Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF93A72BF2E11F18703F2C6CE1D38B0.roa
File:                     AAF93A72BF2E11F18703F2C6CE1D38B0.roa (raw, json)
Hash identifier:          7dL7objcJhTeDKAiMgdU3EkulwQ7Pe2NCSjqP3ZSCUo=
Subject key identifier:   4B:D5:12:9A:D3:4A:5B:13:59:36:8C:2F:F0:5C:A1:D4:DF:43:D2:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF93A72BF2E11F18703F2C6CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 13:30:59 +0000
ROA not before:           Sat 03 Oct 2026 13:30:55 +0000
ROA not after:            Sun 22 Nov 2026 13:30:55 +0000
asID:                     142032
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.192.96.0/21 maxlen: 24
                          45.192.96.0/22 maxlen: 24
                          45.192.100.0/22 maxlen: 24
                          45.192.104.0/21 maxlen: 24
                          45.192.104.0/22 maxlen: 24
                          45.192.108.0/22 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.205.16.0/21 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121469 (0x1da7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 13:30:55 2026 GMT
            Not After : Nov 22 13:30:55 2026 GMT
        Subject: CN=6ac10392-f09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:a1:56:7d:10:7c:8a:01:1d:58:ef:ef:95:
                    62:9c:b2:d4:4c:8d:55:19:c7:dc:88:b9:94:50:48:
                    22:3f:8e:e8:78:75:6e:e4:d9:ae:5e:6c:06:c8:9d:
                    45:9b:5c:35:04:a6:82:52:24:57:c1:e7:23:62:79:
                    eb:2a:3d:2e:26:b8:6e:d6:27:1e:80:d7:69:25:12:
                    58:ab:54:fe:86:97:bf:3b:2a:e7:02:f3:88:25:6d:
                    89:e3:e2:fa:e3:91:48:34:7a:6a:8b:18:a2:43:d1:
                    c3:ad:eb:0c:8b:c9:b5:9b:c2:1e:23:95:f3:5b:77:
                    9f:f0:e0:65:dd:29:33:e2:a3:39:6a:40:5c:05:26:
                    bc:0c:26:b9:8d:4f:74:b4:31:c1:67:45:b2:52:04:
                    0f:47:0e:51:88:dd:f9:48:8f:29:ec:ea:28:64:ca:
                    e5:bc:9e:b1:78:22:49:06:3d:2c:64:c9:13:98:27:
                    04:eb:20:f8:d9:12:11:98:bc:03:ff:51:82:e2:9d:
                    d7:b6:61:46:26:4c:d6:68:89:cf:ef:b8:dc:f4:25:
                    77:21:b0:ba:1c:76:75:fb:5c:8c:ea:f1:b6:f7:e8:
                    eb:66:82:e3:78:7f:91:bb:ca:dc:88:29:ef:2a:24:
                    d0:07:4c:51:3a:4a:c5:85:31:9e:ee:ae:5b:5f:f9:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:12:9A:D3:4A:5B:13:59:36:8C:2F:F0:5C:A1:D4:DF:43:D2:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF93A72BF2E11F18703F2C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:66:14:37:0c:2f:5f:77:65:5e:b6:35:2c:78:2b:ba:71:
         00:c5:4d:20:20:dc:bf:1c:b4:24:a1:8c:dd:9b:d1:dc:78:af:
         6c:b6:ab:97:04:54:6f:cc:74:65:ae:64:4d:d6:7d:fe:4d:85:
         67:86:20:5e:eb:f4:44:07:71:ec:94:a3:35:d3:a5:39:e7:fb:
         ce:0e:9c:d5:f9:be:5f:52:6d:0f:00:c4:05:54:a3:93:f9:d1:
         6e:77:49:a6:c6:18:40:1a:ff:20:a4:69:14:32:ae:9d:a0:c9:
         08:2f:d2:92:9b:96:04:28:9e:9e:b1:ff:87:c4:0c:12:66:58:
         31:1b:8f:e7:99:92:ef:46:96:6c:b4:eb:19:a5:a4:04:a8:df:
         02:49:1c:3a:2c:f5:04:e1:f8:ae:a1:09:1c:60:10:e8:c8:c6:
         b4:f0:a2:4d:8e:26:6d:f8:cf:1d:dd:89:f6:4f:7f:9e:3d:3d:
         65:47:49:79:92:45:59:f2:94:5a:64:2b:38:44:4d:05:7f:e5:
         cf:3f:3f:0c:1a:6a:33:00:28:75:77:9a:6d:de:8a:0d:35:c6:
         da:87:88:bb:a5:d6:a4:e9:d6:ef:57:e5:d4:80:fa:00:c9:32:
         a3:1e:07:82:19:25:57:f8:83:76:2a:44:49:1a:ed:0e:40:50:
         b7:e6:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----