Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C743BE9BB111F1855101EECE1D38B0.roa
File:                     D7C743BE9BB111F1855101EECE1D38B0.roa (raw, json)
Hash identifier:          aSMWCSPNRbcRjN2Qb+L9ReGVsb3Xn46SAfC0ZS0vrGo=
Subject key identifier:   E4:E1:88:87:92:01:51:8D:D4:34:D6:0A:A6:F5:86:EE:CB:32:7B:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C743BE9BB111F1855101EECE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:39:16 +0000
ROA not before:           Wed 19 Aug 2026 09:39:12 +0000
ROA not after:            Sun 11 Oct 2026 09:39:12 +0000
asID:                     209750
IP address blocks:        45.207.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118367 (0x1ce5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 09:39:12 2026 GMT
            Not After : Oct 11 09:39:12 2026 GMT
        Subject: CN=6a8579c4-84a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:31:12:ac:cd:be:be:b1:95:15:59:86:ab:
                    13:4f:b9:1b:4a:57:64:50:b2:ea:a1:71:c0:3f:9e:
                    26:d7:a6:7f:4a:0b:aa:6f:ac:d7:3f:fc:36:98:19:
                    41:7f:49:66:e5:2a:8f:ad:e5:bb:c0:38:07:f4:58:
                    2c:f3:ef:c2:8a:4e:cb:67:36:d4:e2:9e:e7:06:13:
                    62:99:99:e1:ad:c5:13:7e:f0:a3:3d:df:1c:26:6c:
                    17:cf:e3:4d:58:6b:76:25:fa:78:2b:e8:59:c2:f9:
                    8a:b0:ec:64:6b:9e:61:e4:48:5a:f0:a0:69:f0:0e:
                    07:cd:c0:79:c9:25:74:80:39:04:d1:df:e0:a6:4a:
                    14:58:39:e8:b0:55:07:7c:44:9d:8d:fb:e4:95:ca:
                    40:cb:fd:ac:59:64:3f:1d:42:7c:c1:0e:c9:cc:5d:
                    8d:56:2d:b5:5b:17:59:92:23:8b:7d:f9:67:92:b8:
                    f6:59:50:71:78:8a:dd:1f:f5:cf:e0:0a:7d:f6:6a:
                    21:9d:4d:63:2f:de:c6:6e:d4:b9:55:90:39:32:39:
                    08:40:e4:e9:dd:de:1f:15:a2:e4:d8:a3:f1:20:12:
                    b7:0b:3e:00:e0:0e:e5:f2:3c:d5:7d:d8:d1:f2:97:
                    36:a4:41:99:b0:66:96:6c:3f:21:ff:43:8b:5e:23:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:88:87:92:01:51:8D:D4:34:D6:0A:A6:F5:86:EE:CB:32:7B:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C743BE9BB111F1855101EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:21:ee:09:1a:d9:73:c1:84:54:95:96:a0:62:31:b2:80:07:
         92:a6:d6:c4:31:48:ad:10:fd:9e:52:f9:98:5f:b5:60:d8:6d:
         b0:c4:97:02:30:af:76:bb:12:25:db:d3:66:29:fe:ab:21:04:
         75:f4:4a:10:bd:6c:34:0b:ea:cc:3c:59:a3:3c:6f:80:5a:2b:
         34:4a:cc:49:c3:9d:1d:1d:80:4e:e6:67:83:cd:82:50:b0:12:
         0e:5d:db:83:14:09:d5:35:50:bc:68:11:c1:40:db:4f:d9:cc:
         c0:f7:df:c4:36:ad:d0:cb:7b:bf:84:b3:af:f8:09:91:6d:2d:
         e1:34:5f:17:98:55:79:ac:61:48:97:d1:90:7d:73:26:fa:d8:
         d2:73:fa:f5:f1:da:9f:4b:a2:47:26:fd:c1:7c:88:45:23:59:
         26:9a:94:27:db:17:19:71:c8:42:8c:ec:d2:c8:e4:83:50:20:
         3e:02:91:25:c1:33:5e:15:57:e4:90:89:a6:c2:11:d6:e9:06:
         1a:0a:96:1b:38:dd:90:6b:d2:48:2e:5e:f4:ce:74:be:4f:43:
         32:3d:45:2f:28:0c:a1:f4:fa:fd:c7:f5:cb:c6:4c:a0:a5:14:
         19:88:05:51:d9:b9:c8:12:ce:4e:dc:b3:91:d1:3b:84:be:2a:
         e0:6a:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----