Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95272A86948D11F1BAD60A1ECF1D38B0.roa
File:                     95272A86948D11F1BAD60A1ECF1D38B0.roa (raw, json)
Hash identifier:          ehpNN1MxLwpfs+MzSlF9+0VkkO+O60tc/fOqQfg7feU=
Subject key identifier:   B2:54:DF:60:54:52:82:9F:79:81:B8:E9:1B:2D:F0:5C:C1:6A:3D:E3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95272A86948D11F1BAD60A1ECF1D38B0.roa
Signing time:             Mon 10 Aug 2026 07:32:04 +0000
ROA not before:           Mon 10 Aug 2026 07:32:00 +0000
ROA not after:            Wed 16 Sep 2026 07:32:00 +0000
asID:                     61112
IP address blocks:        45.192.240.0/22 maxlen: 24
                          45.192.240.0/24 maxlen: 24
                          45.192.246.0/23 maxlen: 24
                          45.192.246.0/24 maxlen: 24
                          45.192.247.0/24 maxlen: 24
                          45.196.96.0/24 maxlen: 24
                          45.196.97.0/24 maxlen: 24
                          45.202.240.0/22 maxlen: 24
                          45.202.244.0/24 maxlen: 24
                          45.202.245.0/24 maxlen: 24
                          45.202.246.0/23 maxlen: 24
                          45.202.246.0/24 maxlen: 24
                          45.202.247.0/24 maxlen: 24
                          45.202.248.0/22 maxlen: 24
                          45.202.248.0/23 maxlen: 24
                          45.202.248.0/24 maxlen: 24
                          45.202.249.0/24 maxlen: 24
                          45.202.254.0/23 maxlen: 24
                          45.202.254.0/24 maxlen: 24
                          45.202.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117457 (0x1cad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 07:32:00 2026 GMT
            Not After : Sep 16 07:32:00 2026 GMT
        Subject: CN=6a797e74-9759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:26:22:c7:06:c7:75:56:06:c0:a9:d9:d2:
                    99:6d:47:a3:0d:53:f9:14:d5:b3:f0:8b:d1:88:a1:
                    25:04:f6:a2:72:ea:0c:b7:0a:be:a7:02:92:30:e9:
                    af:46:a2:b1:9e:90:ba:4b:b2:77:cc:6d:2b:85:7d:
                    77:47:c6:86:70:5d:7e:40:22:05:1d:d8:6d:15:1c:
                    3d:d5:1a:f9:cf:74:00:db:53:58:2c:db:05:86:23:
                    57:5c:34:3a:5e:42:a8:53:38:4b:9a:38:25:59:32:
                    c3:5f:67:b3:05:8f:42:8a:a7:bf:24:d3:f9:17:d1:
                    ff:aa:43:bf:99:2c:78:5c:f8:e9:a9:a9:91:16:76:
                    86:6d:ed:91:8d:e9:8c:44:49:ee:4c:22:a2:fd:df:
                    fb:68:f0:7b:ac:40:3b:c2:fd:49:a7:f8:e9:db:59:
                    6f:e4:f0:fe:87:16:57:6b:80:9b:fd:31:64:1f:44:
                    cf:d3:20:58:b9:59:91:55:e6:3d:d9:8f:96:1e:c5:
                    63:19:a7:d6:b1:81:fe:73:45:d0:7c:9a:83:b0:a0:
                    04:ee:aa:bf:40:87:4e:45:a1:6c:d7:ed:f9:5d:4c:
                    45:59:83:79:49:56:f0:f5:29:43:1f:ba:64:34:1c:
                    2a:96:eb:2d:06:da:27:33:22:bf:5d:c4:a5:0d:0f:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:DF:60:54:52:82:9F:79:81:B8:E9:1B:2D:F0:5C:C1:6A:3D:E3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95272A86948D11F1BAD60A1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.240.0/22
                  45.192.246.0/23
                  45.196.96.0/23
                  45.202.240.0-45.202.251.255
                  45.202.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:85:b2:f8:67:eb:87:39:90:62:2b:5a:0b:61:2c:69:eb:f0:
         ca:38:c0:52:9e:99:a9:a9:46:77:ef:c4:41:48:0b:8f:84:37:
         b9:f0:3a:0e:1e:dd:31:55:4e:c9:7f:02:96:1f:ff:af:ed:f0:
         c8:e7:b8:80:14:97:61:41:97:e0:8b:bc:d3:74:76:5d:2c:a2:
         85:ca:36:6e:b1:49:9b:22:a5:83:55:b1:47:47:d6:e5:95:59:
         54:19:a8:f4:06:97:da:bf:bc:d3:3f:d5:94:53:14:12:dd:87:
         f5:d3:a2:d9:d9:69:68:c3:65:03:0f:31:2b:12:a5:f8:84:b5:
         ac:d3:44:ed:bd:03:87:86:68:0e:c2:c5:ac:c5:3f:f2:f2:b3:
         74:46:11:7b:c5:50:de:57:3e:22:d9:57:48:85:c7:0d:b7:00:
         9b:20:22:35:bd:73:86:d0:04:44:91:0d:bf:e2:e0:13:7f:7b:
         5c:c4:08:12:1b:50:5d:3f:73:ae:df:d1:3e:6e:9b:c3:1f:4d:
         37:ac:f4:e7:4c:7b:58:22:f9:45:3f:16:e4:34:84:c0:c9:5a:
         aa:65:c6:3e:af:93:60:38:e1:48:db:78:d6:93:59:b0:19:fa:
         b9:ac:21:d7:9d:ad:c5:80:16:76:8a:09:74:e9:5c:97:8c:8d:
         ff:10:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----