Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFD3FAABF0D11F1900751F5CE1D38B0.roa
File:                     ADFD3FAABF0D11F1900751F5CE1D38B0.roa (raw, json)
Hash identifier:          Lxmn5eQbFAuLJwcjQ7pL58wFVelAYiFtrNjqS8+nr0s=
Subject key identifier:   F9:11:2E:5E:70:80:D3:86:FB:E5:DE:42:BE:BE:52:93:52:A0:62:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFD3FAABF0D11F1900751F5CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:34:50 +0000
ROA not before:           Sat 03 Oct 2026 09:34:46 +0000
ROA not after:            Tue 10 Nov 2026 09:34:46 +0000
asID:                     63139
IP address blocks:        45.197.70.0/24 maxlen: 24
                          45.197.124.0/24 maxlen: 24
                          45.197.125.0/24 maxlen: 24
                          45.197.126.0/24 maxlen: 24
                          45.197.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121419 (0x1da4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 09:34:46 2026 GMT
            Not After : Nov 10 09:34:46 2026 GMT
        Subject: CN=6ac0cc3a-c6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:46:63:94:b9:82:4d:cd:51:23:66:06:12:
                    c9:89:97:03:78:34:23:fb:ef:ba:7d:36:df:7b:24:
                    f5:af:38:6a:4e:34:70:f1:40:51:65:ba:d6:12:99:
                    5c:68:6c:2a:21:25:06:eb:88:58:21:9d:81:04:9e:
                    81:a6:c1:22:05:aa:56:93:16:46:d2:12:cb:40:f4:
                    f3:c1:ef:fa:cc:74:17:d8:7f:62:3b:e3:2e:8c:45:
                    69:29:fe:53:10:65:8e:3f:31:cb:39:78:eb:18:73:
                    42:88:72:73:91:0c:b9:ba:9b:11:3c:ad:db:80:e9:
                    1b:87:35:17:1a:71:ae:2c:83:ec:d0:99:7c:c5:f4:
                    19:b6:f2:73:df:fd:da:b1:c1:5b:8e:e6:94:81:34:
                    14:42:ad:d5:0e:26:fe:d5:bf:cc:44:6a:98:b8:b0:
                    3d:f3:31:32:93:a3:ae:f2:d7:e5:d8:75:99:c2:21:
                    f9:48:46:2b:92:9e:4b:01:5f:db:68:fc:36:e8:85:
                    ad:55:8b:c5:12:86:8c:25:0f:e1:1f:df:8d:82:ef:
                    ae:74:16:6b:97:1f:fa:64:5b:75:46:70:d7:19:e4:
                    5c:2d:6f:61:c8:1d:ef:42:21:c7:55:72:67:8b:43:
                    8f:ce:9c:ea:08:be:05:30:80:e5:a7:4c:d5:ad:bf:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:2E:5E:70:80:D3:86:FB:E5:DE:42:BE:BE:52:93:52:A0:62:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFD3FAABF0D11F1900751F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.70.0/24
                  45.197.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d6:ae:7c:d1:67:b7:e9:3d:d2:ba:e1:c4:ef:b3:f7:52:9f:
         e2:5a:75:53:60:bc:30:70:c1:a3:32:84:71:b4:b4:62:ae:dd:
         d5:88:ae:cf:02:66:48:e0:2b:e5:c6:e3:11:6f:40:d2:86:f0:
         c1:77:01:a9:69:1a:cf:95:89:cb:b0:46:6b:93:04:63:52:2f:
         dc:cd:12:d3:4a:16:1e:e9:b5:f3:50:f2:31:83:20:2c:40:66:
         b2:4a:5e:7c:60:a3:28:8b:ac:de:53:10:c8:2c:8a:03:b5:be:
         44:c4:35:37:c8:8a:01:5d:43:74:12:c9:31:91:79:1a:6d:33:
         9b:02:a0:bf:a6:57:49:b8:cd:e1:e0:b7:25:ee:2b:3b:e5:d8:
         3c:85:a9:2d:ce:53:e6:ac:87:8f:88:80:8e:d6:b4:1f:d3:83:
         41:e6:69:da:ac:e1:d0:47:81:1f:e3:6f:02:de:27:f4:04:0a:
         ad:e2:73:1a:db:02:8b:42:e1:fc:11:4f:e9:e8:8a:f3:37:72:
         02:8c:a2:0c:81:84:af:cb:b2:5a:6f:0e:38:ed:c1:db:c9:31:
         6b:05:c4:13:d8:20:7a:ac:c1:47:fc:ac:84:5a:cd:9e:e6:e9:
         b3:15:c4:0b:26:8a:91:32:7d:2e:80:20:db:52:cd:08:e0:18:
         c2:f2:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----