Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94A54D0C97E11F19585F8A3CE1D38B0.roa
File:                     B94A54D0C97E11F19585F8A3CE1D38B0.roa (raw, json)
Hash identifier:          plpUr8lA5NvGuTt/T5vqQLF49qaN/7xgyIgBUDeNyd4=
Subject key identifier:   32:D8:EA:2F:63:D9:47:EC:52:8D:B0:14:91:5A:2E:4C:7B:E5:FB:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94A54D0C97E11F19585F8A3CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 16:29:14 +0000
ROA not before:           Fri 16 Oct 2026 16:29:09 +0000
ROA not after:            Sat 14 Nov 2026 16:29:09 +0000
asID:                     273980
IP address blocks:        45.192.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122375 (0x1de07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 16:29:09 2026 GMT
            Not After : Nov 14 16:29:09 2026 GMT
        Subject: CN=6ad250da-e7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:81:5e:43:c4:2b:8b:e8:d0:1b:f4:de:68:
                    27:12:d9:f7:40:ca:12:84:76:3b:9e:15:20:b6:e9:
                    f5:ce:35:23:39:a0:aa:08:4e:9b:1c:0c:5e:ec:27:
                    32:5b:dc:7f:ac:57:05:53:d2:e5:8f:52:77:a4:09:
                    a5:46:c2:6d:3e:c6:98:7d:80:41:ab:91:cd:0b:1d:
                    6f:09:ca:33:d4:0b:12:60:e2:11:09:0b:8b:bf:3f:
                    40:44:48:df:59:b1:c5:f2:28:d9:fd:49:74:16:7b:
                    0a:b8:68:fe:32:61:65:78:3e:b9:50:db:37:e5:c8:
                    10:5c:cc:25:74:d0:0e:6d:b7:27:e7:d2:da:02:a4:
                    82:71:1a:3e:c8:ac:d5:a6:cf:7f:7f:aa:a5:21:eb:
                    e4:2a:12:12:d2:03:50:ee:8d:1b:0f:6c:73:78:63:
                    8c:2d:af:79:98:04:6f:11:ac:f0:60:ec:3e:d8:98:
                    2d:68:29:39:30:b0:d9:22:0d:b6:a3:9b:eb:9a:d7:
                    fe:85:72:b2:c3:d6:c4:e9:0a:69:9b:06:75:85:5b:
                    f6:ed:39:68:85:4c:2c:15:c8:c6:17:88:71:0e:b7:
                    87:81:51:c6:23:68:d5:63:13:e1:b2:3b:e5:8e:70:
                    ba:b0:8b:23:dd:43:75:52:47:f6:7b:b4:f7:5f:fa:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:EA:2F:63:D9:47:EC:52:8D:B0:14:91:5A:2E:4C:7B:E5:FB:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94A54D0C97E11F19585F8A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:75:f6:4b:7c:66:53:d6:b7:12:55:c7:62:70:68:5d:2d:
         7d:22:1f:df:36:c6:57:ed:63:a5:67:59:8c:5e:6b:47:b0:3f:
         c1:a3:88:49:bc:41:1f:a5:7f:28:19:85:41:cb:69:d2:db:72:
         d8:a7:78:80:d2:ba:82:be:15:8d:c5:aa:e1:b4:a8:6b:84:d5:
         d9:f3:fb:8d:87:6b:67:3a:eb:c1:04:c3:b1:74:1e:ce:c3:74:
         8f:ec:68:ab:ff:8c:ec:1a:ae:38:e0:d6:c6:45:8c:53:84:b6:
         e5:46:54:fa:78:1c:22:d7:66:c3:34:6b:42:df:a2:c9:6c:a6:
         ea:2b:ec:48:6a:fd:f8:89:76:54:05:d5:5e:10:1b:b2:d0:7d:
         c1:ed:39:e9:c9:9a:4a:85:00:ac:59:92:49:52:77:ff:94:24:
         a5:dc:59:a3:38:e1:93:c0:0c:ed:e0:ba:a5:ee:fc:e3:93:a8:
         a0:66:b8:d1:8c:e7:f2:45:40:b7:b0:fb:f7:59:e9:bc:77:90:
         81:40:39:49:ff:7f:0b:d9:7a:3d:3c:b2:4a:1f:1f:36:6d:f8:
         c5:01:4c:4b:bd:e1:2e:8e:e6:8e:3c:f0:45:fc:1c:5a:c2:3c:
         ec:bb:52:86:00:b8:65:bb:86:65:1a:cf:3e:21:84:e1:71:45:
         50:e0:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----