Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF4BC84D8ED11F1AF62B5ACCE1D38B0.roa
File:                     8DF4BC84D8ED11F1AF62B5ACCE1D38B0.roa (raw, json)
Hash identifier:          iqTMvXuT7XphuXCkp9IeVsokeR6P4jmWMwrJ3HPM+Z0=
Subject key identifier:   97:A5:31:35:A4:52:5F:17:89:22:3B:28:5C:D1:A5:9B:E1:EA:EB:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E2FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF4BC84D8ED11F1AF62B5ACCE1D38B0.roa
Signing time:             Thu 05 Nov 2026 07:50:23 +0000
ROA not before:           Thu 05 Nov 2026 07:50:18 +0000
ROA not after:            Wed 16 Dec 2026 07:50:18 +0000
asID:                     401701
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123644 (0x1e2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  5 07:50:18 2026 GMT
            Not After : Dec 16 07:50:18 2026 GMT
        Subject: CN=6aec353f-a380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:4a:eb:47:0e:cc:ff:85:df:8f:b6:37:0e:
                    f9:91:5c:bc:46:70:26:c0:b5:55:72:99:bd:49:4d:
                    ae:44:19:1d:ae:f1:18:83:0a:c0:8e:7d:43:a5:c4:
                    f4:ae:f3:54:de:e8:0d:33:10:ed:75:9d:ec:dd:83:
                    8e:97:45:2c:4f:b9:b4:e2:e8:fa:ea:b8:5e:a1:39:
                    0a:e7:73:f3:9b:67:a1:46:49:63:46:54:38:45:d2:
                    9c:ab:d1:ec:fb:d5:8d:0f:c8:cc:ec:4c:fe:0a:6f:
                    b3:96:35:11:36:a9:16:a6:5c:ee:1e:f1:9f:4b:cd:
                    b5:bb:a8:1f:d7:72:f4:33:5d:f7:a7:fe:ec:1b:fd:
                    9b:c9:0e:9c:09:88:17:fe:39:58:75:0f:a7:cc:f7:
                    e3:ef:dd:ac:10:5c:32:6a:98:2d:79:57:7e:0b:d2:
                    71:f1:d7:4a:bb:67:58:c2:a3:41:14:a9:06:ee:76:
                    ea:45:50:fb:45:e8:2a:89:5d:b5:90:7e:ce:90:0e:
                    74:65:bf:8d:36:7f:93:c9:f7:fc:f2:a9:e1:c4:83:
                    c9:b0:03:02:e0:cd:e5:ea:76:58:18:6d:7e:dc:1d:
                    ca:23:2c:f0:a3:4d:18:f9:76:eb:71:fe:25:05:0a:
                    5c:3c:12:e6:f2:1d:64:6d:99:a2:5d:f5:6a:97:f1:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:31:35:A4:52:5F:17:89:22:3B:28:5C:D1:A5:9B:E1:EA:EB:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF4BC84D8ED11F1AF62B5ACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:a8:0a:0f:bd:ff:0e:ea:9e:a4:57:e1:fa:5a:ff:7b:9e:
         3c:e6:79:ca:d0:c0:f7:98:9d:05:fa:f6:27:69:c6:9c:17:e2:
         b3:3c:85:70:ec:4f:0b:4f:96:c2:57:b8:de:96:d6:a5:08:31:
         de:af:d9:78:a7:79:a2:24:0c:73:65:fe:41:29:32:d2:f3:04:
         bb:a3:82:3b:61:1d:bc:d3:7a:a4:8b:7b:ad:69:54:3d:b9:ff:
         68:b9:4a:24:53:de:2c:87:cc:c3:49:8a:49:b7:b3:dc:07:84:
         f3:58:70:29:87:2a:67:4e:74:83:70:6b:ca:37:bb:7f:53:d3:
         84:12:d8:19:05:d3:36:c4:ae:75:8d:cc:4f:3e:7f:0c:c6:d9:
         72:1e:1b:eb:48:41:03:db:30:a5:af:46:a4:1c:3d:ec:8e:df:
         bb:22:73:a6:b9:a1:36:0e:7d:4b:30:2e:d2:06:78:01:cc:c5:
         cb:8e:ae:84:92:34:62:de:e4:62:a8:21:db:25:90:9e:eb:4c:
         b6:3f:74:60:44:76:a7:73:8c:d7:40:d4:c3:cf:2f:d5:ff:db:
         57:98:5d:8e:ed:8f:8f:12:14:8f:7e:55:91:01:ac:6a:de:02:
         80:e7:26:41:44:52:9b:41:6a:9f:40:c6:de:11:60:62:93:c6:
         08:00:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----