Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/931E346C9D3B11F18A05E6C3CE1D38B0.roa
File:                     931E346C9D3B11F18A05E6C3CE1D38B0.roa (raw, json)
Hash identifier:          KiTI5/v8wvvQHL790N5X1cvKZZBW/FdTGIixjChDXco=
Subject key identifier:   BF:0C:2E:7B:70:76:90:30:0A:90:A1:D6:A1:60:70:85:BE:47:6E:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/931E346C9D3B11F18A05E6C3CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:37:43 +0000
ROA not before:           Fri 21 Aug 2026 08:37:38 +0000
ROA not after:            Sun 27 Sep 2026 08:37:38 +0000
asID:                     6079
IP address blocks:        45.203.210.0/24 maxlen: 24
                          45.203.221.0/24 maxlen: 24
                          45.203.222.0/23 maxlen: 24
                          45.203.244.0/24 maxlen: 24
                          45.205.85.0/24 maxlen: 24
                          45.205.110.0/23 maxlen: 24
                          45.205.132.0/24 maxlen: 24
                          45.205.151.0/24 maxlen: 24
                          45.205.154.0/24 maxlen: 24
                          45.205.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118651 (0x1cf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 08:37:38 2026 GMT
            Not After : Sep 27 08:37:38 2026 GMT
        Subject: CN=6a880e56-5c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:c6:22:59:f3:ba:61:8a:d3:f7:93:81:ad:
                    23:f3:f0:4a:8f:10:48:25:fe:4d:11:e7:97:6a:98:
                    fd:2f:f3:20:e3:90:9f:72:6b:36:5a:d1:20:46:df:
                    ae:31:5a:ec:2f:96:3d:5c:d0:ba:2d:0c:6e:43:8f:
                    07:59:b1:d7:64:42:13:10:d7:2d:90:ee:51:9f:43:
                    3f:b9:48:45:26:66:0b:66:88:6d:8c:b1:a1:6d:61:
                    2e:f1:a8:e9:33:80:3f:7a:a3:27:02:59:30:d4:db:
                    27:38:28:5b:d1:0f:c6:9f:37:f4:7d:4e:e5:3b:ec:
                    b5:9f:c4:09:39:4f:53:8c:0f:48:85:72:4e:62:fd:
                    f5:f0:37:b2:34:d0:dd:11:74:3d:51:d7:c1:66:c4:
                    e2:c6:b4:f9:c4:7b:7c:da:0e:17:ba:2b:3a:5b:e4:
                    d0:b4:7a:6f:ee:6c:ca:44:05:5a:99:49:88:01:ed:
                    89:d4:c9:e0:52:1a:8e:6e:f2:e5:d3:0c:b7:22:5a:
                    eb:f4:ad:84:a7:3f:73:54:86:3e:f9:53:50:8c:f6:
                    2f:ad:c1:17:77:98:21:36:30:a5:0c:79:be:d1:99:
                    0b:8e:6f:00:46:6b:72:bc:69:a6:68:5d:bb:87:68:
                    31:29:1e:9e:bf:0f:ec:13:b3:01:be:57:d7:df:55:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:2E:7B:70:76:90:30:0A:90:A1:D6:A1:60:70:85:BE:47:6E:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/931E346C9D3B11F18A05E6C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.210.0/24
                  45.203.221.0-45.203.223.255
                  45.203.244.0/24
                  45.205.85.0/24
                  45.205.110.0/23
                  45.205.132.0/24
                  45.205.151.0/24
                  45.205.154.0/24
                  45.205.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:27:af:79:a3:26:28:72:f6:69:ba:11:47:a9:90:b5:ed:
         50:3b:5d:0d:82:33:e2:c9:ec:14:79:0d:ec:0f:ff:f3:1f:3a:
         45:3f:80:7e:5c:f9:95:dd:80:54:36:00:d5:58:3c:69:0d:8c:
         50:89:3a:c1:16:f3:98:cb:de:8e:a0:3f:83:4c:1c:5a:fd:1b:
         7e:75:72:cc:e8:51:d4:e3:a7:93:56:38:e4:9e:70:48:0b:8d:
         d8:a6:68:4d:6e:e6:74:b4:14:52:93:97:b8:43:93:ce:14:40:
         4a:6f:f7:b0:09:a3:1b:50:99:b2:93:de:b6:3e:36:6f:b9:d3:
         4a:ea:bb:7c:fd:0e:cc:b0:86:85:a0:89:c1:59:b4:e4:82:9b:
         ed:79:09:f8:8d:3d:e2:74:cf:4c:b6:a8:9c:f9:0e:69:61:c4:
         2c:4f:10:44:3d:3b:50:9e:47:dc:cc:c8:64:7a:ff:49:ae:25:
         db:19:a2:1e:63:ca:7e:81:8e:a2:5e:50:7f:a0:3c:2f:23:7a:
         26:58:dd:9e:f2:8c:6c:04:61:8b:0c:b7:25:74:58:44:4e:6f:
         56:94:15:11:9e:fb:15:82:1b:42:c1:b4:7f:ef:df:8f:9e:6d:
         9a:d2:0e:c8:99:21:cd:6f:b7:f8:33:b8:4c:86:12:fb:e6:d9:
         50:d6:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----