Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91F03A0CAC111F1A7F22CEDCE1D38B0.roa
File:                     F91F03A0CAC111F1A7F22CEDCE1D38B0.roa (raw, json)
Hash identifier:          Sy9exnyP86pE/VELk+jVVsj2LPJkaC85/GtXCSE2dfY=
Subject key identifier:   9C:86:F7:66:70:0F:11:CE:39:C2:F4:C4:1B:E0:EF:1E:6F:7F:3D:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91F03A0CAC111F1A7F22CEDCE1D38B0.roa
Signing time:             Sun 18 Oct 2026 07:03:08 +0000
ROA not before:           Sun 18 Oct 2026 07:03:03 +0000
ROA not after:            Fri 04 Dec 2026 07:03:03 +0000
asID:                     140227
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 13:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122479 (0x1de6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 07:03:03 2026 GMT
            Not After : Dec  4 07:03:03 2026 GMT
        Subject: CN=6ad46f2c-1fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:8b:85:96:3a:ed:58:ea:c0:7b:96:99:39:
                    1e:5f:90:82:2f:88:5e:d1:dc:85:91:8f:3e:20:76:
                    f5:19:1b:ac:b5:f9:50:fc:ac:b4:ad:78:02:bf:b6:
                    5f:7c:11:5c:91:ec:9e:95:e3:b1:c3:da:e7:b0:f8:
                    1c:fb:3f:7b:57:d5:a7:e8:55:b0:b2:c5:1c:c4:83:
                    9b:12:fd:32:f8:1b:f1:47:88:b4:f3:56:b8:06:86:
                    e0:70:c8:dc:70:24:2d:73:43:8f:2d:4e:6c:2a:b7:
                    af:a0:31:f9:2c:8a:d0:43:f2:ca:e6:b4:ce:a8:f5:
                    24:ff:78:ba:b7:dd:c4:9d:32:41:9b:8a:d1:f4:65:
                    f8:c7:97:0d:91:a8:56:45:9c:fd:62:0c:08:c9:eb:
                    92:8e:7a:b7:62:85:64:d6:b5:25:de:a1:fa:70:e2:
                    61:7b:24:fd:6d:da:78:ab:41:86:4f:c4:3d:f4:67:
                    5e:a0:12:ca:7e:d5:46:62:bd:32:f1:fe:f5:65:a2:
                    3a:3e:19:49:0a:b7:e7:f6:67:96:81:21:f2:c1:10:
                    84:12:a9:da:a1:cd:8f:2f:25:e0:79:4b:67:f1:52:
                    05:36:e6:1f:b8:0b:14:11:8a:c9:35:d0:95:e5:ed:
                    e6:89:7a:62:36:44:a1:72:5f:4b:62:3c:22:05:07:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:F7:66:70:0F:11:CE:39:C2:F4:C4:1B:E0:EF:1E:6F:7F:3D:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91F03A0CAC111F1A7F22CEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:83:44:48:47:04:17:ed:78:03:8f:b8:c2:21:7e:4c:ab:
         1c:0f:87:f8:a3:98:3d:61:20:ae:89:00:6b:71:20:35:01:5f:
         4f:d3:df:ad:4a:52:d7:8c:d5:df:9f:e7:53:b7:ef:4c:9c:ab:
         8f:ce:ec:e8:37:05:97:c7:e9:7b:60:86:5a:31:92:00:2d:bf:
         e5:3a:e7:85:b2:08:d9:39:a8:67:5e:cd:50:dc:4e:85:3a:06:
         1b:8a:08:aa:d6:b3:fe:36:8e:31:1f:01:1f:d9:4d:e0:d0:02:
         10:83:64:03:3d:5a:b6:3c:44:67:d2:ad:b6:fa:eb:a8:80:fb:
         ac:a9:35:ce:3f:28:4c:81:35:dd:65:de:db:02:5b:9d:e9:dc:
         c6:54:7b:76:d1:d3:58:6d:e1:8f:70:ff:cb:d7:00:cc:0c:3e:
         21:12:d1:01:9e:7f:64:0b:58:cb:10:40:8f:17:af:29:20:e3:
         74:36:1a:63:c1:09:09:ba:3a:8e:31:5e:7e:ac:50:e7:8f:08:
         1b:e1:ad:46:28:da:df:81:5f:19:f7:5a:33:de:fc:6a:e3:5c:
         5a:3a:16:63:84:9d:2f:51:0d:a0:25:ef:59:5b:5e:c4:80:69:
         13:63:6a:7d:60:9f:b1:0f:08:36:27:0b:4a:ce:79:03:49:66:
         a3:22:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----