Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DCB0CC964E11F1A5F988BCCE1D38B0.roa
File:                     C3DCB0CC964E11F1A5F988BCCE1D38B0.roa (raw, json)
Hash identifier:          Q4BLsPyDESikT62tR8MJTRgE/e7laECjmlOtDRTgdVA=
Subject key identifier:   10:37:BC:ED:B8:50:7F:76:37:8C:CD:74:91:82:90:C0:C9:EB:05:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DCB0CC964E11F1A5F988BCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:07:27 +0000
ROA not before:           Wed 12 Aug 2026 13:07:22 +0000
ROA not after:            Sun 12 Aug 2029 13:07:22 +0000
asID:                     17561
IP address blocks:        45.204.128.0/24 maxlen: 24
                          45.204.129.0/24 maxlen: 24
                          45.204.130.0/24 maxlen: 24
                          45.204.131.0/24 maxlen: 24
                          45.204.134.0/24 maxlen: 24
                          45.204.135.0/24 maxlen: 24
                          45.204.136.0/24 maxlen: 24
                          45.204.137.0/24 maxlen: 24
                          45.204.138.0/24 maxlen: 24
                          45.204.139.0/24 maxlen: 24
                          45.204.140.0/24 maxlen: 24
                          45.204.141.0/24 maxlen: 24
                          45.204.142.0/24 maxlen: 24
                          45.204.143.0/24 maxlen: 24
                          45.204.144.0/24 maxlen: 24
                          45.204.145.0/24 maxlen: 24
                          45.204.146.0/24 maxlen: 24
                          45.204.152.0/24 maxlen: 24
                          45.204.153.0/24 maxlen: 24
                          45.204.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117776 (0x1cc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 13:07:22 2026 GMT
            Not After : Aug 12 13:07:22 2029 GMT
        Subject: CN=6a7c700e-e3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:b6:4c:e1:8f:42:4a:d5:03:f3:cb:87:70:
                    6c:2b:aa:7a:b9:3b:91:5a:58:23:75:10:85:7b:90:
                    81:b3:0c:74:a7:d0:70:9b:0d:d1:8b:f1:d1:9f:b4:
                    9d:73:f3:d2:aa:82:42:02:06:98:3c:30:29:74:f8:
                    d5:7e:2a:de:c3:f5:c2:e8:50:2a:fe:1b:c6:23:1b:
                    e5:ab:e5:f8:7b:8d:ca:b0:03:1f:28:a6:18:d3:00:
                    f8:65:91:8c:21:5c:03:3d:ad:44:8c:aa:12:54:b4:
                    d0:7f:d1:ee:73:26:bb:af:70:ca:26:ee:95:5f:e5:
                    1f:af:b4:8e:8f:93:03:94:d6:b0:0a:0e:b3:5c:77:
                    dc:a3:d6:57:d7:9e:f5:e6:29:02:c2:d5:6a:b4:36:
                    ed:eb:40:5a:e8:66:04:af:10:92:77:89:47:6d:d3:
                    05:4c:36:71:34:68:5b:11:51:b6:f4:c9:cb:72:8a:
                    bc:93:9c:2a:d8:67:23:6c:69:ba:aa:35:55:ac:69:
                    11:c3:b6:30:c2:f9:89:a0:f2:18:12:58:ad:39:96:
                    d8:2f:ba:b1:6a:28:1c:30:2e:dc:54:e9:bf:77:cb:
                    81:b7:25:9f:ab:65:5d:fa:d1:b7:e0:6c:39:0e:7d:
                    85:9d:61:3b:9f:b8:d4:49:9d:cb:48:c8:b8:4d:9f:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:BC:ED:B8:50:7F:76:37:8C:CD:74:91:82:90:C0:C9:EB:05:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DCB0CC964E11F1A5F988BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.128.0/22
                  45.204.134.0-45.204.146.255
                  45.204.152.0/23
                  45.204.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:99:35:3f:88:fc:5f:98:64:2e:9b:5c:93:35:2b:22:ff:
         b9:39:2d:be:78:b7:92:64:f8:62:95:c8:0d:f3:5e:2d:df:f3:
         37:77:de:89:10:9c:a4:73:52:09:84:33:f6:75:f9:9d:f6:7c:
         81:be:a5:09:44:45:d8:82:5e:ae:ad:55:d9:19:c2:35:37:17:
         11:0a:92:b4:75:fd:74:7b:86:62:db:a7:1d:ab:e1:0b:b4:d6:
         77:41:de:6c:ad:a2:6d:51:cd:0a:d9:0e:c5:4f:b0:85:e2:84:
         b7:02:d3:6d:66:02:f6:ff:78:9f:dc:1e:ba:17:0a:f6:17:f0:
         cd:e9:a0:47:81:e0:c5:ef:48:15:71:0c:e3:61:a4:d7:18:11:
         04:df:5c:ed:3f:fc:fa:c2:67:a7:fa:59:4d:74:55:98:3a:d9:
         30:05:4f:fe:30:b8:f5:77:8d:38:1d:62:27:f1:f9:d5:9b:7e:
         95:35:d0:eb:96:a5:bb:97:8a:d0:73:0b:4b:e5:05:30:6c:2e:
         f8:da:b9:fe:e7:f9:5b:2e:fc:58:31:50:16:4e:0d:88:61:80:
         a6:17:43:05:53:5e:25:13:f1:3f:15:1a:66:3f:98:7f:c6:b4:
         d4:45:60:0f:66:57:84:a5:d7:07:2f:cd:e4:d1:37:80:61:97:
         c7:48:5d:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----