Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F31C246B58D11F1A74B50F9CE1D38B0.roa
File:                     3F31C246B58D11F1A74B50F9CE1D38B0.roa (raw, json)
Hash identifier:          L5+Uyc5MdaHMTUa/RuDrVZ5gMue5ipyXo43mg/vP5kU=
Subject key identifier:   25:3B:26:3D:DC:E3:9B:15:89:8C:A3:23:7C:0E:8C:BD:8C:AF:62:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D762
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F31C246B58D11F1A74B50F9CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:22:48 +0000
ROA not before:           Mon 21 Sep 2026 07:22:44 +0000
ROA not after:            Mon 28 Sep 2026 07:22:44 +0000
asID:                     54801
IP address blocks:        45.195.199.0/24 maxlen: 24
                          45.197.20.0/24 maxlen: 24
                          45.199.130.0/24 maxlen: 24
                          45.199.131.0/24 maxlen: 24
                          45.199.134.0/24 maxlen: 24
                          45.199.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120674 (0x1d762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:22:44 2026 GMT
            Not After : Sep 28 07:22:44 2026 GMT
        Subject: CN=6ab0db48-a446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:bf:98:3d:21:f7:d7:8b:ed:ee:14:f2:fd:
                    07:00:83:8a:e9:33:db:5c:e3:d5:8b:8b:1b:e4:c4:
                    18:48:ed:96:10:3a:25:69:53:b9:3c:8a:24:7b:74:
                    6e:ca:0e:86:e6:23:d7:35:49:ab:37:18:5a:ef:5a:
                    a5:05:87:4e:a4:8d:a6:ef:13:9f:70:ed:7f:3d:a8:
                    26:f7:1e:8f:69:39:bb:c7:96:93:4a:ce:5b:7a:4f:
                    56:39:ee:92:26:4e:7e:bc:23:92:d1:63:52:03:61:
                    8f:9f:8a:85:15:ee:dd:ae:97:87:1f:4a:98:13:1e:
                    87:e8:38:ec:32:84:2e:08:f8:33:62:ab:17:fb:98:
                    92:25:31:3a:07:31:db:d4:d9:23:6a:43:67:57:35:
                    1f:2b:54:f8:72:7f:4a:50:47:3f:e2:7a:da:f0:10:
                    91:10:0a:71:90:04:ef:40:0d:67:54:be:d8:73:0e:
                    6f:e0:47:6b:a0:22:76:0f:f8:b5:75:6b:5a:0c:37:
                    c5:47:6a:8c:27:2d:7e:b2:86:e0:89:20:1f:7e:e4:
                    d0:dd:48:28:8a:da:50:9d:22:66:10:59:76:00:f7:
                    7e:7c:ed:ec:5e:7b:3b:2e:d2:f7:44:ee:23:b0:ab:
                    1b:7c:93:02:7f:df:62:e7:4a:54:44:30:9f:11:f2:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:26:3D:DC:E3:9B:15:89:8C:A3:23:7C:0E:8C:BD:8C:AF:62:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F31C246B58D11F1A74B50F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.199.0/24
                  45.197.20.0/24
                  45.199.130.0/23
                  45.199.134.0/24
                  45.199.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:08:17:4d:10:57:78:7b:b2:7e:12:c4:61:e9:d8:24:a2:
         da:46:dd:f3:af:3d:d6:bf:18:8a:d4:11:2f:7d:1a:a2:2a:b5:
         5b:26:4c:5e:7e:6e:fa:80:dd:be:c9:de:d1:a7:ec:a7:80:ab:
         b6:e3:4f:eb:cf:52:92:e8:21:10:55:b2:ad:6b:64:a3:4e:9d:
         8d:32:74:ec:c7:75:18:5e:03:44:4e:f9:70:f3:bd:06:03:a6:
         fa:b4:89:30:b5:a5:01:86:b7:60:59:bc:b4:48:a1:eb:fe:5d:
         df:9b:56:66:23:42:cd:b9:ce:9e:b9:23:f1:b3:2a:47:65:88:
         42:e5:7a:5b:24:ec:fd:0a:31:12:6b:e1:f6:dc:3c:6b:6f:34:
         35:d9:d6:72:de:39:23:39:59:3c:c0:e4:da:c8:1f:c4:38:8d:
         70:6f:d9:93:15:d1:a9:b7:96:b6:ad:5a:35:bc:29:74:6f:3e:
         dc:98:55:ef:5b:e7:6b:25:23:ff:9b:35:d5:dd:c3:69:e4:ec:
         99:c8:d2:99:53:e6:58:6e:a3:7c:4f:72:4b:a1:06:c5:cc:c7:
         7f:de:43:b4:99:1a:80:13:52:d9:e6:67:75:9b:5e:2c:fd:1a:
         fe:00:a9:65:36:fd:3e:45:98:bf:70:6d:73:44:8e:3e:07:58:
         78:b8:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----