Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF0A9EAC87B11F1B9237E13CF1D38B0.roa
File:                     CAF0A9EAC87B11F1B9237E13CF1D38B0.roa (raw, json)
Hash identifier:          FuhY4m7q0KCXiaNl+Jc7FhRGTBjoD0ExEYcrGeFxDWs=
Subject key identifier:   0F:8F:90:4D:E9:7D:AA:E3:6E:59:C7:36:F6:5A:B8:8D:99:D1:D9:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF0A9EAC87B11F1B9237E13CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:35:44 +0000
ROA not before:           Thu 15 Oct 2026 09:35:39 +0000
ROA not after:            Mon 07 Dec 2026 09:35:39 +0000
asID:                     274320
IP address blocks:        45.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122295 (0x1ddb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 09:35:39 2026 GMT
            Not After : Dec  7 09:35:39 2026 GMT
        Subject: CN=6ad09e70-3fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:35:d1:6f:fc:2c:b8:00:6f:4e:c7:5f:9b:
                    4d:60:71:7d:db:36:97:b3:d4:2a:c0:4b:e7:2a:2a:
                    b2:81:4e:f4:b3:6e:ba:9b:d4:41:0e:13:8d:d2:28:
                    55:e8:4a:e6:3f:f0:9c:2b:85:25:2f:10:97:28:b3:
                    02:54:1d:7e:b5:eb:34:b9:26:9c:78:10:70:2f:df:
                    09:85:ff:a6:d4:c8:24:bd:b8:92:41:04:c1:54:dc:
                    99:79:e0:4d:6c:27:12:43:72:d2:89:5c:ff:20:13:
                    5d:a4:90:50:5f:4a:74:90:67:6d:8a:d9:f1:31:de:
                    1a:68:d0:bf:88:fb:c8:96:96:dc:95:b8:5d:41:af:
                    e6:62:47:dd:cb:19:ae:19:9f:e1:c3:3b:73:29:81:
                    b5:cb:07:82:e9:49:01:ba:6f:01:ba:85:bd:10:e8:
                    d8:07:31:ab:4d:d0:99:3a:23:64:cb:4b:55:1f:64:
                    d5:4b:3d:7c:04:75:35:f7:3d:dd:e0:ed:9c:77:e2:
                    31:8b:01:47:02:d0:9b:b0:75:fa:bd:af:be:e0:3b:
                    a2:fb:97:cd:7d:3f:66:f5:41:b1:fb:1c:23:e5:f9:
                    50:32:b2:79:23:2c:54:82:32:4e:3b:e9:cb:37:d1:
                    7b:39:66:74:6c:e3:ea:8e:56:1a:48:0f:59:99:bc:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:90:4D:E9:7D:AA:E3:6E:59:C7:36:F6:5A:B8:8D:99:D1:D9:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF0A9EAC87B11F1B9237E13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:41:b3:92:f4:07:0b:73:45:6a:73:28:21:4c:31:8c:70:8e:
         36:4a:c0:9b:41:5e:a8:02:1b:5a:eb:f8:f2:53:f9:94:61:7a:
         2f:9f:d8:20:13:09:2c:31:12:61:0f:6b:1e:17:9f:f6:ff:b0:
         a0:86:e8:98:e7:30:d8:3b:96:ae:37:e1:3b:a4:0a:a3:90:0e:
         10:a7:12:53:4b:a5:b0:a4:cd:eb:aa:03:bd:b9:7a:c8:76:6b:
         0e:e8:54:59:fc:6a:64:df:63:25:66:46:c0:9d:20:2f:ad:85:
         ec:b9:16:87:51:2e:7a:1f:22:4d:b3:95:c0:20:94:6c:33:ac:
         97:73:b7:c5:ab:1f:97:55:18:95:16:24:fd:6d:0e:33:5b:06:
         2c:a4:03:bb:04:77:43:a3:40:7d:e4:9e:63:ea:fa:4d:eb:6d:
         0c:64:e6:11:c6:2f:ba:ec:9b:a4:02:78:9e:60:ad:0c:34:ed:
         a0:90:24:10:f9:0f:0a:20:72:ef:64:0b:c8:d0:23:e7:4a:fc:
         5c:c4:6e:53:7a:2e:4c:3d:ec:87:ff:18:bb:2b:7f:33:a0:56:
         03:af:1d:dc:4f:67:18:5f:79:8d:a7:3f:1b:d9:82:f0:dc:5d:
         78:1d:51:32:fe:e9:a7:9e:f4:c0:9d:09:50:ee:fd:93:93:00:
         e4:63:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----