Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889ABC76A12411F1BA2578B5CE1D38B0.roa
File:                     889ABC76A12411F1BA2578B5CE1D38B0.roa (raw, json)
Hash identifier:          XqXd4Z/YtOrICm/9Z+JEsy34qlPDOLrgQTpdAvwNrTc=
Subject key identifier:   79:27:54:62:EE:99:BE:E6:9B:9B:65:3E:2C:37:6B:A5:24:D8:E5:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889ABC76A12411F1BA2578B5CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:02:51 +0000
ROA not before:           Wed 26 Aug 2026 08:02:47 +0000
ROA not after:            Thu 10 Sep 2026 08:02:47 +0000
asID:                     139613
IP address blocks:        45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.207.224.0/19 maxlen: 24
                          45.207.224.0/20 maxlen: 24
                          45.207.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119031 (0x1d0f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:02:47 2026 GMT
            Not After : Sep 10 08:02:47 2026 GMT
        Subject: CN=6a8e9dab-0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:1e:ff:3c:ca:dd:ae:05:97:08:ba:93:e4:
                    a9:cf:64:8d:81:eb:b6:48:ad:c1:50:25:1f:1c:a2:
                    3a:c6:3d:00:16:6c:dd:3d:12:cd:04:4d:07:29:5e:
                    fd:57:eb:a9:90:99:97:56:ac:48:de:ca:9c:c3:e5:
                    51:54:99:da:21:6e:7a:3c:dd:36:bd:c6:ab:5b:8e:
                    4b:ec:ad:3d:5f:99:93:a7:cb:20:56:0f:fb:02:6d:
                    19:14:98:5f:32:31:9e:20:4a:72:91:aa:c1:c2:f8:
                    85:b4:8a:96:f8:af:4e:ac:ea:b4:c0:83:73:ab:e1:
                    22:75:7d:08:22:60:0b:bb:25:cc:43:ca:f4:80:d3:
                    ea:89:9e:91:eb:51:56:ef:45:54:6a:92:1b:2c:90:
                    ef:5e:bc:a8:61:ba:f5:d1:fa:7d:27:12:2c:e2:e0:
                    79:8b:4c:db:70:af:01:d9:be:eb:e2:53:71:db:ca:
                    6a:71:50:85:09:27:4f:99:ff:7c:79:1d:72:c4:c5:
                    05:45:4f:72:01:12:99:cc:38:0b:47:36:d6:7f:0b:
                    25:c7:6a:4b:dd:66:0d:fd:24:00:f1:3a:ee:9d:51:
                    54:be:04:bc:28:a2:67:15:9d:f6:6a:da:06:2a:21:
                    30:0f:89:66:4f:62:79:a0:77:10:ef:34:7f:37:29:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:27:54:62:EE:99:BE:E6:9B:9B:65:3E:2C:37:6B:A5:24:D8:E5:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889ABC76A12411F1BA2578B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.216.0-45.201.231.255
                  45.201.240.0/20
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:02:b3:b7:5e:83:7b:47:55:cd:95:f7:25:1f:f4:3a:e6:
         66:72:76:66:fd:79:e2:9c:9a:4a:b2:61:98:a6:79:34:6f:8e:
         b5:6f:da:59:f9:3d:99:40:de:22:51:7f:0e:39:2b:b5:74:6f:
         1a:3f:05:01:12:56:fd:8f:03:93:21:aa:66:52:02:d9:31:a3:
         cd:1a:96:3d:32:6c:d3:da:10:ef:3a:54:a3:c9:c2:16:cd:ea:
         12:29:3d:ca:67:24:6a:bc:44:9d:0f:f3:cd:5f:e2:9b:2e:b6:
         17:0b:23:f9:6f:46:ba:13:2f:f9:85:28:d1:a7:d4:01:b1:32:
         bd:0a:13:e5:c7:14:ac:97:00:6b:37:bf:0d:5c:13:52:3d:bc:
         99:ce:22:18:5c:61:68:d7:dd:0e:bf:9c:a5:67:58:a6:cf:00:
         89:fc:c3:38:af:39:05:6d:61:e0:cf:60:e9:ee:80:4a:e8:79:
         b0:e4:ae:ba:ee:0c:75:8a:7f:38:3b:6d:bc:ed:b1:26:f6:87:
         76:71:c2:d1:a1:82:0c:fe:25:6b:8c:84:c2:ce:46:aa:2c:ca:
         3e:ba:bb:2e:48:9a:e3:49:37:b4:9d:32:7c:29:95:a9:97:74:
         6d:49:74:78:c3:1c:81:b3:ed:6f:c3:a8:6c:d3:f3:cf:0a:a2:
         dc:de:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----