Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2F69F2CAC511F184C0E206CF1D38B0.roa
File:                     FF2F69F2CAC511F184C0E206CF1D38B0.roa (raw, json)
Hash identifier:          RlI8usxFF5q6MaIhwxfsO/lVJHKLUax3jwcDlUNX7o4=
Subject key identifier:   5E:42:B0:6A:84:3A:7D:90:2F:65:EA:23:72:0F:FE:B8:5E:ED:25:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2F69F2CAC511F184C0E206CF1D38B0.roa
Signing time:             Sun 18 Oct 2026 07:31:57 +0000
ROA not before:           Sun 18 Oct 2026 07:31:52 +0000
ROA not after:            Fri 04 Dec 2026 07:31:52 +0000
asID:                     40115
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122489 (0x1de79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 07:31:52 2026 GMT
            Not After : Dec  4 07:31:52 2026 GMT
        Subject: CN=6ad475ed-8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:97:60:e6:3c:bd:8a:51:a5:21:b7:68:48:
                    fa:e2:9f:03:7c:fa:a3:95:52:2d:e1:a6:f9:77:c9:
                    42:26:b5:5a:95:5a:08:6d:19:2a:03:17:33:84:8e:
                    b1:89:dc:42:02:82:8b:2e:28:b3:fa:77:cb:37:c4:
                    b1:df:d9:05:f3:97:d6:c8:5e:0a:a1:00:b4:eb:f9:
                    d9:01:c9:26:c6:8b:de:0a:9d:df:5e:de:b4:14:4a:
                    c9:5c:1f:37:bf:2c:07:5d:76:b9:39:35:13:41:b9:
                    f6:b0:a3:28:54:90:9d:71:70:67:f9:7b:5e:da:8e:
                    da:65:d6:89:5a:33:8a:e9:c9:9b:a0:39:38:6d:72:
                    e9:fe:65:f6:a3:55:98:6e:c8:4f:9a:07:3b:ee:a8:
                    57:ad:9a:7e:1d:8e:1d:a3:da:44:75:dc:43:53:17:
                    2f:a1:0e:c3:71:2b:46:fa:bd:ac:de:bd:30:69:1d:
                    21:35:3d:2e:66:96:e4:32:38:49:da:8a:c1:c6:6c:
                    92:a5:10:8d:16:77:54:fd:2e:7a:6a:87:79:5f:6f:
                    e8:a5:74:1b:90:c0:38:03:d8:52:70:82:ea:71:36:
                    99:0b:d6:a1:04:94:9e:6b:e9:cf:98:66:f2:a3:c6:
                    8f:f0:40:2f:74:08:d3:7b:11:7e:5e:be:67:d9:1b:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:B0:6A:84:3A:7D:90:2F:65:EA:23:72:0F:FE:B8:5E:ED:25:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2F69F2CAC511F184C0E206CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:0a:22:01:d1:71:81:4d:77:dc:11:eb:3a:9d:55:61:94:
         8f:49:79:40:72:2c:1d:b1:e2:5b:ef:94:b5:0c:1d:7f:7e:83:
         d6:a1:ad:0b:42:1e:36:11:52:40:fe:e4:ea:ee:6a:0b:2a:16:
         14:87:33:3b:e1:73:63:90:1c:a4:21:f5:d5:5f:c0:2d:bf:7b:
         d7:f9:88:68:aa:5a:13:e2:39:82:e7:1b:63:ce:a2:35:05:a6:
         d3:91:2c:6e:c6:b2:12:4c:3d:55:2b:ca:8b:dc:96:0b:7b:9f:
         7c:f0:16:a0:96:38:88:25:90:c2:3d:4b:bb:cc:ba:4b:25:df:
         49:53:f5:df:f4:fd:af:65:12:93:46:d4:00:9b:ee:c0:bd:1d:
         9a:3a:4f:51:d8:53:d0:c5:bb:42:19:48:92:53:5e:46:37:d4:
         b0:4f:8f:e6:e0:7e:6b:67:af:be:90:af:35:f2:43:7a:03:be:
         a4:52:28:95:f3:b7:a4:26:9c:1d:2f:80:7a:ce:d8:8c:c8:75:
         29:87:f8:f6:63:c3:02:7c:03:43:35:5b:07:18:6f:77:ad:cc:
         a0:38:aa:8b:75:9e:db:57:04:97:a6:9f:0f:7c:60:e5:40:13:
         5d:b3:84:bb:54:b7:81:07:09:27:3d:9a:74:05:3e:82:20:6a:
         1e:71:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----