Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F7634AACC5E11F1984653EDCE1D38B0.roa
File:                     5F7634AACC5E11F1984653EDCE1D38B0.roa (raw, json)
Hash identifier:          b1oc7VGzzEdDlW/FoT29LZI31LMhjNFJGiJritAvZpE=
Subject key identifier:   BB:B4:48:7D:7D:6B:2C:D9:AE:A7:50:B5:04:73:B9:92:85:D9:1B:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DED0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F7634AACC5E11F1984653EDCE1D38B0.roa
Signing time:             Tue 20 Oct 2026 08:15:13 +0000
ROA not before:           Tue 20 Oct 2026 08:15:08 +0000
ROA not after:            Sat 28 Nov 2026 08:15:08 +0000
asID:                     18229
IP address blocks:        45.198.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122576 (0x1ded0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 20 08:15:08 2026 GMT
            Not After : Nov 28 08:15:08 2026 GMT
        Subject: CN=6ad72311-dafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:99:c5:fe:15:9a:3a:2c:d7:eb:dc:23:b6:
                    97:84:07:75:a0:a8:6e:e2:c7:05:ee:90:ea:40:02:
                    4c:eb:82:0f:54:10:de:7b:08:7b:a8:4b:3a:4c:39:
                    93:18:cb:a6:d5:0a:12:46:be:b8:ae:62:f0:ff:fb:
                    3b:b9:31:f6:72:b2:b3:d6:c1:83:69:e9:92:83:74:
                    34:30:15:0b:08:51:7a:7f:d0:e5:84:96:8e:95:66:
                    99:ee:0c:94:16:0a:11:7d:34:9d:83:70:b3:b9:f5:
                    ef:29:79:41:65:24:07:26:e2:c8:76:6a:15:ee:2c:
                    0c:e2:ca:92:6a:e9:1c:f4:96:72:d8:74:98:6a:9b:
                    85:03:7a:c4:9a:9e:cb:df:bd:f6:68:d9:7d:29:b2:
                    c2:5a:63:4d:1e:3e:6f:8a:fa:db:44:45:9e:00:bc:
                    19:bd:fb:9d:4e:66:c9:f0:27:0f:7a:2d:c4:49:43:
                    6f:ee:1f:16:71:0d:cc:35:62:83:45:32:0f:a8:79:
                    94:6d:6e:7d:49:79:ed:70:f2:33:dd:20:4d:93:23:
                    54:0a:0b:fc:23:47:8c:78:09:bb:7e:62:38:ee:b2:
                    2a:78:78:b3:be:0c:d6:3d:ff:99:3a:ef:45:94:46:
                    80:4f:25:c5:e1:e4:15:39:31:42:17:dd:4e:90:74:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:48:7D:7D:6B:2C:D9:AE:A7:50:B5:04:73:B9:92:85:D9:1B:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F7634AACC5E11F1984653EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:ff:7d:60:ab:96:04:fa:1b:66:09:41:d1:c3:77:63:88:
         d9:d0:57:5a:02:eb:e1:4f:f9:20:43:9a:fc:f3:db:9a:b8:16:
         74:8f:44:c9:19:4c:3d:c3:73:77:e1:62:43:6a:56:d4:02:c3:
         32:36:51:fe:80:44:2d:9e:27:c0:f5:61:eb:88:28:6d:83:53:
         9d:d7:18:33:65:ef:7f:a9:02:5a:f1:b4:54:da:4e:02:8d:30:
         16:eb:6e:6c:e6:08:49:dd:1f:6f:2b:f4:9b:ad:fe:77:21:b4:
         6f:4a:bf:55:b7:18:6a:0b:91:98:d1:6c:a1:1a:73:3d:91:f3:
         87:d0:6b:f8:39:65:d1:78:b5:ae:6c:df:4c:42:d6:57:58:c3:
         8f:ca:75:b2:a7:40:69:55:97:94:a3:e4:cb:68:80:b2:72:32:
         ba:12:76:15:f3:28:8e:1a:d2:fb:32:dc:a1:c1:2a:d6:ab:b2:
         8e:c0:94:97:6e:78:b9:fe:c8:0f:c5:12:cf:21:36:75:a6:86:
         45:a4:23:4c:7a:60:eb:ba:49:1a:8d:30:ee:de:fd:c4:a3:0e:
         fe:e4:ac:4e:7c:34:98:3d:7f:15:71:8e:0f:9d:b0:0b:d5:8e:
         3f:50:f0:c4:ad:c5:6e:7e:66:ac:9d:fc:21:e1:86:83:fe:0c:
         f3:c4:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----