Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE0DFF4B19B11F18EE342E9CE1D38B0.roa
File:                     5AE0DFF4B19B11F18EE342E9CE1D38B0.roa (raw, json)
Hash identifier:          89hvv9VlySejQ8Svi7qPFlPJN6OU1taibh6zbTGk1Ms=
Subject key identifier:   7F:1D:96:11:61:E8:30:6A:FB:B7:1E:C2:5E:4F:03:CE:B7:56:1B:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D68A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE0DFF4B19B11F18EE342E9CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 06:53:43 +0000
ROA not before:           Wed 16 Sep 2026 06:53:39 +0000
ROA not after:            Thu 22 Oct 2026 06:53:39 +0000
asID:                     57043
IP address blocks:        45.197.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120458 (0x1d68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 06:53:39 2026 GMT
            Not After : Oct 22 06:53:39 2026 GMT
        Subject: CN=6aaa3cf7-a7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:10:bf:38:6f:4d:0b:a7:73:98:81:33:6a:
                    1c:e9:33:fd:78:55:87:ef:19:ee:c9:97:9f:bc:8e:
                    86:df:52:e0:12:de:a0:6b:f1:40:40:14:8f:5d:87:
                    44:f3:6d:1c:ba:f2:05:d6:d0:ff:1d:2a:71:86:76:
                    2e:7e:0f:41:eb:a0:a5:25:33:59:6d:6f:ec:24:2b:
                    c5:a9:c7:bc:89:b5:22:63:9c:c8:80:86:ff:75:4b:
                    91:fe:a8:5c:16:29:1d:a8:28:12:9e:35:b9:7b:00:
                    37:e7:8c:88:4d:3d:aa:87:d7:5b:a7:50:cf:5a:62:
                    a4:43:5b:e5:c0:66:93:56:f4:74:f2:a9:d3:ea:ed:
                    74:4a:d3:90:47:6c:b9:ab:74:29:f7:3c:43:ef:35:
                    1d:ac:8f:7f:32:8f:dd:22:80:34:d6:00:f6:16:ae:
                    40:9c:63:a4:bf:1a:48:bc:b2:42:3a:6c:50:91:64:
                    8a:d9:10:de:84:37:41:ca:a6:0e:e4:a4:6c:0e:1f:
                    7c:89:3f:00:51:a2:31:02:c0:46:2c:2b:1c:c8:8f:
                    3c:70:63:33:a5:c9:1c:1a:03:d0:28:c5:5c:2d:90:
                    81:e7:b3:9e:71:c2:39:9e:0f:dc:6e:29:fb:95:24:
                    1e:8e:55:91:ed:c2:b0:de:13:db:a3:47:8c:f9:f1:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:96:11:61:E8:30:6A:FB:B7:1E:C2:5E:4F:03:CE:B7:56:1B:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE0DFF4B19B11F18EE342E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:99:bb:75:da:42:5d:10:9e:da:4d:27:6b:2b:42:71:e0:
         0a:0b:6e:14:94:b3:67:c2:80:1c:0b:ed:63:70:8e:c8:d1:5b:
         e3:13:4c:8b:9f:3e:df:0a:f0:89:47:51:5b:42:87:11:86:d8:
         34:2d:ee:7a:21:20:42:77:b4:97:85:51:fb:c7:a6:cf:e4:03:
         a0:fd:56:6c:bb:c2:2d:a2:68:ae:6a:41:a6:0a:8d:4d:8e:86:
         f2:c4:76:33:c7:25:d2:e0:a6:a6:bd:ca:69:67:c2:5c:fd:c7:
         a7:c2:76:04:52:cf:f2:4f:0a:f3:d1:d8:16:0a:a0:c0:7e:be:
         e5:7e:19:83:55:80:c5:f8:ca:8e:25:4c:03:d8:c9:d0:8e:d6:
         27:04:77:d4:fd:2b:06:90:be:f4:58:7f:ca:4f:a4:e6:7f:cb:
         f8:e8:11:7a:56:bd:7f:26:1f:30:f0:6c:79:ff:51:d8:e3:6a:
         1e:3a:46:ae:8f:b7:65:cf:3f:f6:a5:ef:cd:af:aa:49:8b:98:
         e5:1d:07:79:d9:66:7a:a3:90:81:15:dd:a2:ff:8f:80:c1:80:
         26:6c:3c:b8:2c:2f:e0:be:9b:df:22:02:1d:b4:c5:69:fb:ac:
         22:f2:5a:21:62:c3:02:17:a7:28:cb:71:01:f0:a2:6c:4a:9b:
         31:08:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----