Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3F8A84993811F1AE1AEFF5CE1D38B0.roa
File:                     9C3F8A84993811F1AE1AEFF5CE1D38B0.roa (raw, json)
Hash identifier:          57IIJbftyP1eRd2vT/okY34Xf4DFXT5GS3S//qdju0M=
Subject key identifier:   6B:4F:14:25:AB:1C:71:8E:D0:09:4B:AC:91:54:97:B9:BC:EB:34:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3F8A84993811F1AE1AEFF5CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 06:06:25 +0000
ROA not before:           Sun 16 Aug 2026 06:06:21 +0000
ROA not after:            Thu 17 Sep 2026 06:06:21 +0000
asID:                     273908
IP address blocks:        45.194.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118009 (0x1ccf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 06:06:21 2026 GMT
            Not After : Sep 17 06:06:21 2026 GMT
        Subject: CN=6a815361-c680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:2a:05:84:b6:4f:6c:cb:d8:00:9a:96:28:
                    31:b0:74:43:4d:95:22:a2:e4:d3:d9:4e:ee:5a:28:
                    56:67:b0:f6:84:60:ee:2c:4c:04:0d:ef:8d:5f:0c:
                    35:2c:db:65:b3:8f:4f:2d:bf:ea:c8:c7:5b:06:2c:
                    96:dc:d5:01:4a:89:ec:b6:8a:18:46:76:8c:46:46:
                    5e:ad:66:50:e8:e7:af:0a:c7:52:85:e7:31:11:f3:
                    6e:ce:b9:dd:b4:51:35:c3:40:be:df:1b:38:f0:16:
                    8f:a1:bc:e0:6b:96:45:4b:2f:2c:15:e7:86:a9:2e:
                    4f:94:36:c7:e9:c1:68:89:a0:69:94:51:07:ee:f0:
                    ea:3f:46:bf:af:9e:2d:13:73:1c:4e:1e:a6:e1:d2:
                    7d:29:06:c6:87:43:e9:6f:b4:3d:00:43:74:f2:07:
                    93:91:09:ed:e0:fa:6d:f6:d8:3f:99:03:cd:be:ee:
                    ee:2c:a1:51:a5:0c:a1:4f:1b:10:42:68:c2:cf:95:
                    36:8d:52:4d:4d:ac:12:47:55:e8:e1:ef:1b:8f:3f:
                    46:e8:e1:4c:3e:e6:34:1e:42:78:38:2e:42:c7:4a:
                    d3:bc:50:eb:28:dc:9e:35:e8:61:56:0f:dc:86:fd:
                    7e:11:66:8b:cf:c1:15:d2:b5:ce:05:ea:f5:f4:1b:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:14:25:AB:1C:71:8E:D0:09:4B:AC:91:54:97:B9:BC:EB:34:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3F8A84993811F1AE1AEFF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e1:a3:09:84:15:e4:15:f6:07:bc:03:4a:05:9d:d8:d8:49:
         23:e5:ad:47:90:fb:5f:85:cd:83:02:84:7c:8c:03:f2:9a:a6:
         47:e7:98:64:73:21:d9:c6:3c:6f:c6:0e:8b:90:b2:40:18:f8:
         ca:02:95:b7:d2:9d:b4:7e:0e:79:89:e9:5c:b2:55:e3:cb:50:
         31:00:21:4e:29:c8:32:ab:fc:38:7e:1d:31:e6:59:94:29:46:
         49:50:e5:2d:0d:18:de:0e:76:a9:f7:3c:9a:3f:ca:8e:ac:5a:
         f7:91:51:88:5a:28:0b:95:09:f3:2f:33:7b:d6:7a:77:11:bf:
         ee:56:98:65:66:71:01:01:99:3f:84:32:4f:3b:8f:c3:0c:ec:
         f6:3f:9c:1b:d7:91:87:79:e0:90:8f:00:c0:5e:61:4b:89:ba:
         e0:95:00:37:18:62:2d:e9:d2:2f:35:cb:74:62:68:f5:76:fc:
         d9:53:54:1d:7c:e3:e2:76:69:04:4b:48:cc:f6:2f:59:be:aa:
         4d:a2:04:6c:c3:ed:83:9d:c8:45:db:50:c7:18:e0:ba:db:2b:
         05:65:bf:7c:0e:e7:4a:ae:b0:0d:48:0d:12:82:6f:56:18:5e:
         67:d7:34:34:c1:a0:b6:68:70:d8:8b:1f:ee:5b:2a:7d:ed:58:
         c0:92:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----