Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DE56FAAA1F211F19B6E4618CF1D38B0.roa
File:                     7DE56FAAA1F211F19B6E4618CF1D38B0.roa (raw, json)
Hash identifier:          IEUoZ4lYCs+Pew0LL43VZyxZapVuKkm6Aywc5i6u9ns=
Subject key identifier:   B1:82:46:39:20:3B:D5:E2:54:DF:21:60:6F:AF:0C:5F:81:EF:5D:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D180
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DE56FAAA1F211F19B6E4618CF1D38B0.roa
Signing time:             Thu 27 Aug 2026 08:37:09 +0000
ROA not before:           Thu 27 Aug 2026 08:37:05 +0000
ROA not after:            Sat 03 Oct 2026 08:37:05 +0000
asID:                     135222
IP address blocks:        45.195.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119168 (0x1d180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 08:37:05 2026 GMT
            Not After : Oct  3 08:37:05 2026 GMT
        Subject: CN=6a8ff735-3d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:28:8b:5d:a3:88:fe:10:e0:b3:e2:ea:c7:
                    db:b4:a5:f9:c8:35:fa:74:96:b7:1e:ab:62:cb:eb:
                    d7:f5:26:67:27:16:e2:24:f8:4d:98:fa:8b:67:98:
                    17:ca:d1:81:65:f8:36:74:6f:46:07:c4:56:16:d4:
                    60:b6:14:ce:c6:83:a0:4b:cb:5b:53:92:13:d5:b9:
                    94:52:fd:8e:37:02:cb:0d:bc:54:c3:82:a1:38:f5:
                    19:b7:de:75:c7:cc:35:ce:08:16:25:2f:f1:24:57:
                    f5:d5:3c:f9:df:9a:11:41:fd:b6:ec:51:83:92:d7:
                    fb:36:b8:07:c2:6e:cc:49:97:6d:bb:98:3a:19:94:
                    75:48:72:ee:79:b2:74:fe:bd:90:b1:bc:ce:49:14:
                    f1:c7:9d:8f:0f:b4:ba:77:85:84:28:af:05:45:4a:
                    bf:62:bb:ce:77:20:82:7a:b9:8c:2c:89:a8:2d:8e:
                    2a:ee:ec:87:eb:9f:91:51:47:b1:99:eb:7e:3b:2d:
                    85:fd:a7:8b:c9:a0:2e:2c:50:b4:c7:16:72:d9:f9:
                    04:54:69:f4:37:43:42:d1:e0:14:85:f4:3d:21:5c:
                    e0:cc:ed:e1:d1:21:e3:c1:98:8e:3d:20:ea:27:8e:
                    5b:24:69:f0:fc:3b:be:1c:7e:3a:76:85:c1:72:07:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:82:46:39:20:3B:D5:E2:54:DF:21:60:6F:AF:0C:5F:81:EF:5D:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DE56FAAA1F211F19B6E4618CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:a2:fd:a3:27:14:97:fb:9f:f5:c1:b6:13:d7:1d:1a:bf:
         c3:99:7a:62:a9:0c:2a:28:85:34:fd:5f:3f:fe:10:ec:74:b4:
         12:74:9c:1b:e7:9e:1e:a4:43:a2:5e:c1:fc:a2:eb:8c:88:47:
         62:e8:11:5f:0d:08:06:7f:00:70:65:33:17:69:7c:13:1d:61:
         b6:2e:55:fc:0f:25:72:13:21:93:3b:34:06:c8:71:d4:ce:64:
         ce:a1:65:39:3e:04:a8:98:53:54:bb:c2:c1:2d:de:7b:d4:d1:
         bf:12:de:b1:80:6e:ac:60:6b:70:92:01:06:45:0e:ef:3e:f8:
         ba:49:1d:e4:8e:d7:f0:eb:ea:f1:fe:19:8c:c3:20:76:62:da:
         18:01:a9:97:ba:19:8c:64:f1:95:96:e8:17:2f:ed:f8:6c:82:
         5d:8c:f8:fc:23:6a:82:86:d1:1d:6e:33:bc:80:d3:69:86:d2:
         00:97:c1:92:15:ad:af:0f:1f:20:da:04:de:47:6d:df:8c:16:
         2d:e7:41:89:0f:4a:06:88:d3:0d:e1:e5:76:5c:d6:de:52:e8:
         56:62:b2:17:86:5e:1b:f2:20:76:34:f3:04:02:fc:cd:96:f8:
         04:33:be:d7:86:91:11:56:87:6d:70:db:19:13:f0:8d:8d:0d:
         bf:43:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----