Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9754954C21C11F18C81B7EFCE1D38B0.roa
File:                     D9754954C21C11F18C81B7EFCE1D38B0.roa (raw, json)
Hash identifier:          cP94jKY8hyScuI50CxfEUq+5Nj3Q1q52TH2+qbvPrWY=
Subject key identifier:   7B:82:00:A9:11:CC:C3:7D:F8:F6:B8:06:5D:83:C3:E3:27:4B:11:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9754954C21C11F18C81B7EFCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:00:59 +0000
ROA not before:           Wed 07 Oct 2026 07:00:54 +0000
ROA not after:            Sat 14 Nov 2026 07:00:54 +0000
asID:                     402289
IP address blocks:        45.197.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121763 (0x1dba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 07:00:54 2026 GMT
            Not After : Nov 14 07:00:54 2026 GMT
        Subject: CN=6ac5ee2b-b181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:1e:50:26:9e:cd:99:c6:f3:be:34:7d:51:
                    bb:a9:48:19:a2:f7:97:5e:73:f4:60:44:64:6a:e0:
                    46:54:54:51:f7:25:cb:3f:8c:bc:ce:94:9b:97:f1:
                    09:4f:60:47:c1:2f:ba:06:d6:54:27:91:bc:90:5e:
                    1c:12:e8:ae:e8:b1:71:1e:26:32:37:ef:f3:6e:d3:
                    cb:8a:e2:d8:e0:0b:79:8e:32:65:84:a1:08:6f:b2:
                    4c:8b:62:eb:a5:25:ed:17:8a:21:4f:c7:c9:33:71:
                    e0:81:76:fc:53:41:a1:2b:9a:7c:77:0f:9e:b5:e2:
                    cd:41:68:45:35:6d:21:1c:d9:56:90:33:99:bd:9f:
                    37:25:b9:48:19:80:d5:d0:9e:72:ec:8e:7c:66:07:
                    b9:45:27:ed:7c:e7:fc:21:b4:5b:ca:f4:4e:e5:39:
                    9d:c7:10:b4:ab:17:2c:f4:81:20:fb:97:58:02:1e:
                    9c:c6:15:1f:8b:77:49:9a:0a:7e:18:f2:2a:bf:c3:
                    49:09:36:3e:7a:9b:df:d5:92:fe:d1:4f:5b:b4:18:
                    2a:03:a8:27:a2:7d:07:ef:c8:be:62:03:bd:a7:73:
                    91:8a:aa:cb:54:c7:5e:74:36:77:dc:f5:68:6a:c1:
                    19:39:b7:a4:3a:30:bd:05:cd:73:b7:ca:47:8c:d0:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:00:A9:11:CC:C3:7D:F8:F6:B8:06:5D:83:C3:E3:27:4B:11:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9754954C21C11F18C81B7EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:48:47:94:fa:07:92:fe:49:35:9f:09:9d:f3:7f:34:95:
         58:88:38:c8:dc:28:3c:68:2d:ec:d4:0b:ea:df:d6:5c:cc:c7:
         16:c4:96:74:bc:18:91:23:8a:2c:ec:49:6e:2a:a9:f4:c0:06:
         60:ff:93:54:b7:b6:16:b3:2b:30:61:70:7f:ab:84:d0:63:05:
         55:06:98:f3:f4:9b:47:72:c8:50:59:cf:9f:51:8d:19:c2:46:
         56:fa:fc:89:a2:2a:11:1a:0a:c4:d3:dc:53:fb:61:21:eb:4a:
         35:d4:01:83:b7:c4:01:42:64:dc:2b:29:65:b1:4a:df:96:3c:
         58:6d:14:dc:b7:77:29:b2:15:a1:b0:06:df:0f:4b:76:6d:8d:
         f7:28:7b:36:1b:2d:91:79:d4:e1:a5:2b:46:41:c0:bf:6e:ce:
         46:b6:42:73:de:fa:d4:f6:a0:cc:57:73:71:6f:05:e1:ac:30:
         d2:fe:ae:3c:b7:e3:5b:ab:0a:03:b4:f5:70:d6:b5:4e:97:22:
         fa:9b:77:53:6e:52:2d:e8:00:50:17:ae:f0:0d:04:e5:54:18:
         6f:86:b2:36:a5:af:14:2f:d2:69:64:44:84:8e:05:5f:ff:3c:
         26:66:c6:61:9a:6b:80:3a:86:e5:a3:de:4e:a5:3a:6b:18:9a:
         0a:73:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----