Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EE769A94AA11F18AB1DBC8CE1D38B0.roa
File:                     69EE769A94AA11F18AB1DBC8CE1D38B0.roa (raw, json)
Hash identifier:          g19WHo/B0epATty+G0lrDaR1vYOlgs+AyB/eUIvmnDA=
Subject key identifier:   82:AD:BE:81:A8:F7:CB:DE:E6:F2:D3:C8:0B:DB:EB:09:AA:0A:4B:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EE769A94AA11F18AB1DBC8CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 10:58:27 +0000
ROA not before:           Mon 10 Aug 2026 10:58:23 +0000
ROA not after:            Wed 16 Sep 2026 10:58:23 +0000
asID:                     401434
IP address blocks:        45.196.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117542 (0x1cb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 10:58:23 2026 GMT
            Not After : Sep 16 10:58:23 2026 GMT
        Subject: CN=6a79aed3-691a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:6a:4f:bf:df:4b:b5:e8:9f:f5:e7:86:7b:
                    3c:3d:65:b7:24:ba:4d:df:bd:f4:fb:2c:39:18:9d:
                    20:9b:0f:42:ff:78:5a:c5:05:90:8e:cb:0c:dd:73:
                    e5:20:98:44:4c:0b:2b:0d:ff:bb:89:98:21:c7:93:
                    e3:cb:9a:73:e2:71:26:ea:eb:7d:8a:ec:59:0f:e1:
                    86:ff:78:cb:1c:83:ef:0c:37:d7:62:c4:c5:e2:b6:
                    e3:9d:48:90:08:75:56:c1:35:ba:db:fe:21:7d:9b:
                    94:0c:e9:ef:02:33:9d:0a:ec:9d:27:73:54:96:8f:
                    6d:3d:37:93:78:da:07:46:70:c3:1b:9f:11:86:ee:
                    61:9c:4b:1b:10:f2:6a:f4:36:07:ec:35:76:ba:bf:
                    ad:6e:a5:ad:46:4c:5f:b5:ff:ea:73:7f:4e:0f:fe:
                    46:0c:e0:d2:ce:38:f8:1d:78:40:cb:11:78:94:b8:
                    32:9b:98:43:e2:72:e9:70:52:c1:08:d4:07:fa:ed:
                    c3:3c:14:7f:1f:61:2b:86:cc:5b:77:a7:db:0f:36:
                    e3:05:d4:cf:1d:e9:09:71:9a:d6:cb:7e:2e:0c:05:
                    71:80:5e:6b:13:9d:75:0d:06:7f:82:e6:0a:b2:3d:
                    f7:ea:03:96:49:fd:6d:24:0a:3f:c5:0d:76:56:03:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:BE:81:A8:F7:CB:DE:E6:F2:D3:C8:0B:DB:EB:09:AA:0A:4B:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EE769A94AA11F18AB1DBC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:41:ad:05:21:ed:48:05:10:8b:d7:d3:28:f1:cc:a3:01:
         f3:87:ae:a6:4d:77:5b:7f:0f:3b:56:b6:d1:69:df:5d:f0:4b:
         2e:5a:d7:77:a9:f6:0b:15:3a:2e:ca:09:19:bd:36:68:fb:07:
         aa:c1:17:8f:26:21:eb:4b:a2:8c:68:6c:40:67:e1:d0:6b:fb:
         cd:ff:9b:40:90:87:48:42:fc:5d:75:17:ef:6b:ed:34:b3:df:
         ac:f2:cd:ed:f9:fc:38:17:5e:96:e3:ea:20:28:04:5b:0e:cf:
         f6:20:68:a5:28:5c:fb:bf:b6:33:5a:96:f0:7f:05:90:dd:41:
         46:ab:af:90:07:d6:ab:b4:b8:a0:7b:31:dd:25:99:b9:d3:17:
         88:a9:2c:fe:21:b6:86:34:2e:f1:f2:f9:db:8a:0f:2a:ab:a2:
         ae:a2:ee:9a:db:65:58:ed:3c:67:4b:0f:7e:53:1e:43:e4:8a:
         74:77:af:34:27:ad:fe:e5:32:96:ad:06:bc:4f:57:76:e8:41:
         5b:41:c3:e6:ac:91:89:c5:17:d8:93:d6:09:5b:f3:b3:51:94:
         97:c6:0f:12:8a:10:e0:97:20:d4:9c:46:48:7a:2b:f2:39:33:
         43:2a:1c:bb:15:f3:df:dc:bd:f2:76:bd:82:3b:76:f3:97:85:
         01:dc:31:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----