Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F68D4696968311F181B85EF7CE1D38B0.roa
File:                     F68D4696968311F181B85EF7CE1D38B0.roa (raw, json)
Hash identifier:          Th++Kr4md0FoEsX33OF11D9hbTfKamNUj5rhwoEkkeA=
Subject key identifier:   F8:86:91:CC:65:9F:21:31:FB:98:53:4E:EF:77:7A:83:8A:DB:FE:17
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F68D4696968311F181B85EF7CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 19:28:15 +0000
ROA not before:           Wed 12 Aug 2026 19:28:11 +0000
ROA not after:            Sun 12 Aug 2029 19:28:11 +0000
asID:                     17561
IP address blocks:        45.194.157.0/24 maxlen: 24
                          45.194.158.0/24 maxlen: 24
                          45.194.159.0/24 maxlen: 24
                          45.194.160.0/24 maxlen: 24
                          45.194.161.0/24 maxlen: 24
                          45.194.162.0/24 maxlen: 24
                          45.194.163.0/24 maxlen: 24
                          45.194.164.0/24 maxlen: 24
                          45.194.165.0/24 maxlen: 24
                          45.194.166.0/24 maxlen: 24
                          45.194.167.0/24 maxlen: 24
                          45.194.168.0/24 maxlen: 24
                          45.194.169.0/24 maxlen: 24
                          45.194.170.0/24 maxlen: 24
                          45.194.171.0/24 maxlen: 24
                          45.194.172.0/24 maxlen: 24
                          45.194.173.0/24 maxlen: 24
                          45.194.174.0/24 maxlen: 24
                          45.194.175.0/24 maxlen: 24
                          45.194.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117816 (0x1cc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 19:28:11 2026 GMT
            Not After : Aug 12 19:28:11 2029 GMT
        Subject: CN=6a7cc94f-4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:a7:cc:4b:12:b3:e4:e1:5e:fb:97:6a:9e:
                    3f:de:33:bb:e6:3e:26:fc:53:61:c6:d8:f4:d8:c2:
                    41:0c:20:99:74:19:98:22:69:d9:37:34:46:4a:28:
                    7d:d1:bd:73:ab:a3:14:6c:9e:86:b9:72:98:61:10:
                    cc:cd:f0:e6:39:99:9e:ab:2f:f7:98:23:db:06:1b:
                    69:f3:dd:8f:5b:e2:80:30:21:a7:6f:b6:d8:aa:5e:
                    25:9e:44:e6:5e:bc:5c:88:af:cd:75:b5:f1:17:2d:
                    59:6c:97:f2:fd:64:ca:fe:c0:00:9d:f7:b5:c7:f2:
                    5a:77:a8:ba:a1:ed:2e:89:a9:26:e6:00:0a:af:67:
                    7d:20:76:0a:1d:cb:c1:8d:7a:cb:2a:17:f5:ba:0c:
                    6d:c7:a1:b5:ca:19:b9:69:2c:4b:85:20:47:a8:3f:
                    59:1a:97:6e:55:15:26:f7:1a:01:3d:99:6b:8a:e9:
                    36:db:2b:eb:f3:28:76:15:cd:37:16:11:25:74:18:
                    c8:10:d3:de:8e:19:73:5d:ef:0f:5b:e1:cd:1e:0f:
                    8e:32:8c:5d:04:96:88:24:6d:18:ac:f6:f3:0d:35:
                    66:f4:ca:8c:9e:bc:49:99:e7:42:ea:0e:c8:05:f9:
                    77:7d:1e:82:71:d5:00:5a:39:d6:6f:d8:43:90:c6:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:86:91:CC:65:9F:21:31:FB:98:53:4E:EF:77:7A:83:8A:DB:FE:17
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F68D4696968311F181B85EF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.157.0-45.194.176.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:1a:74:9b:59:91:9e:fc:19:7b:9d:1c:45:e0:9d:8d:d0:
         19:54:99:87:56:3b:05:de:b6:8c:6f:c2:0e:e0:5d:19:6d:61:
         e6:54:03:8d:08:33:5c:ee:3b:4a:3d:e0:c7:72:1c:e9:4f:85:
         47:1b:db:f7:90:29:59:13:1a:d5:97:3f:81:51:39:cf:c9:87:
         1f:88:cd:21:d9:fa:1e:cf:d4:b6:23:86:2f:40:bc:ab:f8:2c:
         34:14:a7:65:f8:40:f4:5f:2c:f0:62:96:ff:4f:0c:33:4d:de:
         34:93:62:e9:04:be:ab:72:b4:db:72:e4:d9:75:ea:db:76:02:
         11:df:6e:0e:b2:ef:6c:7a:38:85:73:73:7b:bb:9a:ce:3a:c9:
         7c:ff:a8:77:3e:8f:89:79:24:a3:17:c2:d0:d2:e3:14:bb:79:
         6a:b4:d5:21:d5:9f:5c:bf:16:d4:4c:f4:a1:c3:dc:07:17:4f:
         34:1c:c6:42:bc:97:aa:fb:9e:c1:47:af:e1:8f:c1:b2:66:37:
         02:37:cb:d7:a5:b7:ab:2e:70:bb:09:ab:48:ec:aa:75:1a:65:
         20:89:59:dc:10:ed:c7:b3:5c:ef:8b:a9:e7:05:5e:2b:c1:a2:
         c5:a5:f2:f8:88:bf:b9:56:df:40:2d:0a:5a:e9:9d:49:56:40:
         be:59:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----