df:e8:93:e7:b5:72:99:b0:
         49:0b:4a:f3:dd:a0:2b:38:b9:5b:4c:96:22:cb:34:6a:6f:54:
         74:c5:93:83:96:1c:46:61:4d:a1:0b:b6:ea:86:b8:2e:4a:c7:
         a9:f5:4f:d5:95:b8:97:d3:1b:2e:65:0b:5c:ba:8e:e6:d4:29:
         52:25:8b:f6:5f:f4:7c:62:cd:3f:2a:12:f4:f2:44:b5:70:0d:
         8a:95:3d:17:f7:86:a0:ae:cf:25:7a:89:ac:35:35:2d:00:3b:
         cf:39:de:b9:a2:ec:63:46:18:1b:a2:16:6b:90:b3:b7:34:12:
         23:9d:d8:1d:30:51:57:61:df:70:30:0b:ac:20:ef:91:ef:a2:
         c9:1f:25:f9:25:2c:a0:ce:f8:a5:02:3f:4a:a9:6c:05:f1:90:
         88:6f:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----