Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF711F4E962E11F18AADF1F8CE1D38B0.roa
File:                     AF711F4E962E11F18AADF1F8CE1D38B0.roa (raw, json)
Hash identifier:          84JSCzJzsJLrrpvFDt2Y/aMUabn524S6oS68Udhw4vY=
Subject key identifier:   D9:43:9A:A5:64:6A:FC:BE:6D:63:E6:A9:A5:21:80:79:AD:9D:95:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF711F4E962E11F18AADF1F8CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:17:48 +0000
ROA not before:           Wed 12 Aug 2026 09:17:44 +0000
ROA not after:            Sun 12 Aug 2029 09:17:44 +0000
asID:                     17561
IP address blocks:        45.200.222.0/24 maxlen: 24
                          45.200.223.0/24 maxlen: 24
                          45.200.224.0/24 maxlen: 24
                          45.200.225.0/24 maxlen: 24
                          45.200.226.0/24 maxlen: 24
                          45.200.227.0/24 maxlen: 24
                          45.200.228.0/24 maxlen: 24
                          45.200.229.0/24 maxlen: 24
                          45.200.230.0/24 maxlen: 24
                          45.200.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117733 (0x1cbe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 09:17:44 2026 GMT
            Not After : Aug 12 09:17:44 2029 GMT
        Subject: CN=6a7c3a3c-9499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:82:73:ce:17:6e:b4:a8:eb:85:9a:ee:fb:29:
                    ee:da:e9:e0:75:25:59:cd:21:01:0f:fb:c3:2f:b0:
                    d1:d7:6e:2d:de:17:28:b0:37:49:d4:92:44:8d:fd:
                    29:04:aa:ec:c8:71:c3:6f:47:61:a4:da:78:11:84:
                    80:63:66:50:51:f8:5d:65:61:21:b5:dd:ef:d3:a3:
                    da:79:fe:8c:de:8d:62:b7:61:90:d1:4f:5d:08:54:
                    32:45:ff:ce:93:5c:7c:09:54:f2:f3:a3:93:24:c5:
                    2a:9e:0b:81:28:ba:2e:52:f2:a0:bf:45:92:1c:83:
                    b3:ed:34:f2:ae:d5:0e:db:9c:fe:e6:8a:bf:b4:2d:
                    e8:4f:43:09:40:d0:a5:2b:5d:46:7f:09:d0:22:74:
                    75:5b:fe:a5:85:a9:af:71:2b:d2:0c:23:13:9a:27:
                    09:a3:fb:b4:e0:86:41:73:22:b9:f1:d6:3d:20:ff:
                    3a:b7:5d:5d:93:65:e6:a8:fb:5c:95:2a:32:70:00:
                    6f:13:c3:9e:66:95:43:cf:85:e8:fc:f7:12:f4:b6:
                    98:55:d3:47:6c:4d:55:e7:d9:f2:cc:39:17:fe:a1:
                    62:06:e6:9f:43:a5:93:cc:23:38:5b:b8:37:e1:30:
                    7c:6a:70:54:40:da:8d:f5:a4:b8:03:4b:01:9d:a9:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:9A:A5:64:6A:FC:BE:6D:63:E6:A9:A5:21:80:79:AD:9D:95:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF711F4E962E11F18AADF1F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.222.0-45.200.231.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:28:60:5f:61:bf:d4:48:d5:8f:6a:b9:88:cd:dc:a9:ee:
         cf:3d:3b:e9:b6:f3:fc:1a:64:23:2a:4b:18:c8:43:b1:14:07:
         33:38:90:4c:90:81:c1:60:54:df:34:9c:59:aa:49:4b:dd:6a:
         fd:a1:b3:24:fe:21:34:c7:54:25:c1:33:03:0b:c6:0d:30:aa:
         d1:f0:22:b9:34:65:dd:67:11:25:bc:c1:25:df:59:e1:a5:66:
         07:ee:6c:2b:e9:7f:67:ee:52:1f:5a:60:56:77:75:b1:f7:8b:
         8c:fe:1d:ab:90:b1:7e:2a:05:64:2f:21:ac:a6:13:26:0c:14:
         0f:c2:8a:10:95:c3:ec:c2:03:5c:91:ef:f2:4c:25:b5:03:12:
         4d:2e:7a:12:c2:e1:bd:28:58:8c:23:10:7b:55:7f:11:c0:c7:
         0b:67:20:b1:f7:3f:f0:fa:53:d9:1b:66:7e:09:a1:de:b6:e0:
         9c:9b:bf:d6:7f:b8:67:3d:44:92:e4:6d:3f:3f:71:76:7b:01:
         96:ef:af:86:3b:af:ce:09:5e:d1:54:d8:28:89:77:20:d7:49:
         65:73:0c:ae:f6:e2:9e:52:9d:58:51:e1:39:7d:5c:a1:4d:0e:
         23:83:fc:e0:84:f3:96:08:e2:e9:a2:0c:cc:97:e1:4a:a2:d3:
         18:d0:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----