Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDDB9C4AA12611F1A29DCEC2CE1D38B0.roa
File:                     CDDB9C4AA12611F1A29DCEC2CE1D38B0.roa (raw, json)
Hash identifier:          gQyMn+ct2a7/VpPoAHmpFBtjl/+3XwB9+OPC565KZgU=
Subject key identifier:   89:0C:37:27:6C:A9:45:62:42:1A:AE:E3:20:CC:39:FC:19:AB:F0:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDDB9C4AA12611F1A29DCEC2CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:19:06 +0000
ROA not before:           Wed 26 Aug 2026 08:19:02 +0000
ROA not after:            Mon 05 Oct 2026 08:19:02 +0000
asID:                     213800
IP address blocks:        45.207.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119037 (0x1d0fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:19:02 2026 GMT
            Not After : Oct  5 08:19:02 2026 GMT
        Subject: CN=6a8ea17a-399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:25:ba:89:ad:13:1c:ae:48:54:9d:65:8a:
                    bb:ae:33:cf:13:10:00:0b:a9:c3:41:cb:68:8a:af:
                    f2:66:d1:92:74:ae:a5:1a:64:5f:7e:ad:e5:6f:4c:
                    20:17:ad:b4:d7:4a:a3:30:77:67:a3:52:6e:05:73:
                    86:84:0f:27:85:1b:29:16:d9:5a:e4:65:56:47:87:
                    9e:8c:f1:96:53:c5:56:cf:d9:4a:d1:2d:02:90:ac:
                    40:e4:96:d9:9a:bc:30:43:f0:17:93:38:a7:b9:0a:
                    aa:28:ee:84:c0:dc:f4:35:4a:d6:92:7e:33:43:c5:
                    a6:5f:eb:5d:cd:25:81:ff:76:8c:a4:94:37:1e:b3:
                    55:77:0f:0d:d1:0c:78:d6:7c:91:c5:5b:b3:6a:d0:
                    00:18:aa:68:52:66:89:fc:50:a2:48:61:b1:25:8c:
                    ae:fa:ae:82:35:5c:1c:78:81:8b:47:60:e6:6f:8f:
                    77:ac:8a:1f:ca:fe:58:40:a1:ca:e2:6b:e0:87:97:
                    5a:6f:52:f7:d8:fe:11:1f:62:b0:93:af:91:b5:3b:
                    5f:ce:f6:26:81:48:9f:40:9a:9e:69:db:9a:c4:38:
                    05:16:4a:53:e5:29:67:8f:92:76:57:36:d9:4d:7c:
                    60:15:d6:e6:e5:ae:cf:d0:ea:2a:00:45:a7:cd:b8:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:37:27:6C:A9:45:62:42:1A:AE:E3:20:CC:39:FC:19:AB:F0:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDDB9C4AA12611F1A29DCEC2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:7e:39:73:29:b0:44:00:27:b8:e5:15:1d:a4:59:f4:1f:
         d2:80:90:fc:16:e6:ed:c3:97:cc:b7:66:2f:08:f3:54:c1:10:
         fa:54:5e:b9:14:23:63:19:b9:bc:81:77:25:c8:4a:b2:96:ce:
         db:15:6b:68:ea:71:84:12:74:80:70:c5:76:a7:63:a2:8a:49:
         52:af:29:5a:47:72:ce:1b:58:4b:f8:ed:86:03:cd:3a:48:67:
         81:40:8f:25:25:e4:71:57:c8:e4:60:07:5c:78:91:9e:80:1d:
         b6:f7:a1:3a:f0:14:96:09:5a:19:91:ca:b5:0b:c4:cb:1e:bd:
         9d:a8:0c:ff:6d:c3:57:37:68:2d:d0:fb:e6:aa:98:fb:7a:03:
         39:ee:87:d5:7a:70:f8:97:eb:de:71:76:cf:0a:3e:b8:c4:b8:
         04:55:8b:25:d3:f0:d9:03:68:83:e9:36:4b:0e:98:57:06:30:
         47:14:0d:1f:78:38:e9:bd:4c:9c:4c:15:62:53:e5:0c:82:e3:
         8e:7a:16:d6:1b:8c:45:38:ee:d4:a3:af:ab:69:70:84:15:54:
         7f:55:0b:2c:89:81:15:77:74:83:5b:d3:81:96:58:31:54:32:
         6f:2c:eb:62:20:38:25:87:11:2e:55:6a:00:eb:03:b7:fa:8d:
         75:87:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----