Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7AAE4AA8F1211F1A78D86EBCE1D38B0.roa
File:                     C7AAE4AA8F1211F1A78D86EBCE1D38B0.roa (raw, json)
Hash identifier:          Wnqd3LkCzfNuTs4ZiecH1MmhEUJuUXJlUgr9ELMtcrI=
Subject key identifier:   D7:A5:45:34:85:02:A7:7B:B6:56:6B:5A:3B:5E:B3:D8:D1:DD:A5:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C968
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7AAE4AA8F1211F1A78D86EBCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:10:25 +0000
ROA not before:           Mon 03 Aug 2026 08:10:21 +0000
ROA not after:            Wed 09 Sep 2026 08:10:21 +0000
asID:                     44559
IP address blocks:        45.202.205.0/24 maxlen: 24
                          45.202.206.0/24 maxlen: 24
                          45.202.207.0/24 maxlen: 24
                          45.202.208.0/24 maxlen: 24
                          45.204.65.0/24 maxlen: 24
                          45.204.73.0/24 maxlen: 24
                          45.204.75.0/24 maxlen: 24
                          45.207.161.0/24 maxlen: 24
                          45.207.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117096 (0x1c968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 08:10:21 2026 GMT
            Not After : Sep  9 08:10:21 2026 GMT
        Subject: CN=6a704cf1-9423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:f5:d7:b0:0b:66:cb:2f:98:d8:99:83:b3:
                    a4:66:3c:09:06:44:09:9c:ba:cc:d6:73:b5:77:66:
                    20:65:ed:f8:74:bc:d2:e7:20:2f:81:ac:80:72:94:
                    75:1d:a1:b6:53:9c:52:b0:50:9f:75:a0:0e:0a:7b:
                    6a:12:01:34:25:85:0b:32:93:01:78:ee:12:9e:bd:
                    a4:cb:c9:46:28:ab:b5:c5:df:1c:b8:07:f8:41:59:
                    84:6c:8a:2f:2a:81:5c:1f:1f:1f:d4:4b:84:f6:d8:
                    d3:ce:bf:19:bc:2c:94:2b:e0:f7:af:cf:1d:5d:7b:
                    11:fe:c9:de:49:fc:ba:85:bc:40:88:81:85:7d:62:
                    fc:7d:ab:4f:7b:5d:0a:c1:1c:6b:81:17:f6:3e:15:
                    f1:07:d8:a0:7f:0c:27:d5:5a:cd:6f:52:c2:30:73:
                    f4:4c:06:f8:70:3a:4d:30:d0:fe:99:0a:0a:62:4c:
                    c2:22:ff:71:1a:f6:82:66:f3:56:d0:28:ab:8e:db:
                    ee:77:28:26:2d:59:7c:fb:d1:c7:3e:bb:03:a0:52:
                    0d:44:13:b5:cf:62:83:f5:2b:56:50:aa:ba:c7:15:
                    ff:1d:fa:38:1e:45:d8:19:a2:ad:1e:d7:b2:2a:3c:
                    d1:40:36:41:6c:6d:f7:51:5c:77:6c:c1:b2:34:74:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:45:34:85:02:A7:7B:B6:56:6B:5A:3B:5E:B3:D8:D1:DD:A5:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7AAE4AA8F1211F1A78D86EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.205.0-45.202.208.255
                  45.204.65.0/24
                  45.204.73.0/24
                  45.204.75.0/24
                  45.207.161.0-45.207.162.255

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:0b:27:ac:3f:35:cb:73:40:e8:b3:c3:eb:dd:d6:01:d3:
         a9:29:cb:3d:6f:f8:93:b2:28:86:c6:21:ba:4f:8e:73:ec:4c:
         1b:fd:d5:fe:59:bd:09:8c:f8:23:d8:65:0f:8c:c7:84:39:7d:
         29:98:45:db:a6:f1:e2:83:5d:7e:ab:ca:8a:32:7b:28:c1:d3:
         f3:39:97:1c:c0:ea:52:6f:83:1d:b1:b4:c9:7b:c7:61:a4:38:
         59:b8:41:9c:94:85:35:71:3c:06:c6:df:13:8e:4f:3a:73:5f:
         dd:25:a5:fb:2f:e0:60:55:df:47:67:19:dd:39:fc:b8:ec:4e:
         40:e4:7d:33:4a:63:f6:ba:94:86:81:5d:a0:47:dc:a9:22:1c:
         80:31:fa:52:dd:45:a9:84:5f:74:7c:fc:18:10:4d:4b:e9:11:
         1a:79:59:be:1f:52:ca:41:b5:fe:c7:a5:bb:74:96:53:c2:46:
         a2:e1:14:82:7d:5a:e9:31:ad:12:9d:09:45:8e:39:67:12:ad:
         75:cd:ca:11:04:75:b7:bb:23:04:5f:8d:3b:af:ea:2e:8d:db:
         cd:e4:24:58:8e:13:aa:78:8e:4b:44:c8:9b:d3:77:b0:c0:3a:
         5b:da:28:e3:4a:b3:d4:a5:58:03:af:ae:7c:69:2c:b8:83:29:
         5a:5d:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----