Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8071C56AAE7811F1B944CEEACE1D38B0.roa
File:                     8071C56AAE7811F1B944CEEACE1D38B0.roa (raw, json)
Hash identifier:          zofrGFDj8Hcdk4weXI64GCjhqa1XzNnr6vwFEGodsuw=
Subject key identifier:   B5:95:2E:C1:9D:F8:65:56:FF:2B:D8:74:DF:20:46:7A:0F:71:7B:6C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D578
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8071C56AAE7811F1B944CEEACE1D38B0.roa
Signing time:             Sat 12 Sep 2026 07:06:40 +0000
ROA not before:           Sat 12 Sep 2026 07:06:36 +0000
ROA not after:            Sat 25 Sep 2027 07:06:36 +0000
asID:                     147019
IP address blocks:        45.194.56.0/24 maxlen: 24
                          45.194.57.0/24 maxlen: 24
                          45.194.58.0/24 maxlen: 24
                          45.194.59.0/24 maxlen: 24
                          45.194.60.0/24 maxlen: 24
                          45.194.61.0/24 maxlen: 24
                          45.194.62.0/24 maxlen: 24
                          45.194.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120184 (0x1d578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 07:06:36 2026 GMT
            Not After : Sep 25 07:06:36 2027 GMT
        Subject: CN=6aa4fa00-4166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:e1:ee:6d:31:7b:4b:8c:d5:5c:68:56:79:
                    5d:15:08:50:62:4f:5c:db:2e:30:2a:1b:89:1f:26:
                    03:75:1d:18:69:79:47:a2:bb:59:d0:25:3d:26:f3:
                    16:e8:c9:e8:60:c7:23:73:a8:0d:cc:8d:a1:af:5d:
                    23:48:9b:ec:3e:d0:fe:07:80:96:37:29:07:6e:a6:
                    28:79:7f:97:be:c6:18:56:e4:11:3e:7e:e2:73:de:
                    69:db:8e:48:37:63:8e:63:5a:2c:ce:a4:9b:51:02:
                    5e:12:e4:69:01:ed:78:20:2e:fc:1a:2a:0c:17:de:
                    fa:7c:96:c2:f1:51:66:82:92:85:2c:3a:bd:17:b8:
                    93:dc:2b:b4:d0:3a:15:8c:a3:87:fa:10:7f:22:b1:
                    74:4b:8a:18:f8:24:d8:e2:67:89:a8:c1:f5:71:4f:
                    5e:89:fb:89:07:44:c5:66:0a:75:9c:e5:cb:01:75:
                    b3:ca:3c:53:89:a2:ae:86:df:48:f3:fb:3e:cb:97:
                    35:17:91:ea:c5:43:fa:58:05:ff:5f:b8:ac:19:f8:
                    b6:f8:c5:c1:bc:8d:a7:60:b0:db:8f:6a:e5:37:5e:
                    4b:80:db:43:95:fb:e9:49:2e:77:3e:cf:69:69:78:
                    89:8f:18:6d:6a:d8:e0:24:86:8b:f6:0a:ee:bf:fd:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:2E:C1:9D:F8:65:56:FF:2B:D8:74:DF:20:46:7A:0F:71:7B:6C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8071C56AAE7811F1B944CEEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:63:5d:0c:09:df:74:83:90:01:02:8e:3d:b5:5d:72:48:a9:
         d9:fa:3c:10:49:8e:46:c1:d3:7a:4c:86:70:1c:e0:ea:22:93:
         b0:0a:4b:f4:05:f7:0d:47:25:86:5f:6a:cd:90:93:66:40:81:
         60:a4:e0:a2:45:ec:f8:22:7e:f1:c2:e4:ff:17:6f:31:e0:31:
         01:f8:01:49:2c:be:03:db:76:1d:4c:9d:e4:82:da:f2:ba:4b:
         2c:bd:86:b1:98:45:d3:f1:c4:07:4e:f8:b5:d2:9b:b1:15:ef:
         0a:74:ca:55:2a:51:08:11:0a:0d:46:c0:03:12:86:b3:ca:a1:
         e7:3f:3f:60:1a:18:71:92:5b:cd:bb:52:d0:36:b4:0a:c1:a0:
         03:e0:32:53:68:e4:c5:53:de:71:88:90:f3:e1:9b:84:6e:ab:
         c3:fd:30:9f:07:9e:76:dc:e8:5d:5b:a0:ba:b7:f3:29:e7:a2:
         a0:b9:93:6b:88:c9:15:d3:9c:e5:9c:2f:0d:03:c9:dc:08:5e:
         3a:66:4e:62:c5:19:62:8f:3a:2e:49:f7:cf:08:27:bb:98:ac:
         cf:bd:ed:a5:76:45:f2:a9:1f:44:17:15:17:22:0e:27:fe:8f:
         be:3d:9d:9c:7f:03:39:5b:10:c9:a2:55:33:97:af:97:df:53:
         93:52:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----