Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D343114E9BB911F1A906F31ACF1D38B0.roa
File:                     D343114E9BB911F1A906F31ACF1D38B0.roa (raw, json)
Hash identifier:          aVerwDQ8skTGVKUr7cAze7V4leq5KPn3Jb5OJrCxIAA=
Subject key identifier:   45:EF:1B:99:3A:37:32:E3:E7:31:6F:E2:9E:B7:CB:F3:65:28:98:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D343114E9BB911F1A906F31ACF1D38B0.roa
Signing time:             Wed 19 Aug 2026 10:36:24 +0000
ROA not before:           Wed 19 Aug 2026 10:36:20 +0000
ROA not after:            Thu 19 Nov 2026 10:36:20 +0000
asID:                     139923
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118379 (0x1ce6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 10:36:20 2026 GMT
            Not After : Nov 19 10:36:20 2026 GMT
        Subject: CN=6a858728-86d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:a3:0b:39:7a:f3:4d:53:e2:a5:7f:d2:b4:
                    61:e7:e6:42:bd:bf:73:46:9e:29:e5:b2:3a:2d:f5:
                    e9:11:7a:fd:a1:5a:99:e6:d3:67:81:63:97:3f:75:
                    7f:47:1e:4b:0c:bf:61:f7:ba:cb:5a:a1:46:55:43:
                    42:35:98:a7:93:e0:c7:db:96:fd:d8:3d:87:4e:2c:
                    fb:97:18:b9:9a:92:db:9b:6e:7b:25:7a:b9:98:c2:
                    12:1b:45:0f:b6:ca:1d:d5:ed:b2:b4:9a:65:af:4e:
                    e9:4b:89:1e:97:58:b7:77:be:65:f0:1f:36:4c:31:
                    79:82:99:a1:cf:0a:db:96:71:8e:54:8a:b8:af:22:
                    a3:85:f4:bf:8c:8a:b5:45:b5:86:38:28:91:ef:10:
                    0a:02:b9:06:36:13:eb:eb:5d:a6:94:8c:05:9f:59:
                    87:cb:58:0b:a9:87:38:c8:95:42:8e:b4:8a:e9:85:
                    0a:ba:36:80:69:23:49:06:3b:62:0e:cc:24:0d:71:
                    01:38:48:43:59:99:47:65:c0:6b:1d:c8:ca:26:67:
                    6c:0b:d4:3b:64:34:c1:82:93:46:7f:c7:83:a8:28:
                    bb:8e:fd:10:fd:03:88:2c:e7:e9:92:ca:f0:e1:14:
                    16:ca:46:6e:d4:66:31:eb:93:45:f2:dd:5e:33:e0:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:1B:99:3A:37:32:E3:E7:31:6F:E2:9E:B7:CB:F3:65:28:98:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D343114E9BB911F1A906F31ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:22:39:97:c3:68:19:1b:ad:ca:47:42:9d:09:7c:5b:c8:6a:
         9f:6b:b7:0d:1f:38:47:d7:6a:92:79:97:e2:c7:9d:d6:6a:a8:
         e5:49:85:6d:0c:32:d8:b0:24:ac:0f:7a:1e:37:61:80:dc:c8:
         66:28:49:2d:3c:16:3f:a0:9d:ad:0b:2b:fa:4f:b1:42:3c:7c:
         32:c4:c6:c8:ed:85:96:d0:4e:10:ed:ae:fa:6c:2c:76:15:a4:
         0c:84:8f:c1:6f:07:f6:86:27:94:c2:5b:bd:2d:97:c3:9d:75:
         e0:a3:75:aa:da:5e:95:e6:e2:97:82:05:cc:60:ab:16:2d:77:
         ae:34:4b:83:43:7e:41:12:a2:23:7b:74:4a:bb:72:34:d7:f3:
         7f:90:38:92:e9:dc:99:a6:13:d4:c1:b2:eb:4a:61:21:d3:ef:
         8f:b0:c0:f7:d2:0f:ad:c2:6f:1d:40:74:51:11:9d:bf:15:39:
         ab:dd:41:ea:98:a4:82:ac:1e:ed:40:4d:e5:3f:27:9d:2f:36:
         a4:10:d2:c0:a0:20:ab:fe:48:a5:2e:88:bb:cf:c2:5b:92:2e:
         1a:4e:8a:53:3f:b6:7c:5f:c4:6b:0c:79:91:67:f5:22:96:f3:
         50:0f:da:dc:92:65:91:b2:1c:8b:3a:13:d8:ab:86:31:77:c3:
         97:08:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----