Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93337D40988B11F198EC15D7CE1D38B0.roa
File:                     93337D40988B11F198EC15D7CE1D38B0.roa (raw, json)
Hash identifier:          RjY/D4NMucoXQg6TeklX6tQte4NHPYpVmI1cXOqbiQ0=
Subject key identifier:   D6:8F:A2:B7:3A:47:91:54:B6:04:AF:B9:17:03:F8:84:90:C7:E3:77
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93337D40988B11F198EC15D7CE1D38B0.roa
Signing time:             Sat 15 Aug 2026 09:27:47 +0000
ROA not before:           Sat 15 Aug 2026 09:27:42 +0000
ROA not after:            Wed 18 Aug 2027 09:27:42 +0000
asID:                     13335
IP address blocks:        45.196.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117976 (0x1ccd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 09:27:42 2026 GMT
            Not After : Aug 18 09:27:42 2027 GMT
        Subject: CN=6a803112-6e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:b4:2d:99:dc:bf:52:d4:08:53:0b:a7:2a:
                    95:b1:87:97:d2:2c:82:d8:21:d0:1f:67:d5:24:c8:
                    36:b9:ff:06:1f:93:c0:dc:4d:75:40:bd:eb:f1:ad:
                    d2:b0:a7:84:eb:f1:a5:7f:f8:e2:08:61:6c:87:9f:
                    20:4f:47:78:39:a4:76:ee:6a:bf:25:47:9f:83:f2:
                    ff:a4:30:cb:05:c4:8c:6a:e6:a8:7a:1f:d1:41:3c:
                    6b:06:d0:0b:87:c1:3a:34:d7:8f:53:a1:47:0b:bc:
                    2c:bf:3d:cb:81:c1:a2:f4:64:22:fd:19:ca:ad:f1:
                    29:94:92:e8:85:db:1c:68:e9:14:33:fc:60:5f:97:
                    9d:a5:47:c2:e7:71:0a:4b:90:75:65:bd:30:3d:ad:
                    1e:99:41:7d:62:ed:bf:cd:93:03:9e:91:ad:b1:91:
                    b4:24:ac:88:8f:ef:60:b6:8f:02:bc:62:c0:2c:c9:
                    c5:f6:38:32:8d:6d:33:11:35:24:82:2e:a3:af:5f:
                    5c:77:b5:f0:32:ca:1c:5a:a4:a5:00:dd:9f:c4:31:
                    43:ef:f1:db:d7:d0:47:9a:9e:97:5a:6e:97:09:90:
                    5e:70:79:96:3e:34:f5:93:65:9f:8f:56:8b:88:cf:
                    bb:42:df:5a:2a:8d:93:69:28:c5:33:21:35:02:d9:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:A2:B7:3A:47:91:54:B6:04:AF:B9:17:03:F8:84:90:C7:E3:77
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93337D40988B11F198EC15D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:e0:cf:fb:8a:f0:27:84:8b:0f:e3:79:29:54:b8:e9:9a:
         00:4b:d6:f5:30:e1:9a:76:f3:21:ba:6a:c0:ff:51:c3:50:93:
         ef:33:52:b0:34:8f:36:c5:33:41:2a:aa:e7:8f:2b:50:99:ae:
         a1:29:e8:0e:44:64:b8:6d:a2:dc:66:9d:1c:92:36:7d:7c:f3:
         70:e9:3a:9c:cb:9c:23:8c:28:43:2a:08:01:2e:44:82:24:d4:
         3a:28:03:ba:d2:75:99:88:bc:ed:9a:ec:50:c0:e7:df:ba:c9:
         37:b6:52:b0:12:e9:7d:5e:a1:3e:be:bb:40:91:e2:3c:c9:b2:
         a4:11:3d:1a:19:3d:49:17:19:47:08:1c:f2:91:06:2c:66:df:
         a3:27:fd:de:bc:13:55:eb:15:70:a8:b0:10:e6:f8:45:f6:b2:
         b6:82:c3:6e:3a:63:f6:db:d3:22:95:bd:13:1d:c4:b7:17:c4:
         63:9a:90:77:f4:f0:7c:47:ec:37:64:8c:a0:ca:35:d2:66:07:
         66:a5:6d:51:a5:89:f0:da:4e:19:c2:28:10:c6:ba:7d:eb:dc:
         86:57:34:18:83:7e:c7:3b:44:ef:04:d4:8b:87:5c:d9:09:da:
         c8:d6:1a:58:ef:80:35:04:2d:9d:7c:b4:0e:9c:a2:ba:88:52:
         04:95:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----