Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECBD59EBC9611F1AF0EBEE2CE1D38B0.roa
File:                     7ECBD59EBC9611F1AF0EBEE2CE1D38B0.roa (raw, json)
Hash identifier:          DuVQojncp2OTjVYCBF47r5rRg9pQSDt3mE6n8dgBSfw=
Subject key identifier:   20:AD:26:49:23:C7:55:DF:F4:58:1D:38:51:85:C7:20:6F:38:FE:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D990
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECBD59EBC9611F1AF0EBEE2CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 06:16:39 +0000
ROA not before:           Wed 30 Sep 2026 06:16:35 +0000
ROA not after:            Sun 01 Nov 2026 06:16:35 +0000
asID:                     215925
IP address blocks:        45.198.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121232 (0x1d990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 30 06:16:35 2026 GMT
            Not After : Nov  1 06:16:35 2026 GMT
        Subject: CN=6abca947-5c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:9d:98:ab:79:94:3d:32:ad:ca:56:d5:e8:
                    b6:50:15:d0:fc:9a:d2:51:a6:6d:32:63:bd:a8:5a:
                    a7:e9:5b:b8:7b:85:d7:fd:4a:7b:99:f9:41:96:b7:
                    20:16:e9:5f:ea:8d:b7:0d:69:c3:61:79:db:5b:10:
                    49:a8:fe:8e:8e:6a:5d:d7:00:23:fd:75:7c:37:7a:
                    30:ea:41:a1:a5:77:a7:5a:d9:63:97:06:b7:33:0d:
                    62:b2:f8:4f:b8:bf:f4:4c:f6:30:40:45:4c:26:a9:
                    66:c3:d8:53:85:a3:55:fd:5c:c8:12:a4:8a:37:dd:
                    e1:a1:20:e6:b5:80:5b:e3:91:2e:f1:9d:d9:98:1b:
                    50:d2:3a:5e:48:c0:d8:27:ae:c7:fa:0a:bf:9f:9f:
                    12:2b:75:67:77:cd:ea:88:e5:27:93:7c:1f:fc:39:
                    05:dd:1f:54:ab:e3:a8:ac:31:85:04:9e:13:34:55:
                    c3:ef:ed:aa:7e:9e:cb:61:0a:c8:f6:ff:ec:84:73:
                    c3:6f:d1:c2:1b:92:51:60:61:85:b6:8c:dc:ac:59:
                    bc:8d:23:7a:b1:5c:ce:96:52:2d:d3:14:a4:90:27:
                    73:21:40:61:59:89:e3:ad:68:7d:d4:42:cc:e6:b9:
                    1a:0b:02:ee:f4:70:9d:ed:72:23:be:3b:9d:80:38:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:26:49:23:C7:55:DF:F4:58:1D:38:51:85:C7:20:6F:38:FE:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECBD59EBC9611F1AF0EBEE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:73:e8:24:79:1d:1d:ad:22:84:96:58:1e:27:ba:19:68:2b:
         68:2c:d5:32:b7:7e:ec:8a:a4:a2:6b:1b:c2:ff:c8:30:dd:50:
         cf:c6:dc:29:88:3b:66:3e:81:18:b9:c6:a2:8b:0a:a3:24:69:
         ed:92:73:bd:15:52:18:05:75:a5:95:83:09:85:c9:85:ac:37:
         0f:fc:aa:d7:c2:b2:f4:9c:3d:da:94:14:cb:3e:1b:d8:a6:e1:
         32:79:68:7b:b5:32:40:8a:4f:67:bd:c8:75:bf:ce:f7:e4:d0:
         99:23:55:cb:68:13:b1:87:a3:86:7c:0c:8e:9b:1b:f7:3c:68:
         cb:22:2b:b3:2e:d9:ad:6b:ca:cd:1e:84:68:10:4f:bc:21:be:
         41:24:58:d8:8e:72:b1:a2:b5:8f:4e:b4:80:e9:9f:80:84:7d:
         35:a4:cd:f0:b1:e9:39:f3:9d:db:71:b1:ab:fb:dc:8b:66:f8:
         99:6a:12:fa:3d:1f:b1:c7:4c:a9:88:30:d9:44:c3:66:47:c8:
         1a:79:32:e3:56:fd:30:49:57:4d:d5:af:af:9d:eb:c7:96:e9:
         3a:b0:8c:c4:03:40:0a:26:fe:49:54:c8:31:3f:30:63:95:65:
         57:92:08:b8:c7:71:28:08:8a:ca:b4:34:95:e0:bf:39:3a:db:
         2a:24:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----