Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC8010F49D4D11F1B5498BB2CE1D38B0.roa
File:                     EC8010F49D4D11F1B5498BB2CE1D38B0.roa (raw, json)
Hash identifier:          PgDy0WCoZVSVeDTTCjxbrkzooFCLPT4xqJWFKc8C1Zc=
Subject key identifier:   B9:7F:9F:BF:1F:80:F5:79:22:FF:DD:F0:A3:3E:E3:04:CD:8E:5C:20
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC8010F49D4D11F1B5498BB2CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:49:03 +0000
ROA not before:           Fri 21 Aug 2026 10:48:59 +0000
ROA not after:            Tue 29 Sep 2026 10:48:59 +0000
asID:                     202656
IP address blocks:        45.200.164.0/24 maxlen: 24
                          45.200.165.0/24 maxlen: 24
                          45.200.166.0/24 maxlen: 24
                          45.200.167.0/24 maxlen: 24
                          45.200.168.0/24 maxlen: 24
                          45.200.169.0/24 maxlen: 24
                          45.200.170.0/24 maxlen: 24
                          45.200.171.0/24 maxlen: 24
                          45.200.172.0/24 maxlen: 24
                          45.200.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118700 (0x1cfac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 10:48:59 2026 GMT
            Not After : Sep 29 10:48:59 2026 GMT
        Subject: CN=6a882d1f-0884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:87:f0:1d:e6:55:9b:51:05:ef:b2:dd:50:
                    b8:5d:7e:28:c4:67:2b:df:a8:fa:a9:fc:8e:fb:78:
                    cd:7b:a5:a8:4a:81:24:e6:c0:f1:2f:27:f8:dc:0c:
                    6c:4e:2e:57:19:a4:96:f7:85:20:54:98:c8:04:bf:
                    2b:fa:8e:df:65:dc:cb:9a:38:be:a7:7d:b4:17:6e:
                    de:31:55:5d:e3:08:21:2f:a1:2b:ff:cd:a7:bd:ff:
                    bf:45:fe:1b:93:16:ce:97:cc:8d:fa:1b:fa:54:81:
                    a5:30:6a:28:7a:34:2c:d1:eb:3f:7b:58:f2:a7:17:
                    1c:e2:c8:af:8a:4c:64:f5:93:51:48:16:61:7a:2d:
                    77:14:5b:38:cc:64:0d:8c:db:d9:75:79:ba:23:30:
                    cd:8b:9a:9e:67:ac:bd:e2:6a:a3:f3:3a:b8:25:24:
                    f6:67:f7:f9:da:97:af:5a:a3:31:9a:65:3d:10:66:
                    2f:3f:d0:0d:94:6e:83:87:53:a9:16:73:62:ae:e7:
                    61:61:2b:6b:66:1b:41:80:8b:3a:f3:21:21:53:78:
                    2a:52:76:29:c0:d0:a5:c7:9f:1f:78:f6:f2:1f:2a:
                    82:d6:8d:3a:18:b9:c4:2c:08:68:59:2d:37:6b:2a:
                    4f:39:a4:ed:ac:6d:32:f2:c8:cf:a9:59:26:da:ed:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7F:9F:BF:1F:80:F5:79:22:FF:DD:F0:A3:3E:E3:04:CD:8E:5C:20
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC8010F49D4D11F1B5498BB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.164.0-45.200.173.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:98:14:15:ff:9e:8f:87:89:41:d2:66:dd:04:ed:46:d3:
         28:b1:db:33:e6:ca:77:5c:35:2d:c4:d2:7e:c6:49:aa:00:e3:
         a1:f8:57:be:22:b1:2c:e4:36:6d:90:9c:a0:14:2a:4d:ea:de:
         2c:04:a7:d6:6c:96:c0:69:c4:b0:9f:ba:64:c5:e2:b2:60:13:
         7d:7a:62:8b:3b:93:fa:99:bf:87:66:0e:7d:d3:7e:7d:79:fe:
         bf:58:69:25:27:49:ce:08:53:e0:78:0a:eb:ea:a4:c8:f8:37:
         c0:e9:43:f4:bc:df:39:b0:fb:3e:b6:36:5b:eb:1a:3a:4c:23:
         02:a2:37:24:61:d0:0c:ec:6f:a7:31:3a:45:c2:59:75:74:9e:
         63:74:34:2d:cf:cb:f3:a5:cd:ae:ba:8f:d5:d6:56:4a:d8:b3:
         16:6c:4c:f1:85:9a:4c:65:b2:46:bc:51:e7:41:46:73:d4:86:
         34:9c:60:82:1f:83:5b:05:4a:08:45:eb:1f:5d:29:0f:f8:00:
         a0:a6:9c:0d:51:05:01:cf:01:c8:ee:7a:7a:9d:77:b6:b2:97:
         e8:46:b1:af:3f:88:19:c3:72:df:13:ee:fb:a4:fc:2a:82:7e:
         d3:28:ee:7a:43:96:52:56:9f:90:c4:40:da:72:5f:3f:14:b4:
         dc:5d:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----