Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9936537EC16311F1824A71B5CE1D38B0.roa
File:                     9936537EC16311F1824A71B5CE1D38B0.roa (raw, json)
Hash identifier:          O6riLa0ItmqBZ7QdqpVJuSwo0AXkZqsf7QQ1Sly+4qU=
Subject key identifier:   24:03:E3:FD:9A:3A:15:C7:CC:71:DD:19:FC:CF:8F:4E:0C:38:5D:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9936537EC16311F1824A71B5CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 08:54:55 +0000
ROA not before:           Tue 06 Oct 2026 08:54:50 +0000
ROA not after:            Tue 07 Sep 2027 08:54:50 +0000
asID:                     328608
IP address blocks:        45.206.4.0/24 maxlen: 24
                          45.206.6.0/24 maxlen: 24
                          45.206.33.0/24 maxlen: 24
                          45.206.37.0/24 maxlen: 24
                          45.206.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121712 (0x1db70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 08:54:50 2026 GMT
            Not After : Sep  7 08:54:50 2027 GMT
        Subject: CN=6ac4b75e-ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:9f:83:cd:c9:e6:a9:d3:29:d8:84:4a:6d:
                    f1:92:c1:e2:93:5c:a9:c0:fd:f7:ec:cf:4e:1d:60:
                    f0:97:cf:f0:47:cd:00:21:22:1c:8b:0e:55:8e:30:
                    6b:36:c1:ca:72:25:e6:f7:41:62:e0:b6:27:79:c0:
                    2a:3e:a8:51:cc:c4:e5:a8:31:d6:fb:74:f3:0c:00:
                    17:c7:18:7a:a7:d2:de:8a:4b:86:97:d4:ee:2e:59:
                    85:fe:d4:75:d5:fe:de:2f:1e:85:fb:a5:de:6e:17:
                    0d:0b:78:ee:b3:5e:52:da:c5:c9:88:79:58:03:8d:
                    1a:3a:82:b3:b2:ca:5e:a6:6c:7a:ce:93:af:f4:7a:
                    92:3d:f6:28:17:ca:8a:5b:8c:44:bb:80:9c:02:dd:
                    04:b6:91:a1:7e:33:e3:1c:e6:b4:34:7f:85:6e:12:
                    ea:31:ec:19:ad:38:29:68:f6:de:28:a2:8d:cf:de:
                    66:9d:09:2d:2e:50:39:c6:9b:5f:2e:ac:9e:fc:c0:
                    7d:ef:63:5b:f8:ea:2d:ee:14:0b:43:0f:6a:a3:27:
                    a4:90:11:37:56:b5:ff:75:ce:b5:4b:c8:29:82:7b:
                    bc:7d:94:0c:b6:c9:a5:a2:6e:aa:28:ca:51:e0:35:
                    cd:67:b1:76:f6:9b:a7:2f:1f:bf:03:3b:0a:a0:40:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:03:E3:FD:9A:3A:15:C7:CC:71:DD:19:FC:CF:8F:4E:0C:38:5D:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9936537EC16311F1824A71B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.4.0/24
                  45.206.6.0/24
                  45.206.33.0/24
                  45.206.37.0/24
                  45.206.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:9d:2d:49:91:4f:97:6e:cc:e4:da:0e:ff:90:4c:55:22:b5:
         19:1d:76:23:4d:94:84:36:9c:7d:bd:e2:bc:fc:da:d8:c5:44:
         f7:3c:27:32:79:c5:5b:a9:b8:9e:24:be:b8:9c:0c:73:f3:c3:
         8f:df:b4:4b:6c:06:3a:46:3b:e3:91:d5:1e:70:ff:c9:3d:4c:
         11:6f:90:e9:db:22:36:d4:9b:d8:94:42:0d:ac:a1:2a:e5:bb:
         53:a6:84:97:e9:84:1a:1b:82:d5:18:71:30:7c:bd:29:40:54:
         bb:59:ed:2a:99:5f:cc:05:c4:44:47:21:4e:be:61:2b:f6:0c:
         12:79:bc:20:93:a4:16:de:cc:ea:09:42:cf:fe:fd:33:79:e6:
         20:8e:17:2d:9f:62:41:21:7d:7f:34:95:32:4b:38:ce:6e:22:
         7f:41:c3:be:a8:e5:db:de:d0:8f:ed:53:cf:4d:ae:9c:fb:92:
         cb:42:fd:7a:57:a3:b2:40:e0:75:6d:bc:f2:9a:36:e2:3b:4e:
         d6:5a:a2:2b:e0:be:ff:8f:db:2d:94:08:ef:bd:c0:11:44:97:
         97:d4:22:ba:7e:05:49:bb:25:d4:7b:31:c6:a3:61:1b:90:0b:
         46:75:12:2b:fe:85:8c:74:d8:c4:5d:17:9c:ae:e8:d6:7d:c7:
         3b:ad:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----