Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7C8040BB1311F1A5B1B104CF1D38B0.roa
File:                     AB7C8040BB1311F1A5B1B104CF1D38B0.roa (raw, json)
Hash identifier:          g5cwgMV5A1cBFprW29qAKK3m90qKjF/FQmqZtNrOBng=
Subject key identifier:   95:80:CF:D3:D3:3F:15:D1:10:50:94:CA:D5:10:ED:9B:89:7F:DD:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D950
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7C8040BB1311F1A5B1B104CF1D38B0.roa
Signing time:             Mon 28 Sep 2026 08:07:38 +0000
ROA not before:           Mon 28 Sep 2026 08:07:34 +0000
ROA not after:            Tue 05 Oct 2027 08:07:34 +0000
asID:                     135600
IP address blocks:        45.195.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121168 (0x1d950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 08:07:34 2026 GMT
            Not After : Oct  5 08:07:34 2027 GMT
        Subject: CN=6aba204a-d576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:11:fa:6f:ec:1e:89:66:d6:34:3a:34:44:
                    4e:cb:f3:f4:75:4a:96:83:c3:d2:67:8d:f0:98:2b:
                    e9:6b:de:f1:d6:6a:f6:c4:08:ad:5a:92:a6:3c:88:
                    9e:a5:84:13:76:15:46:2b:0c:92:69:12:46:fb:bc:
                    62:21:15:b5:c4:bb:08:8a:f8:3e:33:cc:a6:81:90:
                    c1:6c:bb:f2:0f:52:81:c5:48:4a:1b:b6:87:d7:65:
                    5d:cf:f3:2d:23:77:c8:63:3f:af:28:cc:14:93:07:
                    62:94:1c:91:1f:28:d9:3b:62:5d:a0:d7:96:61:91:
                    5c:2e:73:46:49:6d:15:97:ee:ff:be:b1:8b:35:ab:
                    41:42:f6:b5:20:ea:7e:44:ee:43:fe:37:48:73:0c:
                    30:33:5c:56:48:bb:eb:41:28:34:02:ed:f8:2b:aa:
                    5e:04:8c:09:16:5c:59:ac:d5:30:e2:ae:6f:52:04:
                    b0:81:ad:41:b0:86:f2:bc:00:c2:dd:c2:c4:87:0d:
                    8b:f4:db:7e:9b:a5:5a:fb:a4:a2:3b:8c:7b:80:db:
                    54:16:89:f0:d2:33:6c:90:69:b5:76:99:6e:60:d3:
                    65:90:75:cc:2e:1f:6c:51:b7:fe:12:30:41:c9:64:
                    53:b0:6b:43:9f:68:ab:da:d0:3f:f4:26:ea:c2:d7:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:80:CF:D3:D3:3F:15:D1:10:50:94:CA:D5:10:ED:9B:89:7F:DD:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7C8040BB1311F1A5B1B104CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:cd:6b:c7:4d:56:dc:b3:b3:04:c4:81:19:3c:e7:92:d6:
         0c:2f:d2:cf:e7:56:14:f1:83:40:8f:a6:dd:50:64:b0:33:d0:
         f3:a8:62:79:ed:2c:2f:21:50:9e:af:2c:0f:6c:f9:73:78:84:
         89:81:77:56:a8:c5:e0:14:80:5e:4e:98:fb:ab:42:bc:c8:e1:
         c7:57:75:b0:2a:7b:05:40:ce:4d:6f:bb:34:a2:1a:31:66:1c:
         18:af:f9:de:54:ed:45:27:73:41:58:d7:17:4b:f4:66:d4:24:
         b5:be:c4:b0:2b:d5:f0:7a:98:59:eb:8a:9a:fb:c7:47:59:f3:
         56:02:54:80:25:df:20:b2:aa:54:1f:d6:8a:3f:00:85:7d:b3:
         a6:34:7c:82:a6:48:f8:38:2a:7d:25:6e:df:61:32:8c:54:04:
         a0:a0:59:14:45:60:7f:66:a2:30:c9:37:aa:dd:33:ee:f2:61:
         7d:e9:a7:ff:e2:3a:4e:8d:e5:27:43:f4:35:61:63:e9:84:25:
         da:fc:99:09:c3:0a:8e:12:f7:8a:5a:3d:f5:ec:88:ca:fc:55:
         ce:1c:81:43:92:36:d8:58:f3:b6:78:4c:5b:74:23:17:51:7e:
         77:93:f1:12:44:75:cb:77:f5:ff:a0:4f:53:f3:6d:e6:85:18:
         20:18:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----