Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD4FBB68E4711F19A45C819CF1D38B0.roa
File:                     9BD4FBB68E4711F19A45C819CF1D38B0.roa (raw, json)
Hash identifier:          lytOuvO3hXQf0xVzQ7LhFkqoiF/7O77p0RwkbzBbPck=
Subject key identifier:   49:36:0C:65:D0:44:65:7D:C5:23:38:5C:77:5F:D8:2C:3C:90:9B:20
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C921
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD4FBB68E4711F19A45C819CF1D38B0.roa
Signing time:             Sun 02 Aug 2026 07:56:04 +0000
ROA not before:           Sun 02 Aug 2026 07:56:00 +0000
ROA not after:            Thu 10 Sep 2026 07:56:00 +0000
asID:                     274273
IP address blocks:        45.194.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117025 (0x1c921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 07:56:00 2026 GMT
            Not After : Sep 10 07:56:00 2026 GMT
        Subject: CN=6a6ef814-c8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:4c:81:b0:5e:21:ef:ab:ed:f2:1d:43:9f:
                    b1:1b:2e:84:b0:b9:17:8f:81:19:ac:e8:dd:fa:79:
                    33:84:25:d4:1a:86:b1:48:e4:9c:1b:f7:f2:a9:13:
                    90:06:42:95:bf:6b:e1:44:2b:ec:b9:cb:24:a5:d9:
                    93:31:07:c8:29:39:68:15:f5:d4:04:26:1b:bd:25:
                    35:2c:e9:5a:b2:6a:97:f2:86:16:fc:c8:ec:db:5f:
                    57:68:45:db:7c:18:ae:f7:05:4b:9e:ce:43:93:3b:
                    e5:99:6c:2d:be:d0:80:ff:40:2a:66:c2:51:f0:2b:
                    6f:56:56:41:d0:c4:b1:6d:0b:20:77:60:9a:d6:f9:
                    d3:0c:9c:1c:82:83:9a:42:ae:25:b4:7b:b4:19:56:
                    d2:f7:c2:c8:33:f7:e0:25:5c:7f:74:e7:5f:94:99:
                    84:6f:55:b9:57:f1:12:11:ca:bd:8f:f9:e0:83:23:
                    1a:6c:d9:a0:a3:b0:a3:81:e4:43:9c:7e:ec:29:1e:
                    e9:e6:50:34:bb:35:94:e3:f5:1d:21:eb:ba:8e:f4:
                    c5:8d:d6:5c:7e:79:68:4a:e5:6d:a0:92:e1:7f:f4:
                    5c:89:79:15:a7:df:2e:0f:fb:87:e2:de:87:17:bf:
                    ee:a8:0c:00:64:53:2c:da:7a:fd:89:43:d6:71:a8:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:0C:65:D0:44:65:7D:C5:23:38:5C:77:5F:D8:2C:3C:90:9B:20
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD4FBB68E4711F19A45C819CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:65:fe:6b:b0:63:72:4b:b9:29:1c:cc:07:f7:fd:3d:49:ac:
         a0:29:fb:14:71:c1:9d:68:84:9f:27:55:90:6c:03:94:4a:41:
         70:e2:e7:b0:aa:33:72:65:dc:8c:37:6f:df:c7:ff:06:0a:9e:
         05:93:3a:a0:62:30:0e:d8:44:1d:4c:3b:cd:f5:3b:04:73:16:
         09:03:38:83:b4:7c:26:20:58:b6:96:57:3a:1b:93:d2:59:1e:
         18:46:4f:36:b5:a2:46:ac:3e:f4:3d:af:19:37:79:89:94:5d:
         54:a5:92:bc:d6:6f:0f:ec:3c:7f:01:91:79:36:52:23:e9:78:
         93:ba:72:14:69:54:cf:8f:95:79:83:27:ba:f8:ae:f2:00:8f:
         1c:02:bd:84:61:7a:72:8e:06:74:8d:f6:fa:24:cb:d2:53:73:
         4b:d9:07:0c:b2:27:a4:d9:18:75:f9:99:2a:56:74:50:0d:d9:
         61:5e:a2:d0:f4:a8:98:e5:4a:7b:f4:76:c9:d1:78:41:7f:f3:
         7d:a3:d7:35:23:6e:2d:db:7a:ea:c2:9b:35:bf:c4:b4:1b:cf:
         2f:40:1d:4f:a2:28:e3:cd:01:a3:b4:b8:7e:81:cf:61:2f:a7:
         c5:00:88:4d:0f:21:b4:8c:d3:2e:ae:8e:ea:d4:8f:66:e8:6d:
         e3:18:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----