Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CC6630D22011F18F7ECEB2CE1D38B0.roa
File:                     07CC6630D22011F18F7ECEB2CE1D38B0.roa (raw, json)
Hash identifier:          EMi66cTQ0yEY9cojiAFKr2rLBVP108u0mKwBEe3eHKU=
Subject key identifier:   8B:13:26:60:62:02:5B:5E:83:14:6E:80:6D:4C:50:81:CF:89:F1:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E0B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CC6630D22011F18F7ECEB2CE1D38B0.roa
Signing time:             Tue 27 Oct 2026 16:04:04 +0000
ROA not before:           Tue 27 Oct 2026 16:03:59 +0000
ROA not after:            Fri 04 Dec 2026 16:03:59 +0000
asID:                     207957
IP address blocks:        45.203.182.0/24 maxlen: 24 (superfluous maxlen)
                          45.203.183.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123065 (0x1e0b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 16:03:59 2026 GMT
            Not After : Dec  4 16:03:59 2026 GMT
        Subject: CN=6ae0cb74-fb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3c:4b:7d:2a:89:41:63:48:cc:b4:66:7c:14:
                    00:8b:b6:cc:26:bd:ee:ae:ab:4b:74:f0:2a:0a:9d:
                    18:b2:40:f7:b9:80:9a:23:5d:ea:23:5b:fa:de:63:
                    3a:4b:d0:b9:a2:2c:62:ba:49:57:20:c1:39:22:28:
                    cb:28:09:0b:f5:d9:47:ee:b6:af:bf:71:07:b1:e3:
                    ab:1d:63:44:e6:b2:7c:c2:8c:df:a5:3e:2d:d3:e7:
                    e7:54:eb:c1:4e:a7:74:98:c5:3d:e6:ed:87:c7:82:
                    22:47:87:7b:50:ef:a3:30:2d:c7:d4:e3:9a:65:d2:
                    3a:7f:e6:63:79:6c:42:a4:b8:83:20:56:b5:1e:09:
                    c7:42:18:37:35:31:15:6d:08:c7:ee:21:7c:ed:ab:
                    67:d8:85:b3:28:c6:c7:22:90:9b:56:f1:55:bb:29:
                    fc:ba:49:39:45:7e:5a:da:7c:70:8a:2b:29:55:3f:
                    50:1e:52:01:68:a4:8f:93:26:92:d5:c3:70:46:f1:
                    16:75:2c:54:fe:7c:5c:8d:12:40:ac:cb:89:57:78:
                    3d:fe:b1:3e:c4:56:7c:bd:a0:74:f6:6d:b0:a8:f1:
                    b4:b5:ef:ba:c6:da:14:8b:04:03:a9:03:6c:f8:44:
                    e8:2a:e2:15:54:f1:c1:65:8b:17:66:ee:8f:5d:f2:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:26:60:62:02:5B:5E:83:14:6E:80:6D:4C:50:81:CF:89:F1:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CC6630D22011F18F7ECEB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:0e:10:78:ce:c7:75:79:c7:2a:ad:0e:07:ca:e9:6d:8b:
         f6:6a:44:93:c6:05:93:84:71:e4:f1:65:c0:da:5a:3c:de:2f:
         8d:c6:ab:89:f9:cf:fb:7f:ce:72:fe:d4:0c:04:03:6b:19:e7:
         ec:a3:4f:8d:aa:68:30:09:07:df:bf:b4:8c:6c:b1:9a:92:6b:
         78:a9:22:8f:24:c7:76:37:de:eb:01:27:0a:a6:26:38:5b:61:
         71:7f:1e:85:6c:96:ad:f5:a8:f5:9f:8b:dd:27:c8:ef:c0:a3:
         ac:f0:4d:77:67:c0:fc:13:ce:9a:0b:e0:5b:9c:f0:3c:75:16:
         bb:0d:3c:98:03:ee:ce:91:26:65:70:01:fe:a5:69:d8:7d:0b:
         4d:bb:c2:29:87:da:52:9d:47:3b:80:f5:57:2b:b3:c2:8a:de:
         31:6e:10:5e:27:09:24:2c:07:3e:7e:b2:4f:74:84:c7:49:68:
         ee:f6:64:16:47:11:1e:31:1d:11:ce:15:9c:83:00:2d:74:19:
         b8:05:f8:cb:b4:9d:ae:3c:0a:a1:dc:36:3c:bc:4e:0d:21:47:
         fd:d8:b3:15:69:4b:22:be:58:db:6d:9f:f2:2d:a2:8d:1c:e7:
         73:03:7f:cb:55:03:a5:5e:c2:84:27:1a:b9:60:8d:ab:8f:08:
         03:16:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----