Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD04E982C4B511F19EB747EFCE1D38B0.roa
File:                     BD04E982C4B511F19EB747EFCE1D38B0.roa (raw, json)
Hash identifier:          JY/Vi0wnli90FTolskoDwkAFkXDIo7JCZddjDykYj7E=
Subject key identifier:   77:5A:9C:FB:1B:97:1C:32:4B:B9:E2:EB:F2:43:45:A0:C0:F2:3C:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD04E982C4B511F19EB747EFCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 14:20:27 +0000
ROA not before:           Sat 10 Oct 2026 14:20:22 +0000
ROA not after:            Tue 20 Oct 2026 14:20:22 +0000
asID:                     199037
IP address blocks:        45.196.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122006 (0x1dc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 14:20:22 2026 GMT
            Not After : Oct 20 14:20:22 2026 GMT
        Subject: CN=6aca49ab-948e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:52:27:8a:96:f5:0b:61:e9:d5:54:47:0d:
                    0a:98:39:c1:3a:90:40:76:b3:04:bd:5e:a1:59:ec:
                    77:40:81:2a:f5:49:de:b8:3e:4d:51:62:01:4a:02:
                    9c:9b:37:b1:5c:00:29:e0:37:2c:d9:d1:87:04:ba:
                    c1:93:67:41:ba:23:ed:ff:c8:06:22:e7:a7:34:f5:
                    59:08:9a:dd:e4:b2:54:4a:5e:c3:d2:60:cd:41:30:
                    51:ed:ac:98:e6:d7:66:2a:db:4d:81:34:6c:c3:e3:
                    e0:88:aa:a3:28:3f:67:9e:e2:2c:00:7e:d4:37:80:
                    5f:f1:2c:d7:b6:18:81:7b:d7:85:23:df:3b:e5:d4:
                    80:d7:6a:7f:84:98:07:f4:4e:6c:c0:97:3e:e5:bf:
                    11:4f:ce:87:f6:22:d5:6c:68:d1:12:73:1e:ae:99:
                    c6:d3:53:35:43:c5:7b:ed:78:81:ae:f2:3a:48:12:
                    fb:5d:38:a2:42:1c:8e:22:cf:0a:74:93:d9:20:8c:
                    a9:78:d7:3e:4e:a9:73:99:64:f2:d5:0f:d4:99:4f:
                    03:1d:1b:a5:c8:90:27:24:c5:bc:d3:bf:76:e8:5b:
                    11:55:ab:74:23:cf:3c:78:8d:ae:f8:80:a1:fb:9b:
                    a1:32:e1:20:b2:61:dc:49:2b:69:f4:a1:ff:22:ca:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:9C:FB:1B:97:1C:32:4B:B9:E2:EB:F2:43:45:A0:C0:F2:3C:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD04E982C4B511F19EB747EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:f0:8d:97:c2:68:04:97:f6:3f:46:7e:50:8b:74:14:59:
         a2:93:39:75:90:38:9f:b3:c3:bb:b8:12:15:0a:56:6f:bd:ea:
         73:de:99:c0:b8:1d:c3:b9:e8:75:2c:74:54:55:c3:10:16:0e:
         ad:15:11:90:cc:71:77:5c:b2:36:88:7c:a3:2a:92:e6:04:01:
         80:4c:0d:e6:ec:68:8d:87:8d:27:e2:95:4c:6c:97:a7:55:92:
         6b:04:71:b9:75:45:14:11:c1:c0:d8:20:7f:73:1b:92:d8:3a:
         a0:9e:9c:0b:44:43:dd:c5:91:3e:23:5e:34:07:7f:74:fc:24:
         94:35:47:f6:c6:37:40:dd:04:93:64:ed:8d:1f:f5:f2:dd:68:
         80:84:c7:5e:d5:71:50:99:46:2b:09:ee:b7:97:f6:7c:e3:54:
         96:70:58:a5:05:78:59:f3:5e:53:70:e6:70:1b:78:96:11:1f:
         51:25:2d:aa:53:e9:e9:4b:f9:81:d7:7b:d0:4b:4a:71:2c:60:
         5f:b8:ba:9a:b9:60:e1:19:bb:52:65:3f:fb:84:f4:5d:6c:bb:
         42:c2:65:4c:aa:43:9c:f0:df:46:26:80:9a:a9:04:68:e0:b8:
         8d:58:72:59:e5:36:98:31:ed:b8:57:d7:15:5e:9b:d9:04:9e:
         53:91:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----