Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/976FB3BE961B11F1A63AB907CF1D38B0.roa
File:                     976FB3BE961B11F1A63AB907CF1D38B0.roa (raw, json)
Hash identifier:          B37+P8eeXQ/jSFy1O7TSoHn5Nov02Mup5ij1zNbUIl8=
Subject key identifier:   F6:9B:19:09:E9:4B:60:39:84:E1:71:73:DE:E6:31:6F:52:CF:2E:4A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/976FB3BE961B11F1A63AB907CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:01:08 +0000
ROA not before:           Wed 12 Aug 2026 07:01:04 +0000
ROA not after:            Tue 15 Sep 2026 07:01:04 +0000
asID:                     63023
IP address blocks:        45.206.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117667 (0x1cba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:01:04 2026 GMT
            Not After : Sep 15 07:01:04 2026 GMT
        Subject: CN=6a7c1a34-1e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:9b:d3:aa:7b:f8:1f:b2:82:6d:cb:af:aa:
                    f0:75:e4:c8:b4:86:21:47:b3:6b:12:90:5f:a0:12:
                    cd:1a:54:7a:df:e0:4b:69:b8:28:fa:e1:df:d6:c9:
                    c1:4b:33:6e:79:b5:28:42:ba:8a:29:91:02:03:b1:
                    c5:13:fa:04:16:af:e8:67:c0:5e:71:4b:a2:76:18:
                    19:a5:58:28:04:5d:18:10:30:2c:f7:76:46:0b:55:
                    68:03:8b:2a:e7:45:ec:80:70:be:b4:a8:d6:72:64:
                    1f:13:6b:65:64:d9:b1:b0:44:99:d8:e9:df:cd:0f:
                    e7:61:df:95:86:a0:88:63:c1:30:50:7e:7b:c5:a8:
                    fd:65:89:15:9e:dc:cd:c0:36:8d:ef:fb:01:40:39:
                    3f:d2:ee:b1:0a:f5:53:36:bd:39:d8:56:07:10:f0:
                    c5:28:f8:37:6e:7d:99:f8:d8:f6:6c:8c:18:bc:ef:
                    3f:aa:cd:b0:77:61:f6:65:55:0a:cf:b9:7b:b0:61:
                    b3:12:cd:1d:ba:9f:e6:ac:8f:6e:18:9f:fd:ae:d0:
                    4b:7b:3d:ce:ce:6e:3b:7e:8e:6f:af:b7:66:89:b1:
                    f9:fd:2d:ff:d0:f6:e3:db:1f:76:82:1e:93:63:46:
                    ad:ba:0e:9d:3a:72:d8:ca:79:a7:b4:cc:13:37:aa:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:19:09:E9:4B:60:39:84:E1:71:73:DE:E6:31:6F:52:CF:2E:4A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/976FB3BE961B11F1A63AB907CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:27:7c:b0:35:c5:c7:a2:94:36:b8:38:33:0c:bf:5a:b6:d4:
         14:14:fe:14:6f:01:44:b1:0a:2d:e7:dd:2d:af:58:fe:c6:36:
         f1:ee:87:4c:f3:e3:94:18:e7:58:a7:30:3d:88:5f:3c:4d:41:
         c0:71:43:35:fa:b1:2c:7c:ed:db:f6:7b:b3:77:26:04:4c:b3:
         8f:63:75:ad:62:a8:7b:13:05:66:1a:49:38:a5:7a:27:cd:47:
         b8:3f:49:95:20:df:82:29:dd:05:a0:c9:96:3a:7d:be:b7:e5:
         5a:bf:c1:e4:7a:6b:62:7b:9f:0b:e9:eb:06:38:8f:97:b1:6c:
         cc:c6:dd:1d:cb:1b:22:ef:eb:ba:e7:ab:a2:ed:9d:ad:73:d9:
         83:bc:ca:93:98:c8:87:1f:d2:f9:7b:0c:55:c5:c1:a0:b3:11:
         e2:5b:12:2b:14:6e:aa:e9:08:7d:65:36:93:dc:19:c8:38:15:
         e9:3f:75:df:94:09:12:f1:a3:da:57:14:d8:b7:07:f9:3a:d1:
         89:bf:14:72:b2:3c:86:79:06:7e:35:2d:7c:58:a8:04:63:67:
         c0:0b:96:b3:ce:74:5b:23:59:b1:fc:9b:52:69:e0:2d:22:17:
         93:d5:5c:78:f8:cf:d7:3e:ff:5f:f3:3c:61:2e:9e:06:ef:ad:
         53:d8:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----