Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E30E00469D3211F18D2C800FCF1D38B0.roa
File:                     E30E00469D3211F18D2C800FCF1D38B0.roa (raw, json)
Hash identifier:          vHjpzz3EBclGeyPuu+GiEhsshVPdONhMLwXz34/OyF8=
Subject key identifier:   72:53:E0:66:51:55:04:03:56:68:87:F5:E5:A6:F1:13:2B:9F:FF:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E30E00469D3211F18D2C800FCF1D38B0.roa
Signing time:             Fri 21 Aug 2026 07:35:31 +0000
ROA not before:           Fri 21 Aug 2026 07:35:27 +0000
ROA not after:            Mon 20 Aug 2029 07:35:27 +0000
asID:                     17561
IP address blocks:        45.197.194.0/24 maxlen: 24
                          45.197.197.0/24 maxlen: 24
                          45.197.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118633 (0x1cf69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 07:35:27 2026 GMT
            Not After : Aug 20 07:35:27 2029 GMT
        Subject: CN=6a87ffc3-795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:69:c7:43:95:f6:d7:26:c4:4d:da:3e:69:
                    83:a8:3b:6a:45:5c:a2:a5:8f:5c:c9:20:12:96:e1:
                    bc:26:f0:d6:ba:3e:80:4d:c8:38:63:24:4b:be:28:
                    51:ad:6a:7a:6f:02:b1:70:b9:34:2d:ca:61:97:ac:
                    df:e3:06:34:d3:ce:81:08:94:aa:40:69:e4:ed:93:
                    45:bd:1f:f2:2e:9b:9a:4f:e5:07:b1:89:69:17:32:
                    91:e9:05:b1:d6:62:8c:83:3d:dd:0e:92:2b:50:25:
                    c7:82:88:59:d3:df:fc:bf:b6:6c:e0:f6:e6:91:b4:
                    46:47:b7:0c:3c:96:f5:e7:74:0b:62:6f:44:0e:44:
                    a5:7f:69:6a:f9:e4:72:b1:55:99:a7:bb:3a:33:33:
                    da:77:b5:71:2a:20:6c:56:7d:e1:df:e2:aa:40:dd:
                    d9:70:31:50:82:85:bd:56:fd:2b:39:36:d2:d8:35:
                    d8:9f:d2:c5:68:3b:41:f4:a5:2f:e8:37:04:9e:24:
                    0d:a1:ec:94:cd:f9:1c:14:d3:95:35:31:7a:c8:49:
                    6f:a6:6e:27:7d:2f:aa:da:4f:2d:2b:bb:c5:e5:7b:
                    a5:0b:8d:c0:90:65:35:40:e9:f5:f9:c1:32:da:eb:
                    fd:f3:99:53:ae:1f:99:51:63:85:b8:61:3f:fc:02:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:E0:66:51:55:04:03:56:68:87:F5:E5:A6:F1:13:2B:9F:FF:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E30E00469D3211F18D2C800FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.194.0/24
                  45.197.197.0-45.197.198.255

    Signature Algorithm: sha256WithRSAEncryption
         54:78:94:0d:29:eb:25:6d:9a:45:73:ef:09:bc:bd:17:fc:6d:
         fd:4b:a3:6a:94:1d:96:b9:d1:7c:b3:1e:e7:b5:c6:ad:4e:b7:
         30:9d:f0:ce:7d:5d:95:50:43:6f:d6:5f:7a:46:f4:22:78:14:
         d5:5b:08:84:58:ef:f7:31:00:37:3e:37:43:19:00:64:c7:3b:
         a5:95:f2:c0:2d:eb:35:90:44:8a:8c:48:03:69:ac:3a:fa:56:
         5b:e0:8c:7b:12:17:e1:95:4d:5d:4a:dd:b9:0f:36:41:6b:84:
         99:bd:e7:47:db:82:87:14:d7:08:59:a0:c8:e0:e6:d6:93:ae:
         cf:73:62:97:c7:61:6c:a5:0a:25:1d:57:b3:04:58:14:e5:5c:
         89:da:6a:26:ff:c6:77:63:74:83:9e:f1:d1:05:93:f0:fa:f3:
         1b:35:c5:cf:38:55:ad:8d:72:fe:cf:8c:a5:04:08:ee:19:39:
         74:00:a4:ab:aa:28:4b:6b:1a:1f:38:17:86:43:fa:eb:43:90:
         bf:ac:70:55:4c:5f:16:9d:7c:2b:48:b2:58:11:6a:c1:c1:4c:
         f3:11:75:93:63:d8:ed:e5:8f:79:af:e3:93:ae:c7:20:e1:82:
         8d:f4:df:67:04:a1:aa:d7:ef:4f:b7:47:00:40:dc:ba:a5:cc:
         49:b2:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----