Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E4DFCCDAA411F1B87D8FDACE1D38B0.roa
File:                     65E4DFCCDAA411F1B87D8FDACE1D38B0.roa (raw, json)
Hash identifier:          aASY0Cpp/fPrYn5Ove57AVhpLC5TTN74e4pzt+APeOQ=
Subject key identifier:   1F:C6:97:C1:DE:BA:B7:59:18:52:36:EA:FA:B7:18:40:C8:F7:16:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E3C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E4DFCCDAA411F1B87D8FDACE1D38B0.roa
Signing time:             Sat 07 Nov 2026 12:11:45 +0000
ROA not before:           Sat 07 Nov 2026 12:11:40 +0000
ROA not after:            Mon 14 Dec 2026 12:11:40 +0000
asID:                     219075
IP address blocks:        45.201.239.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123842 (0x1e3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 12:11:40 2026 GMT
            Not After : Dec 14 12:11:40 2026 GMT
        Subject: CN=6aef1581-15af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:c4:cb:79:71:f2:a9:a0:09:cf:f2:99:61:
                    50:c4:61:fd:e1:b6:88:01:45:e9:33:c8:d5:3a:b9:
                    8a:23:65:e6:cc:3a:f6:ab:04:13:08:bf:05:3f:f2:
                    48:6d:ef:aa:66:a1:3c:6c:dc:e3:1d:75:9f:04:0a:
                    82:2a:71:86:aa:b1:0e:00:d0:65:0d:c2:e0:05:a3:
                    67:35:43:22:56:ad:97:0e:f7:36:46:b1:3c:5e:b8:
                    f4:89:12:e3:51:8a:02:e2:00:a1:d7:67:4f:79:5e:
                    74:40:56:6b:25:97:85:82:17:00:c4:ce:fe:40:ea:
                    04:a9:1e:87:ac:e8:7d:7e:05:a9:b4:ff:60:ee:97:
                    37:4a:f3:1d:54:38:98:76:82:19:6e:90:30:ee:f3:
                    d9:b3:51:6e:24:97:fd:db:a6:5b:e3:5a:6e:3c:a8:
                    48:82:b1:c1:9f:11:f0:2b:02:a1:51:4f:23:c8:b2:
                    1a:d6:a6:51:25:cd:0b:54:01:c6:43:99:41:43:fd:
                    18:bd:77:3f:6b:d7:a0:14:b6:01:ec:b9:99:d6:62:
                    94:f6:02:48:85:90:c0:e9:2d:7a:82:3b:5b:86:55:
                    bc:5d:ba:c9:58:d6:8a:fa:42:00:2f:94:5a:a3:e7:
                    40:82:13:00:18:35:5d:b7:17:da:b8:f0:bd:ef:4c:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:97:C1:DE:BA:B7:59:18:52:36:EA:FA:B7:18:40:C8:F7:16:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E4DFCCDAA411F1B87D8FDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:83:22:a0:96:fc:2d:35:d0:bb:1d:68:9d:e4:7e:8c:d3:4d:
         ce:61:74:a5:e5:e1:d1:55:a8:28:06:75:0a:44:bf:93:05:6f:
         4a:d6:ce:8e:a6:be:fa:b5:5e:d9:00:a8:96:9a:2d:cd:82:39:
         8d:ff:51:9b:fb:fe:5a:b6:f4:d2:55:34:8f:a3:10:ed:e9:15:
         ec:c1:38:eb:0d:fb:98:8e:b9:df:5c:f6:1e:76:c6:7e:c9:8b:
         c7:fa:8d:74:20:92:5d:96:b6:08:5f:e1:ba:3a:0c:ec:87:c9:
         9f:0c:2b:54:5a:12:da:7e:b1:42:c0:7e:5e:67:54:d0:25:83:
         79:ac:e5:a6:71:79:05:24:83:a7:e4:61:39:03:c2:4d:de:64:
         ef:54:2d:bd:f1:d3:2a:81:46:55:01:f5:16:63:42:b1:98:77:
         d5:8e:65:b5:94:21:30:30:7c:0f:19:0f:ed:2b:62:29:dc:c5:
         1b:a6:d9:53:45:52:6c:58:38:8b:d1:d1:19:da:46:1c:d1:5d:
         77:d8:d5:df:b6:13:a8:b1:5a:9b:1e:08:33:6e:13:b1:67:f9:
         21:03:08:e0:1f:94:47:0c:62:fb:13:ff:5f:c5:ad:f2:e9:ca:
         90:9e:0a:8e:5f:81:0a:f2:54:4a:73:cf:f2:3a:86:f4:14:0d:
         78:3c:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----