Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D666DC44C3B311F1866971E4CE1D38B0.roa
File:                     D666DC44C3B311F1866971E4CE1D38B0.roa (raw, json)
Hash identifier:          wCDbKBhrsSRL2FjmaqvPD4bwOR3Ieu/Ek9V2JVZaxSE=
Subject key identifier:   88:37:BB:5C:53:01:86:62:0E:9A:C7:9A:EB:94:FA:4C:B6:F9:0E:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D666DC44C3B311F1866971E4CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:34:19 +0000
ROA not before:           Fri 09 Oct 2026 07:34:15 +0000
ROA not after:            Mon 19 Oct 2026 07:34:15 +0000
asID:                     140227
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 07:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121855 (0x1dbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:34:15 2026 GMT
            Not After : Oct 19 07:34:15 2026 GMT
        Subject: CN=6ac898fb-febd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:c4:ad:50:62:47:ad:99:15:da:be:8f:03:
                    a1:4e:82:fd:bb:ee:9b:30:a9:b8:2a:cb:27:66:2c:
                    23:a6:6c:79:03:1d:7c:49:ff:d7:88:07:be:a7:78:
                    f7:5b:18:77:21:1d:eb:38:da:ec:f7:2e:78:bb:ff:
                    d7:e3:67:18:35:ad:9d:73:eb:97:29:b8:20:a2:ea:
                    c1:ec:c7:f6:36:3b:7b:1a:4e:98:08:ff:1c:72:6d:
                    a2:ff:d1:d3:de:97:2d:62:7d:c6:2a:05:98:f4:b2:
                    83:a3:8b:2b:cb:7f:11:4d:31:f0:69:11:47:4b:28:
                    ba:d0:5d:1d:a0:b7:0f:47:51:08:37:8b:ce:b2:cb:
                    a0:58:5f:4a:72:62:6f:7e:a8:d2:f7:3f:19:09:8f:
                    0d:1e:dc:e7:04:bb:b6:de:8f:b9:4b:47:04:3a:29:
                    d0:11:66:33:4d:9b:a9:e5:24:14:60:bc:f8:7e:42:
                    4b:56:e0:6d:89:dd:e5:3e:4b:ca:7f:26:51:85:4b:
                    13:d8:01:69:69:d8:26:60:a1:46:4c:61:37:ed:d5:
                    6f:7e:b8:c4:e6:99:d3:63:fa:6d:f3:92:d9:2f:6a:
                    84:48:fe:04:e6:c9:72:a8:4d:4c:cf:14:57:0b:4b:
                    c1:3e:d1:75:4f:21:3a:4a:3a:20:80:b4:ca:b4:3b:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:37:BB:5C:53:01:86:62:0E:9A:C7:9A:EB:94:FA:4C:B6:F9:0E:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D666DC44C3B311F1866971E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:34:e2:d9:e9:47:51:c5:e7:16:fe:e8:6e:fb:9c:3f:e2:
         39:c3:42:15:3a:5a:30:d7:03:03:60:ec:fa:1a:9d:1b:13:20:
         3a:20:af:0b:7d:41:5c:cb:60:cb:eb:05:34:a5:cc:16:35:c6:
         68:3d:44:e4:d2:11:72:6f:19:ed:a0:f5:9c:dd:1f:95:b1:a1:
         b4:64:aa:87:11:a6:df:a2:c7:31:00:04:b4:7c:23:2c:9f:a9:
         83:6d:02:9d:5c:dc:97:10:b4:10:99:cf:b4:9a:e1:d4:c6:bf:
         c0:9c:4e:58:62:26:cf:d7:85:65:28:9d:c7:f8:f7:36:97:d0:
         4e:02:be:14:51:a3:97:33:ef:17:fa:5a:7b:cc:6d:db:8f:d4:
         e3:37:07:70:c1:ad:4c:21:d4:21:a9:f3:ad:f5:d6:8c:cf:58:
         09:c0:74:0a:a7:4a:59:34:ac:6e:5e:60:52:fc:82:98:18:f8:
         c6:df:c2:08:2a:07:77:51:64:59:82:48:be:c5:66:da:24:dd:
         8a:96:88:10:28:cb:a8:5f:b7:d2:38:5e:8c:86:e7:e6:9e:0b:
         85:7a:50:6a:13:28:f6:eb:3f:cd:8f:26:e0:66:73:0a:88:a5:
         b5:db:98:46:c5:0e:8d:77:2a:fa:b0:ea:70:2a:8c:bb:b4:da:
         0e:02:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----