Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B3193AC86011F1A68840E6CE1D38B0.roa
File:                     82B3193AC86011F1A68840E6CE1D38B0.roa (raw, json)
Hash identifier:          YD+he0BDjH36etlY3EpV9emrvXEWJPT3e/y35Cwoyz0=
Subject key identifier:   52:FD:2B:3F:30:13:41:A4:79:E3:4E:92:4D:C3:0B:9A:B5:65:52:F6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B3193AC86011F1A68840E6CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:20:26 +0000
ROA not before:           Thu 15 Oct 2026 06:20:22 +0000
ROA not after:            Sat 14 Nov 2026 06:20:22 +0000
asID:                     273935
IP address blocks:        45.196.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122210 (0x1dd62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 06:20:22 2026 GMT
            Not After : Nov 14 06:20:22 2026 GMT
        Subject: CN=6ad070aa-3b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:91:c8:a0:73:84:9f:f7:cd:f0:a5:44:e2:
                    d7:03:c0:98:d0:63:7a:6b:cc:c6:60:aa:02:6b:ec:
                    7d:d2:93:66:71:a9:d4:a4:10:df:1c:ba:e5:67:f9:
                    6a:2d:05:c3:49:3f:84:af:2f:da:e4:57:bb:3f:53:
                    26:b6:6b:11:69:79:13:23:2d:c3:ba:37:69:89:20:
                    ae:6f:57:97:5b:fe:73:24:cc:0e:04:66:14:0d:11:
                    1d:21:a1:1a:d8:fd:51:ed:dd:35:cc:17:b2:a0:db:
                    9e:6f:b9:1f:e1:43:d8:35:12:dd:34:61:74:39:53:
                    a9:e4:8e:94:55:c5:ec:ba:05:28:8a:43:6b:5a:67:
                    2c:55:b8:67:ed:ae:36:fb:c1:aa:99:0f:a4:85:31:
                    29:3d:3f:24:73:35:d7:20:2b:fc:7b:a0:bc:55:dd:
                    72:e5:d8:24:6f:e8:8c:cc:76:d6:b8:ac:f6:66:35:
                    85:1d:fa:1b:1d:34:78:2b:d8:9a:a9:e7:69:41:da:
                    70:52:dd:b7:ad:38:e8:06:80:3d:6d:74:a9:77:60:
                    20:8d:c2:0e:3c:70:7d:e7:1b:1c:6a:8b:d8:cf:94:
                    cb:f4:e1:b0:83:de:28:82:f2:0b:89:c9:ec:f1:05:
                    84:69:29:65:8c:a3:5a:27:bf:77:35:b5:e5:5d:7c:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:2B:3F:30:13:41:A4:79:E3:4E:92:4D:C3:0B:9A:B5:65:52:F6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B3193AC86011F1A68840E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:5d:df:3c:10:6f:57:de:23:ea:67:27:0e:53:c6:7d:7b:
         58:b3:94:1d:1d:15:a4:60:c5:3c:a9:44:69:50:d0:c7:bb:58:
         de:47:37:72:ce:9c:76:8b:df:27:60:6c:c0:3d:c2:39:3e:e0:
         9c:2e:5d:9a:90:5a:d5:d3:72:87:59:bc:f8:fc:fb:e9:c7:6e:
         5c:ba:3a:50:58:f4:0a:dc:f6:fb:cb:68:4e:3a:72:45:3f:0e:
         9d:55:e1:c0:b0:f6:43:97:86:4f:42:01:ea:2d:27:89:c0:46:
         50:69:ed:a2:19:72:3b:01:a6:2f:d2:53:b3:2c:c2:fe:ed:6a:
         c5:d2:ad:b5:28:a9:4b:f4:3e:c1:3a:83:83:b5:96:35:ad:82:
         88:c3:b6:36:9b:9b:eb:6f:a1:64:0d:b5:d8:ac:29:c7:c5:93:
         58:a0:a4:2a:79:6c:70:5a:0b:d5:d7:1e:8d:3a:74:12:8a:72:
         85:dd:70:24:46:e9:2a:1c:0e:b7:ea:6a:33:12:65:2d:95:fc:
         ed:db:5d:60:b6:51:71:91:75:11:f4:55:30:a2:35:7e:52:8d:
         ec:85:ce:9c:d5:2e:a2:c0:35:69:dd:43:00:5b:5f:70:2d:dd:
         4b:7d:7d:f1:fb:52:ba:8d:00:e8:56:16:88:89:a8:38:89:38:
         27:26:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----