Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC3852B8962711F1BEA1F9CFCE1D38B0.roa
File:                     AC3852B8962711F1BEA1F9CFCE1D38B0.roa (raw, json)
Hash identifier:          xDOSu3jbeWKsV7WZCmezNV/0bdWt13fPnSQaM4WOlXY=
Subject key identifier:   52:38:BD:28:6E:E3:EB:FB:A8:C1:C7:AA:19:79:30:2D:DD:F3:04:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC3852B8962711F1BEA1F9CFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:27:37 +0000
ROA not before:           Wed 12 Aug 2026 08:27:32 +0000
ROA not after:            Sat 21 Nov 2026 08:27:32 +0000
asID:                     272018
IP address blocks:        45.198.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117713 (0x1cbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:27:32 2026 GMT
            Not After : Nov 21 08:27:32 2026 GMT
        Subject: CN=6a7c2e78-4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:55:ac:41:8a:bb:ed:a7:b7:18:f3:5a:c5:
                    03:bb:8e:b0:e4:88:46:23:e2:cd:3b:27:64:5d:79:
                    24:e2:4f:7f:cd:54:6e:bd:73:60:7f:f1:c0:c9:dc:
                    43:da:0b:b3:0d:47:43:32:57:ce:71:0a:a8:7a:6e:
                    2e:2c:d6:4b:a5:ed:be:95:1e:1f:a0:f9:44:8f:cc:
                    29:c1:5d:3c:28:ee:45:16:7d:89:00:86:32:be:99:
                    c6:61:be:c5:36:1c:f6:c2:79:dc:8c:1e:f4:c0:81:
                    86:20:4d:71:50:30:6f:0f:20:da:dd:da:fa:ef:40:
                    43:16:da:89:a1:bb:91:f0:5a:55:57:4c:6f:16:cc:
                    46:6a:86:c9:93:7a:71:30:1f:12:da:d9:8c:0a:92:
                    01:06:f4:d6:ce:7d:e1:ab:c5:fb:9d:d1:12:3a:7c:
                    02:89:ad:60:e9:ce:fb:dd:17:ae:48:b7:a8:1a:d3:
                    3a:47:42:50:64:a9:fa:9e:86:f3:5a:11:4b:14:d2:
                    e7:5c:d5:b9:a4:35:87:2e:3c:1b:13:36:78:9d:b9:
                    82:4a:f3:22:af:e2:2c:27:51:0e:96:c6:e8:22:11:
                    a6:2b:ee:a7:40:0b:a4:10:69:b7:0d:e0:41:70:bc:
                    9d:01:41:28:01:0f:9f:ee:8a:04:ca:c8:05:b3:9f:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:BD:28:6E:E3:EB:FB:A8:C1:C7:AA:19:79:30:2D:DD:F3:04:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC3852B8962711F1BEA1F9CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:b1:fc:ba:93:96:44:b5:4c:1e:92:82:a1:31:2c:7c:1c:78:
         a5:8c:25:3b:f9:e3:2a:02:93:a0:1a:72:52:78:57:48:bd:9d:
         ac:23:0f:df:c6:fe:bb:f2:06:1a:ef:c8:a9:e1:ea:e8:90:46:
         ad:ca:4f:0b:39:bd:ad:4b:f5:30:8b:66:fd:89:d9:e5:bc:b2:
         37:f7:a8:c8:a1:00:64:da:3b:0e:5a:4a:63:cd:33:7b:0b:80:
         bb:59:1c:9e:3c:e8:f6:a1:43:8f:25:03:e3:8b:90:1a:7e:cc:
         b8:9b:f4:87:90:8d:f1:d8:1e:92:97:91:71:db:6f:79:2e:44:
         84:cb:90:23:cf:ec:3c:31:57:ba:c5:5f:22:88:ba:8f:7a:e9:
         74:cf:55:1c:18:f8:fe:9e:a5:94:3b:17:7c:f6:8c:28:c8:9f:
         39:48:82:39:1a:28:f8:62:26:7c:ef:ba:a4:b5:d8:81:55:2e:
         22:f9:3a:03:04:83:69:7e:8e:8c:aa:4e:16:e6:78:0c:fa:11:
         3b:c1:a0:80:80:e7:c0:ec:df:83:e2:c0:fb:cd:05:e6:73:dc:
         42:ca:18:6c:c6:19:b8:3a:f9:a5:3c:bc:0f:86:0c:ef:bc:94:
         29:bf:d0:60:3c:70:8e:53:e9:48:8b:2a:12:89:a0:5a:44:fe:
         71:74:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----