Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68441E7E962811F1928F2AD4CE1D38B0.roa
File:                     68441E7E962811F1928F2AD4CE1D38B0.roa (raw, json)
Hash identifier:          I8IPzK+QXlw2Pe/OiOsdaOTT+S7HPeB3tuhZ9kUmt64=
Subject key identifier:   4D:D0:79:57:70:7C:57:61:2A:9D:68:D8:06:AB:20:B5:93:9D:97:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68441E7E962811F1928F2AD4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:32:55 +0000
ROA not before:           Wed 12 Aug 2026 08:32:48 +0000
ROA not after:            Sun 12 Aug 2029 08:32:48 +0000
asID:                     17561
IP address blocks:        45.196.178.0/24 maxlen: 24
                          45.196.179.0/24 maxlen: 24
                          45.196.180.0/24 maxlen: 24
                          45.196.181.0/24 maxlen: 24
                          45.196.182.0/24 maxlen: 24
                          45.196.183.0/24 maxlen: 24
                          45.196.184.0/24 maxlen: 24
                          45.196.185.0/24 maxlen: 24
                          45.196.186.0/24 maxlen: 24
                          45.196.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117716 (0x1cbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:32:48 2026 GMT
            Not After : Aug 12 08:32:48 2029 GMT
        Subject: CN=6a7c2fb6-4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:ac:a9:ad:30:86:cc:32:be:aa:58:57:d8:
                    f6:4a:65:3f:86:ee:bb:e2:6d:69:7f:42:43:e0:f5:
                    a7:fc:4b:53:8d:54:13:41:3a:13:da:6d:ad:17:0f:
                    91:60:8c:1e:21:41:32:28:3e:cc:be:f6:1f:55:d2:
                    33:d2:de:24:1b:d7:d9:c0:66:4c:05:8c:8b:f4:ef:
                    aa:6b:30:a5:26:3c:23:73:63:41:f5:47:23:e4:54:
                    9f:24:eb:01:b8:39:2c:51:de:bd:b4:8c:a0:e9:f7:
                    5b:ea:11:60:e7:c8:d1:03:94:1a:74:55:74:52:cc:
                    81:b4:86:d4:5f:a3:38:fc:a4:f7:7a:59:60:61:f6:
                    57:4d:a6:00:b4:ec:39:27:98:71:d2:91:95:67:e7:
                    dd:36:5b:ea:58:38:35:39:7f:12:33:5e:fa:51:07:
                    6f:b5:50:a9:e6:5d:1d:db:d7:75:92:d1:03:29:bc:
                    08:d5:62:c9:98:e4:8e:bd:e5:77:51:82:03:b8:a5:
                    08:70:e8:93:42:b8:4f:d9:c3:13:8d:fa:81:78:bf:
                    e0:46:7a:90:f8:e1:b6:cd:e8:c3:13:4e:1e:f9:5c:
                    4e:82:d4:b3:a6:0c:bf:49:78:3e:3a:d7:25:57:ad:
                    18:0d:da:a4:b2:19:c8:7b:22:2b:af:7b:88:bd:73:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:79:57:70:7C:57:61:2A:9D:68:D8:06:AB:20:B5:93:9D:97:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68441E7E962811F1928F2AD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.178.0-45.196.187.255

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:a1:2e:10:ab:02:0f:44:b4:09:c4:b0:44:35:ec:80:e1:
         8b:73:74:5b:9b:18:a5:c4:fa:2e:c0:43:2f:a3:4f:0b:33:a5:
         ba:aa:b5:61:f8:7a:14:36:d7:99:86:cc:b5:b9:83:7d:46:73:
         66:ae:d2:e2:34:48:fb:14:dd:f0:88:15:b3:a2:30:fd:65:ca:
         07:28:8f:71:7f:98:91:b2:3b:4e:14:72:2d:46:4f:10:98:43:
         37:30:cb:15:f4:64:01:82:8b:d5:ba:4b:a3:2f:28:35:c5:85:
         94:2b:ed:52:11:38:59:9c:cf:20:94:31:85:0d:6c:53:d6:89:
         a6:1e:d2:b5:d2:6f:93:7e:1c:80:e7:ad:31:16:4d:fc:a4:35:
         72:5a:cc:09:10:2d:11:22:da:bc:dc:55:be:72:e9:47:a2:89:
         7e:77:61:8f:4e:26:18:64:5a:b2:03:3c:02:d7:98:99:2f:a9:
         33:cd:03:bc:a9:85:1f:45:ae:2c:72:dd:e2:3e:07:2a:f0:0a:
         65:31:30:dc:c5:2c:a1:11:3f:aa:fe:37:b8:cb:74:ac:51:3b:
         03:6c:9f:64:05:30:5c:2d:75:87:c3:f9:f9:c0:50:b3:66:7c:
         9b:04:db:53:db:14:90:5e:37:28:90:7a:23:2e:9f:e6:04:d9:
         bc:cc:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----