Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD47AEC9F8011F1B191BCBDCE1D38B0.roa
File:                     5BD47AEC9F8011F1B191BCBDCE1D38B0.roa (raw, json)
Hash identifier:          hyOgk8/ymVZtW9LKjbO6e/BefDNRUM02V/L7odSVdD4=
Subject key identifier:   06:AC:9A:43:19:E2:29:29:DB:5F:79:D6:AD:E8:F9:A7:6C:F9:15:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D039
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD47AEC9F8011F1B191BCBDCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 05:55:07 +0000
ROA not before:           Mon 24 Aug 2026 05:55:03 +0000
ROA not after:            Wed 16 Sep 2026 05:55:03 +0000
asID:                     134365
IP address blocks:        45.197.144.0/21 maxlen: 24
                          45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118841 (0x1d039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 05:55:03 2026 GMT
            Not After : Sep 16 05:55:03 2026 GMT
        Subject: CN=6a8bdcbb-dc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:77:50:2a:95:b6:25:71:84:2d:fb:8d:70:
                    a4:0b:0e:ea:1b:7e:3e:ca:31:94:f4:14:17:23:f3:
                    1a:06:03:47:93:85:ea:98:ad:ca:9f:65:0d:62:13:
                    d5:86:9d:a1:f3:c2:0d:1e:69:5f:0d:cd:78:30:c8:
                    66:df:4b:43:4e:72:1d:81:7f:5f:b1:bc:af:be:62:
                    a5:f9:62:d2:5d:1c:86:c0:ec:f8:c2:ba:05:0a:79:
                    34:86:6c:8e:00:51:91:96:bd:69:bc:04:5e:50:ed:
                    a5:0d:b4:fd:47:b6:3a:ab:b5:59:cf:c2:b1:69:f1:
                    2c:60:7b:8a:84:16:06:1b:96:b9:c5:35:24:a9:7a:
                    fa:67:c3:2f:1f:09:08:00:e2:a9:10:f3:45:25:a8:
                    cb:6b:00:a0:91:1b:94:da:1d:f8:f3:7b:4a:53:75:
                    7b:bd:7c:16:3c:5a:e1:e6:66:ad:73:a7:7c:de:43:
                    19:9a:31:49:55:82:9e:e7:a2:3c:e8:38:18:7e:26:
                    8c:aa:98:fb:23:52:99:ab:fa:9b:a0:29:af:f7:45:
                    13:2a:eb:7b:31:f4:3b:58:81:b7:c4:7e:1b:31:27:
                    ff:44:10:3f:ab:7d:ba:01:5e:1f:d1:03:48:ef:ed:
                    d0:45:d9:75:e6:eb:d0:a8:54:1b:94:09:10:c0:db:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:9A:43:19:E2:29:29:DB:5F:79:D6:AD:E8:F9:A7:6C:F9:15:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD47AEC9F8011F1B191BCBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:a3:f0:4f:70:77:06:ec:3a:06:10:a7:c6:fc:52:9a:5e:
         4c:f9:97:70:14:80:3a:f4:b8:7b:a4:89:69:b1:92:65:39:2f:
         92:90:c6:f0:47:38:e3:45:06:b3:43:ad:7a:e5:6c:aa:cd:6e:
         83:20:da:3a:13:f6:44:5f:08:87:64:6f:7e:e5:f5:a0:40:e1:
         12:59:cb:86:d0:f7:08:6f:f8:71:66:37:cb:82:00:ad:4e:80:
         f7:1e:0d:ef:8c:2b:d2:74:cc:af:08:8f:96:d4:ae:c0:04:67:
         ac:2d:37:1e:bb:54:2f:08:ef:7e:8f:a8:95:ed:f8:13:88:e4:
         33:a1:db:e4:c0:3f:47:dc:03:47:23:c1:25:e4:6e:a4:45:8f:
         a7:16:ff:94:9f:f0:1b:fc:56:71:99:47:99:96:02:42:96:61:
         14:64:76:75:cf:e0:4a:5c:2b:ca:b2:9d:04:00:7f:3c:24:7c:
         dc:8a:5a:ba:63:a8:ce:41:c6:08:d7:fa:60:b2:e7:85:94:99:
         c1:e5:24:53:12:31:4e:1d:f1:c1:1a:0d:3f:d0:5a:69:30:97:
         ca:88:c9:66:f5:e3:4a:02:24:b1:e7:d4:c6:3a:11:e6:2e:b8:
         c9:83:e7:9e:ca:5e:f8:48:7e:03:6f:ae:34:16:3a:8e:12:2c:
         81:a9:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----