Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C180969D4B11F1A37A66A2CE1D38B0.roa
File:                     69C180969D4B11F1A37A66A2CE1D38B0.roa (raw, json)
Hash identifier:          pjK9SzXZOoNG1GWlwb4ePBwtHS4D1+sZv1oF9ZfSsvc=
Subject key identifier:   B3:AB:E9:3D:D5:B0:1C:F1:DE:F3:1A:37:09:E9:F2:FE:DA:7C:FD:61
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C180969D4B11F1A37A66A2CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:31:05 +0000
ROA not before:           Fri 21 Aug 2026 10:31:01 +0000
ROA not after:            Tue 29 Sep 2026 10:31:01 +0000
asID:                     202656
IP address blocks:        45.199.200.0/24 maxlen: 24
                          45.199.201.0/24 maxlen: 24
                          45.199.202.0/24 maxlen: 24
                          45.199.203.0/24 maxlen: 24
                          45.199.204.0/24 maxlen: 24
                          45.199.205.0/24 maxlen: 24
                          45.199.206.0/24 maxlen: 24
                          45.199.221.0/24 maxlen: 24
                          45.199.222.0/24 maxlen: 24
                          45.199.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118691 (0x1cfa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 10:31:01 2026 GMT
            Not After : Sep 29 10:31:01 2026 GMT
        Subject: CN=6a8828e9-4e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:39:16:fa:2e:21:67:f7:78:34:d2:cb:12:2e:
                    63:da:36:25:a4:3b:9a:2e:cf:da:b3:f6:11:a3:17:
                    86:34:fb:4e:a5:dc:52:40:ca:ca:7c:a9:9b:e3:e1:
                    0e:7c:80:12:17:f1:88:e7:3b:87:e8:b3:cc:d9:60:
                    5a:db:46:5d:e9:37:12:7d:ab:ae:5e:06:58:5c:16:
                    de:58:16:68:e1:b1:ca:a6:db:a7:18:c2:f5:e8:3a:
                    11:b1:c5:26:b4:b5:b6:47:37:99:17:9c:38:31:70:
                    b8:38:41:4d:05:4b:fe:d8:71:0a:34:ec:02:c6:b7:
                    85:81:b2:be:83:2d:72:2d:f9:96:71:8a:83:89:43:
                    f8:0c:36:f9:45:99:45:3f:ed:b6:ef:6d:a2:41:cd:
                    bb:5d:26:92:c4:3a:c9:f2:2b:66:1d:25:b2:19:d2:
                    ed:11:79:37:3a:41:22:3f:03:2b:f1:24:ce:d2:79:
                    75:6c:05:27:93:a7:3d:22:4c:7b:76:2e:6b:1b:7d:
                    a9:5c:16:a0:27:fe:21:57:a9:26:7a:36:81:50:93:
                    e0:c6:08:20:9e:36:f0:5e:c2:5e:7d:3d:3c:d0:a8:
                    ca:59:3c:09:4a:8f:13:d3:0d:ce:aa:6c:e4:8c:7b:
                    b0:13:a3:42:11:9e:2f:7d:17:f4:bd:6a:d0:34:99:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:E9:3D:D5:B0:1C:F1:DE:F3:1A:37:09:E9:F2:FE:DA:7C:FD:61
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C180969D4B11F1A37A66A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.200.0-45.199.206.255
                  45.199.221.0-45.199.223.255

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:71:56:d6:29:88:68:0b:da:9b:ca:8d:2b:39:2e:21:e3:
         a6:94:61:57:02:3e:9c:23:7a:0c:74:31:0b:11:68:24:c5:2b:
         a4:ad:81:21:fc:7a:1b:7e:87:1a:3b:c8:3c:a3:5a:61:a8:f0:
         3c:29:cb:bb:d1:04:0c:47:df:25:3a:00:49:0d:73:2b:4d:cd:
         52:4e:4c:76:4e:33:55:97:fb:14:ef:03:c0:0c:fc:f1:06:b0:
         d7:34:24:4b:ba:be:22:2f:c0:4e:c4:93:0f:0a:d8:e0:0c:30:
         fc:5a:fa:9c:b5:fd:cb:7a:db:ae:ad:40:61:74:fa:f3:2a:f8:
         21:91:dc:c5:37:37:1d:0c:29:5b:0d:1d:9c:e1:65:f1:4b:d7:
         15:d2:a4:01:65:08:37:cc:50:26:62:48:88:16:0d:35:23:44:
         0b:86:d4:ea:32:cd:00:fc:d1:9b:74:2c:06:bf:ad:91:75:d1:
         a4:af:ef:de:47:71:17:77:f5:5d:ce:41:1d:cb:e2:22:2d:e6:
         63:0d:49:dd:93:7e:00:3e:73:04:e5:30:8d:4e:21:b5:8e:07:
         fc:13:39:8f:d1:f9:a8:40:a5:16:d0:77:a5:b1:19:21:9e:95:
         8b:d7:45:c0:91:87:27:f0:12:74:fb:f6:4c:13:1e:ed:aa:0a:
         da:a4:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----