Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1F1A1A4923211F1985F24DBCE1D38B0.roa
File:                     A1F1A1A4923211F1985F24DBCE1D38B0.roa (raw, json)
Hash identifier:          LLmW5nOuX+DiyfJZUTQgfW3bNVtsXXiAdF/3C2nObZM=
Subject key identifier:   14:35:6C:40:80:E9:6F:4A:A7:33:8C:11:0B:21:6B:BA:BB:AE:6C:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1F1A1A4923211F1985F24DBCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:35:59 +0000
ROA not before:           Fri 07 Aug 2026 07:35:55 +0000
ROA not after:            Sun 04 Oct 2026 07:35:55 +0000
asID:                     153517
IP address blocks:        45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117289 (0x1ca29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 07:35:55 2026 GMT
            Not After : Oct  4 07:35:55 2026 GMT
        Subject: CN=6a758adf-84f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:09:9a:ff:50:7b:56:e6:db:84:8c:22:5f:
                    59:36:94:e7:2a:e1:ad:58:fa:00:69:0b:5b:be:c4:
                    81:44:2d:24:ff:65:85:83:eb:1e:c8:69:ac:41:8e:
                    24:0f:52:96:6a:0d:85:89:e7:3c:6a:d1:0a:67:0d:
                    0a:db:ac:20:b8:be:94:a8:9e:36:78:c9:95:4c:83:
                    5f:4d:32:a6:38:3f:46:43:8e:51:57:a8:d2:01:3b:
                    10:c9:51:9b:06:56:90:17:b7:b9:a7:d0:87:78:21:
                    24:aa:fc:b0:19:01:47:3d:b7:d8:8e:79:4f:65:43:
                    7c:24:bc:87:67:87:98:0c:bb:ad:b6:de:65:05:5b:
                    24:1d:c1:2a:d9:02:2d:a0:9e:b3:df:64:db:c3:25:
                    39:98:9d:a9:5c:90:76:70:d0:ef:6c:90:d1:e8:0a:
                    0c:e7:10:82:64:aa:dc:5d:4a:f0:a6:99:7a:bf:df:
                    05:5a:be:fc:f4:23:12:e3:7a:92:c3:5e:4b:ed:be:
                    cf:dd:0f:39:5f:10:bf:66:5f:d3:ef:8f:f8:9a:ef:
                    57:b8:0c:83:53:31:f8:d0:17:eb:34:83:c7:b9:e1:
                    de:a1:dd:a8:af:79:1c:d8:94:75:18:00:a0:60:96:
                    15:aa:ff:6f:36:ae:cb:9d:a1:32:b2:e5:a7:3d:97:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:6C:40:80:E9:6F:4A:A7:33:8C:11:0B:21:6B:BA:BB:AE:6C:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1F1A1A4923211F1985F24DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:28:a6:6c:94:db:43:7b:23:a2:1b:e0:fd:cf:d8:bc:a9:7e:
         6d:11:70:e6:61:d5:52:d3:51:f1:cf:09:f3:68:8a:c5:08:57:
         49:94:05:22:ea:15:a1:d9:1e:a9:fb:86:0b:b7:66:28:d2:04:
         e7:60:c0:b9:07:cc:a6:10:c6:8e:76:ba:cd:e0:b8:ac:58:83:
         70:ef:09:ee:9a:40:7c:d6:05:55:cb:0d:c9:58:b6:0b:c8:17:
         d8:0c:1c:96:a3:52:e6:b8:82:44:fc:7c:fd:75:a2:86:99:99:
         70:b6:95:a6:4d:1e:02:17:4d:d8:79:c7:b1:03:bd:53:14:89:
         21:b3:44:45:08:7a:44:16:06:fd:7e:ab:9f:92:c1:eb:f8:29:
         46:e2:99:b6:d6:4a:87:43:3d:56:0a:9e:cb:d1:f2:67:6a:7e:
         7a:c9:7c:69:e0:d9:52:d8:d7:a4:a8:ed:6c:13:35:01:36:29:
         f2:da:83:03:20:59:95:97:f5:47:7b:bc:cd:67:f7:68:e2:d7:
         0a:3c:82:0a:96:a5:11:db:4e:36:61:74:96:61:45:37:e9:a0:
         79:93:85:c4:b9:91:29:6a:04:eb:53:1b:d3:07:24:d3:e6:47:
         2a:a6:63:b9:e8:52:9d:f9:b5:00:98:24:f8:29:02:ad:5f:2b:
         4f:58:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----