Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B26836E987F11F19AE97610CF1D38B0.roa
File:                     9B26836E987F11F19AE97610CF1D38B0.roa (raw, json)
Hash identifier:          M0G2hAioXpxRlXLbeHR7X/sqnEWOiaW+0JhpHgzhyhM=
Subject key identifier:   65:16:8B:FD:A6:B5:5D:7E:45:76:5C:B7:7A:28:F5:D6:CE:01:BA:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B26836E987F11F19AE97610CF1D38B0.roa
Signing time:             Sat 15 Aug 2026 08:02:06 +0000
ROA not before:           Sat 15 Aug 2026 08:02:02 +0000
ROA not after:            Wed 18 Aug 2027 08:02:02 +0000
asID:                     13335
IP address blocks:        45.196.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117954 (0x1ccc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 08:02:02 2026 GMT
            Not After : Aug 18 08:02:02 2027 GMT
        Subject: CN=6a801cfe-206f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:e4:a4:c9:b5:35:1e:e1:9f:2e:18:02:83:
                    0d:f2:a0:75:8f:2a:89:0b:89:21:4d:20:60:16:76:
                    ed:ab:8a:9a:67:1a:88:f5:6a:ce:78:88:bb:36:32:
                    75:94:93:01:c3:c7:4e:47:ea:38:14:bf:9d:17:a4:
                    16:10:60:63:6a:54:1d:16:7a:12:5e:bf:47:a2:53:
                    90:fb:3d:ed:75:0e:6d:41:45:2d:e9:16:36:c1:c7:
                    d7:b1:a8:d8:ab:e5:67:0b:f5:18:16:23:33:fe:36:
                    13:64:02:89:3b:61:eb:2c:38:2c:a0:2c:71:28:5b:
                    dc:21:81:aa:65:2a:ef:de:b7:e1:f4:78:cf:2a:6e:
                    5e:08:cc:ee:66:07:73:23:66:4d:18:86:ec:ee:4b:
                    85:13:8c:c9:31:1b:c3:76:54:31:9e:a9:28:4e:7d:
                    5f:e2:03:1a:94:83:df:21:79:bf:90:a8:87:53:13:
                    dd:27:97:20:39:a9:00:5d:19:73:86:c2:aa:2b:0b:
                    3b:16:6f:5a:49:9b:08:99:43:26:5f:a0:a4:85:d3:
                    8b:82:e6:81:84:b8:ea:d1:82:c3:1a:e0:f3:63:20:
                    3f:66:db:54:0a:91:3d:f0:06:80:15:9b:a2:7c:c9:
                    b8:2b:f6:0e:1d:66:1b:ad:8e:70:ea:ae:55:13:37:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:8B:FD:A6:B5:5D:7E:45:76:5C:B7:7A:28:F5:D6:CE:01:BA:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B26836E987F11F19AE97610CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:da:62:04:cd:cc:13:3d:e3:fb:19:8a:3a:29:c1:f6:1d:37:
         df:e2:8b:34:69:3a:58:f3:01:1d:6f:74:5e:03:de:ff:82:53:
         cd:3f:e4:0c:e6:c9:dc:12:9b:de:33:a9:32:a8:a8:07:01:72:
         c0:ca:24:ba:4c:de:7e:1d:cd:bf:02:f8:c3:60:f0:2a:36:94:
         9c:19:9a:cd:b8:8e:c6:fd:ec:e0:a2:c1:4f:7d:04:0c:74:1b:
         16:3c:79:50:bd:f2:a1:8b:39:0d:d2:96:48:0f:f9:fd:ab:b5:
         c1:2e:d6:af:13:3f:bc:43:fc:e1:04:92:5d:49:ac:cd:41:49:
         65:0a:03:08:cf:33:5d:f4:c5:18:63:17:da:e7:09:42:45:bc:
         69:96:bf:a6:30:51:30:ff:93:7a:8b:9c:ef:94:8f:b7:8e:43:
         b5:18:47:50:17:31:2b:d2:ed:1c:52:e2:c0:ce:03:ae:eb:1d:
         f4:1c:4f:ee:71:0a:77:30:f6:3c:e8:c7:ec:da:6b:7b:dd:33:
         c4:f6:c6:d5:d0:57:a0:11:70:15:f0:a5:9f:fa:ef:28:84:bd:
         76:d2:a2:62:eb:49:14:47:4b:83:c4:e2:38:19:0f:af:ff:40:
         46:e5:92:87:62:20:c2:67:e5:10:c1:22:81:46:42:51:4e:38:
         0d:43:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----