Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F21E06129D7D11F18B5088CDCE1D38B0.roa
File:                     F21E06129D7D11F18B5088CDCE1D38B0.roa (raw, json)
Hash identifier:          q4n7qGm3Lxf1FFHFSDhj4ZQ3HFJLs5qslkDXEOUE30c=
Subject key identifier:   B5:04:B4:D2:ED:97:4F:E0:84:8E:AB:17:F6:24:50:42:F6:74:C6:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F21E06129D7D11F18B5088CDCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 16:32:49 +0000
ROA not before:           Fri 21 Aug 2026 16:32:45 +0000
ROA not after:            Mon 21 Sep 2026 16:32:45 +0000
asID:                     271875
IP address blocks:        45.195.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118766 (0x1cfee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 16:32:45 2026 GMT
            Not After : Sep 21 16:32:45 2026 GMT
        Subject: CN=6a887db1-a93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:5c:54:f7:78:04:bb:05:bf:29:fa:3a:dc:
                    19:c0:c8:e2:56:c7:3a:ac:6e:fe:d6:57:ae:02:32:
                    f4:d9:f2:49:ce:a0:ca:83:ae:f5:ac:91:03:ca:bc:
                    52:68:27:35:f7:b9:39:5e:90:74:b0:1b:8b:8a:31:
                    4d:c1:a4:a5:1a:5a:59:4f:65:90:b4:48:50:cd:b4:
                    d1:9d:c1:48:b6:46:df:a8:1a:45:52:6c:9e:41:a5:
                    4a:43:31:bc:68:3a:ee:aa:e6:e7:d3:09:11:ef:c8:
                    60:ca:63:c8:c4:26:f0:01:d6:ee:18:8c:46:b5:dc:
                    98:06:99:07:c0:17:fa:8d:eb:a6:58:43:1a:4a:f8:
                    4b:6b:fe:a5:8b:c9:79:8f:f7:bc:b9:65:9a:62:0e:
                    08:9c:a1:0d:76:cb:32:be:df:95:df:7b:72:5d:6e:
                    ff:53:a9:4d:3d:2e:e0:00:d1:ce:e9:02:03:c1:d7:
                    b4:9b:6d:67:fe:af:fd:11:5e:ea:b0:69:a2:0a:ca:
                    03:e7:0c:b4:81:a3:07:34:c6:a3:3f:76:50:c9:6d:
                    9b:87:24:4e:c9:b8:f1:29:f5:4b:53:73:a6:a0:2b:
                    1e:5b:49:6e:64:5f:a2:72:5f:29:83:dc:60:77:f0:
                    63:90:de:73:2e:75:78:92:01:e3:46:b9:50:8f:77:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:B4:D2:ED:97:4F:E0:84:8E:AB:17:F6:24:50:42:F6:74:C6:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F21E06129D7D11F18B5088CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:58:41:a7:18:e1:d6:82:e7:90:ec:6c:4d:d0:49:3c:4e:
         75:16:d7:10:7a:ae:cc:fa:75:ec:0b:51:ee:fd:28:7c:cc:21:
         f2:44:f4:2d:14:4c:1b:e3:4e:7a:cd:94:cc:4b:37:13:72:c8:
         f3:ce:c3:5b:77:40:b6:1d:2b:79:c4:7d:d0:fc:f9:cb:35:cb:
         8b:33:ff:45:5e:51:50:a2:b2:f1:90:a9:df:f9:07:8c:ee:9f:
         59:fa:b9:41:df:53:e5:1d:b3:1c:c2:3c:57:99:f1:46:e9:0c:
         6a:94:f8:2e:e4:48:17:e1:c6:c8:b8:8a:75:0e:82:92:8a:81:
         95:33:c2:4b:7e:0e:e5:af:40:d9:1f:86:b1:c9:a4:3f:d3:4c:
         c7:dd:b2:20:14:9f:b2:81:d7:46:e7:4c:09:94:bd:62:99:98:
         f9:69:7e:aa:d6:35:63:e2:a8:f1:d2:c6:82:60:47:dc:8b:5b:
         41:3a:c2:aa:24:eb:b9:46:4b:05:b6:73:24:9a:66:0b:86:d4:
         21:06:6e:04:a2:e5:f5:13:81:0c:8a:c1:c6:56:5d:2f:43:16:
         cd:6b:ad:15:a7:f5:06:08:d6:f3:74:dd:7d:e1:93:b6:0f:c3:
         12:8f:93:aa:e1:a5:21:bc:a6:b8:4a:60:0b:c3:8f:9a:4b:f4:
         1d:1d:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----