Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE4327B48B1D11F195A6E5CFCE1D38B0.roa
File:                     FE4327B48B1D11F195A6E5CFCE1D38B0.roa (raw, json)
Hash identifier:          ysJSXAM+78hCDSoUpYySMoNQvTj7ZDxdsoNWVbByXhY=
Subject key identifier:   E4:DE:57:70:77:8E:14:0E:C6:99:37:6A:20:93:DB:A6:A7:0C:7F:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C86F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE4327B48B1D11F195A6E5CFCE1D38B0.roa
Signing time:             Wed 29 Jul 2026 07:20:36 +0000
ROA not before:           Wed 29 Jul 2026 07:20:32 +0000
ROA not after:            Tue 01 Sep 2026 07:20:32 +0000
asID:                     44559
IP address blocks:        45.195.252.0/24 maxlen: 24
                          45.195.253.0/24 maxlen: 24
                          45.196.121.0/24 maxlen: 24
                          45.196.122.0/24 maxlen: 24
                          45.196.123.0/24 maxlen: 24
                          45.196.124.0/24 maxlen: 24
                          45.196.125.0/24 maxlen: 24
                          45.196.126.0/24 maxlen: 24
                          45.196.127.0/24 maxlen: 24
                          45.196.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 07:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116847 (0x1c86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 07:20:32 2026 GMT
            Not After : Sep  1 07:20:32 2026 GMT
        Subject: CN=6a69a9c4-0f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:b7:5e:51:58:61:6d:44:6d:46:e1:0f:04:
                    55:f7:1e:ed:36:9d:5f:41:bc:f0:04:7b:7a:fd:78:
                    d5:72:bc:3b:c1:6e:c3:c9:95:d3:98:52:a8:25:16:
                    29:36:2a:1e:e0:73:fd:a5:4f:6a:24:4b:41:75:77:
                    4c:6a:ed:fe:32:9f:1a:a3:a6:66:47:46:7f:a0:52:
                    6d:7f:f5:7c:78:ff:14:d2:0f:bf:dc:31:b5:e2:cb:
                    95:de:ab:2f:29:e8:ca:b0:3e:84:bc:b2:68:e8:6b:
                    a1:dd:f4:74:72:a2:3a:51:9a:4f:b4:fc:3e:c0:15:
                    17:02:b0:f8:dd:d7:04:97:4d:f5:b2:f6:00:95:af:
                    b5:db:d1:c3:7f:1c:84:b1:b9:07:4c:f2:30:e5:15:
                    e0:00:a9:be:3b:37:f9:c0:9d:66:d1:86:ea:4f:c3:
                    b4:8a:69:0d:99:1a:92:b9:14:af:19:0c:34:0b:d3:
                    50:dc:b1:59:0d:8b:9c:2e:f5:0f:e5:dc:96:bb:6b:
                    76:37:e5:f3:00:b5:4b:7c:e6:1b:ab:bb:57:97:e9:
                    4e:00:8c:99:ab:9a:69:4c:c4:b3:97:e2:34:b1:36:
                    26:e6:6c:37:2d:10:7c:56:0a:93:64:75:53:40:f0:
                    13:9d:20:10:b4:99:92:5e:ca:95:b8:3c:66:95:84:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DE:57:70:77:8E:14:0E:C6:99:37:6A:20:93:DB:A6:A7:0C:7F:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE4327B48B1D11F195A6E5CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.252.0/23
                  45.196.121.0-45.196.127.255
                  45.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:fd:e4:54:e8:28:e1:3d:26:2e:d9:b9:76:17:0f:ca:b2:
         85:70:37:40:1d:7c:67:4b:53:90:09:86:db:2f:e3:b2:b7:d4:
         7b:6e:6b:d8:4b:7c:71:19:55:03:02:bb:bc:52:a6:a7:a0:94:
         bf:cd:a5:4d:bf:32:19:a8:d9:08:df:5c:4f:80:0e:2c:97:94:
         43:de:ac:2c:1e:cb:f3:75:56:20:e6:58:2b:d9:44:49:a2:12:
         4f:4b:d6:9f:41:ab:89:33:8e:93:4a:30:8c:7b:b8:5a:33:18:
         62:e9:1b:0a:30:c6:df:73:b9:b8:c5:06:59:9e:e4:5c:cc:f7:
         4b:2c:25:07:f7:07:12:1e:01:f2:bf:dd:df:e1:27:0f:02:2f:
         a7:3f:dc:7a:c5:36:e4:ae:53:88:ee:25:1d:4d:83:24:a6:7d:
         07:0e:c7:74:aa:80:1d:1c:93:83:b1:09:af:5e:bc:9c:fc:30:
         aa:12:0c:19:a1:9a:d7:b7:80:83:d3:4c:bb:08:59:e4:2d:22:
         8e:ca:15:7a:28:57:5a:3b:ea:4b:c8:1c:50:f0:a1:f5:ce:9a:
         04:a2:79:27:dd:98:f0:ad:cf:37:a6:8a:1d:93:14:87:34:9d:
         fd:cc:b9:44:be:df:c7:df:b6:00:9c:51:aa:63:25:5e:44:82:
         d4:b2:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----