Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6504E3DAC3BC11F1AC8D381BCF1D38B0.roa
File:                     6504E3DAC3BC11F1AC8D381BCF1D38B0.roa (raw, json)
Hash identifier:          IBsCBWPES1xLeZ38Gop+5K8w9k0a1HG+wM7DAaGib7o=
Subject key identifier:   CF:29:E2:4F:9C:64:8D:43:8F:F1:87:01:88:65:CE:F7:99:4A:7F:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6504E3DAC3BC11F1AC8D381BCF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:35:34 +0000
ROA not before:           Fri 09 Oct 2026 08:35:30 +0000
ROA not after:            Sat 27 Nov 2027 08:35:30 +0000
asID:                     141109
IP address blocks:        45.198.70.0/23 maxlen: 24
                          45.198.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121891 (0x1dc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 08:35:30 2026 GMT
            Not After : Nov 27 08:35:30 2027 GMT
        Subject: CN=6ac8a756-5b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:ae:9b:ec:70:80:c0:2d:2d:81:75:6d:61:
                    9e:e8:cb:80:3d:7d:e9:6e:06:e0:2f:9d:bc:77:94:
                    0d:36:16:ec:02:a6:87:a5:24:30:52:31:e8:9f:ca:
                    0c:77:07:3b:a7:f7:68:3b:6a:e3:85:e2:45:f2:7b:
                    15:aa:db:de:ba:55:f1:27:50:9e:e3:b9:16:96:8c:
                    05:cc:cf:d3:40:32:46:17:9d:32:e4:2f:0c:5e:e5:
                    48:3e:90:5c:e0:c8:6f:17:f5:05:e1:4f:59:bf:f6:
                    3d:be:38:53:53:58:4e:03:fe:73:da:5e:fa:dc:38:
                    c5:b9:8c:1e:af:7b:b1:39:65:e4:4d:f2:19:b9:76:
                    60:60:1f:b6:9c:b0:da:d2:74:54:4e:0a:62:84:52:
                    ba:93:78:6f:62:49:d1:04:63:fd:7f:c7:ce:ad:41:
                    9e:ab:f2:62:a8:1c:d1:5d:a3:0a:91:97:8e:7e:1b:
                    b2:d3:c2:20:06:5b:46:ba:60:4b:bb:11:29:7d:1f:
                    e5:5d:7c:e1:97:5b:ba:bf:82:d1:88:e3:af:15:c4:
                    17:0a:e9:7a:3b:a8:17:b7:4c:f0:41:9b:a2:7d:c1:
                    f8:61:d8:e2:26:34:91:4a:14:71:93:ee:46:74:0e:
                    0e:12:fe:81:4b:e9:35:b0:8b:0d:f8:fc:72:3b:7c:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:E2:4F:9C:64:8D:43:8F:F1:87:01:88:65:CE:F7:99:4A:7F:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6504E3DAC3BC11F1AC8D381BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:74:fb:a9:c0:00:60:0f:4c:e0:82:78:e5:3f:d1:04:8e:
         b0:15:5e:ae:a1:9a:08:4e:f4:63:66:6a:16:ee:bd:e8:ab:27:
         64:76:95:51:b7:7f:d7:73:c8:19:4e:3e:98:a2:a9:ad:b4:e4:
         d5:77:74:f1:25:ee:74:b8:63:db:db:bb:a2:17:76:82:bb:62:
         24:07:93:9e:4b:b2:17:8a:97:94:54:64:75:31:4e:69:32:c8:
         ec:f3:0f:38:b3:b7:3d:7e:fd:a5:bd:ca:85:9d:30:a1:b0:d2:
         da:cd:11:2a:6b:86:e0:6d:4e:3e:99:cc:f8:12:8e:93:b2:b1:
         21:b7:95:9a:71:b3:b5:84:79:90:68:c5:b6:99:b5:5f:76:b8:
         0c:6b:e7:14:d9:44:cd:49:fa:75:2c:7f:39:b6:64:53:87:a7:
         84:89:83:53:b8:2a:a1:a8:95:27:2c:f3:2c:e5:22:79:86:d5:
         1d:c6:c0:8c:41:d6:a0:4e:36:97:2b:71:39:23:f5:97:fb:c4:
         02:fb:1b:82:96:cf:e0:68:7a:4b:0a:48:d1:25:ff:5b:6a:fb:
         fb:7f:81:81:91:71:2d:44:21:ab:13:16:c1:79:b5:a9:0c:a9:
         c8:1a:8b:96:c5:a1:5b:cd:c8:4e:2b:16:e0:74:11:fb:e0:48:
         3c:8e:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----