Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B07CA8EA08B11F191BD960DCF1D38B0.roa
File:                     7B07CA8EA08B11F191BD960DCF1D38B0.roa (raw, json)
Hash identifier:          nhrkKNCxk6KF4i6P9SJAMqO4P+Q6L/DRm+3j1irRA4c=
Subject key identifier:   DC:C8:F5:4C:92:74:39:F1:95:00:51:47:D6:31:ED:4C:68:EA:CC:35
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B07CA8EA08B11F191BD960DCF1D38B0.roa
Signing time:             Tue 25 Aug 2026 13:47:15 +0000
ROA not before:           Tue 25 Aug 2026 13:47:11 +0000
ROA not after:            Fri 02 Oct 2026 13:47:11 +0000
asID:                     219502
IP address blocks:        45.204.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119006 (0x1d0de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 13:47:11 2026 GMT
            Not After : Oct  2 13:47:11 2026 GMT
        Subject: CN=6a8d9ce3-57e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:e6:1e:53:e5:d8:fb:e1:f8:8d:5b:8e:55:
                    38:2a:aa:0f:c8:e6:08:62:fb:6a:b8:d6:10:c9:61:
                    24:3e:1d:48:09:ce:c5:8b:04:ab:d5:fe:98:e8:95:
                    58:fe:b3:9d:17:3d:59:78:05:ab:82:8b:3c:0b:98:
                    b9:df:0d:e3:45:4d:3a:5f:c8:63:bf:c6:0c:fb:09:
                    31:7b:a7:62:a8:02:02:35:df:40:5e:98:5f:01:68:
                    d4:0e:97:83:62:c8:2f:4f:38:3a:ea:b8:62:bd:9f:
                    b0:e1:50:c6:cc:d0:6a:27:48:7b:9e:cf:f7:89:cc:
                    3b:9d:7f:4b:7e:08:c7:07:e5:41:af:9b:ee:52:08:
                    42:19:57:7c:21:5a:8b:17:15:82:11:6d:e9:fe:17:
                    db:12:30:75:27:6e:d0:bc:2d:f9:98:97:e6:bd:a3:
                    2b:46:f1:35:21:67:b8:c0:47:9f:8c:fe:cb:58:da:
                    00:ab:e4:76:b5:d8:d9:18:5c:a7:cc:c9:f6:cb:46:
                    4c:9d:97:f0:2b:95:69:b6:a4:92:1d:00:4f:81:16:
                    53:ed:b2:ec:c5:44:3f:8c:2f:20:61:d9:b9:d7:d7:
                    b6:ab:3e:78:56:9a:6d:c5:e9:7d:d0:27:2f:c7:66:
                    2c:7b:51:53:d5:5a:83:00:cb:e5:f0:9e:31:86:16:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:F5:4C:92:74:39:F1:95:00:51:47:D6:31:ED:4C:68:EA:CC:35
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B07CA8EA08B11F191BD960DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:a5:47:78:b9:de:79:cf:dc:79:52:c9:e9:ed:1b:a7:62:1e:
         97:93:40:33:bd:4c:8f:42:2e:40:59:1d:b5:6b:3c:99:4a:84:
         4c:4c:26:31:ca:f0:52:a5:04:18:70:be:78:7b:c9:88:48:1b:
         98:19:04:d5:93:e2:97:fc:b3:2e:cc:08:38:62:2c:a1:0c:e6:
         c4:90:09:39:c4:c9:5e:4a:ff:b0:d4:0f:78:46:ac:89:6a:7a:
         b0:06:68:97:1b:f6:e0:ab:b0:f7:ac:20:3d:db:65:37:cc:ea:
         5e:49:0e:69:2a:10:df:b9:98:73:a5:ee:67:23:09:7b:1d:4c:
         22:62:28:47:40:cb:f1:64:d2:d9:37:34:24:76:c5:e9:3b:6f:
         9a:d9:4e:95:40:b0:3f:42:a7:7e:f6:b8:4c:ba:f3:c4:b2:79:
         57:21:d1:a1:d6:59:74:1c:a6:4d:33:93:ab:7b:7d:04:4b:f4:
         46:9e:9a:68:a8:32:cc:22:96:ee:f6:f9:69:39:19:88:99:1f:
         1a:ce:2f:a0:07:f5:6d:42:d5:fc:4e:a0:ec:1f:fb:1d:37:1a:
         14:47:d9:10:15:b1:00:5a:96:6d:4c:10:00:44:f6:b6:d0:e0:
         1e:68:68:db:2d:68:4b:91:1b:44:9c:7a:b2:13:b0:14:b6:e7:
         82:27:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----