Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96379928B6EE11F19D34DDE7CE1D38B0.roa
File:                     96379928B6EE11F19D34DDE7CE1D38B0.roa (raw, json)
Hash identifier:          hhKSICR8RklJbV99wGUDhCouPRk4BPugfNi/3FZlRFE=
Subject key identifier:   8A:F9:78:50:A4:46:ED:18:E4:B4:21:9D:F2:FA:20:48:95:18:51:FB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D847
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96379928B6EE11F19D34DDE7CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 01:32:07 +0000
ROA not before:           Wed 23 Sep 2026 01:32:03 +0000
ROA not after:            Thu 01 Oct 2026 01:32:03 +0000
asID:                     134365
IP address blocks:        45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120903 (0x1d847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 01:32:03 2026 GMT
            Not After : Oct  1 01:32:03 2026 GMT
        Subject: CN=6ab32c17-ae0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:09:1e:7c:ba:5c:49:d9:03:79:b4:2e:87:08:
                    48:d8:8b:f6:fa:67:9e:ff:ca:ed:8d:20:c1:f6:a7:
                    b3:bb:0e:4f:b1:aa:8b:96:1e:40:83:ad:95:af:46:
                    86:1c:fe:6f:75:af:5c:7c:3f:aa:db:b0:f6:36:aa:
                    19:dc:55:2e:d3:0c:2a:d3:74:fd:93:65:a8:54:ae:
                    d6:66:51:74:84:b0:84:ff:4e:67:f6:9a:ba:d4:a7:
                    d6:76:81:9f:f2:ad:8a:44:54:63:e4:44:2f:34:36:
                    69:05:8e:c7:10:20:50:3d:44:c9:c4:05:c0:b1:ea:
                    9c:4b:41:2b:e1:bc:ca:87:09:e6:de:4d:b6:97:bc:
                    14:ae:d6:5b:75:92:e2:64:bc:cd:0d:16:7d:d4:2b:
                    03:0d:03:03:96:27:1f:9f:ee:1a:b8:44:91:a5:00:
                    37:f0:a2:33:17:8c:21:31:49:7c:45:a8:f2:43:61:
                    aa:98:80:76:6d:99:50:2b:db:5c:58:90:b3:dd:69:
                    b5:18:4c:18:09:58:21:37:62:a2:9a:2e:d0:07:63:
                    56:bd:54:af:65:c9:fc:6d:5d:34:2e:4f:94:af:63:
                    b2:f9:5d:f3:7f:bf:16:fa:77:07:42:01:21:60:d3:
                    f1:b2:7c:d4:eb:f9:c3:b0:7a:76:42:89:b5:89:83:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:78:50:A4:46:ED:18:E4:B4:21:9D:F2:FA:20:48:95:18:51:FB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96379928B6EE11F19D34DDE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:40:44:17:7b:3a:20:de:7b:e6:c0:ab:41:be:07:7a:46:
         88:28:8e:30:fd:c7:68:31:52:d9:fa:ec:20:a3:44:a5:ef:9e:
         df:7f:4d:1d:b8:d5:7c:47:9c:a6:de:ae:2c:a8:74:79:5f:b6:
         59:a2:92:4e:0a:77:b8:50:a1:e9:8d:38:a5:28:d1:12:9f:a9:
         ed:35:24:b9:14:e9:c6:19:5e:9b:da:21:61:35:6b:f9:5f:e7:
         4e:0f:67:0a:de:9b:96:39:ef:ad:59:3c:c8:68:52:05:68:6c:
         ac:e3:7f:ec:5a:a1:15:0e:04:d3:64:13:36:d4:e5:2e:32:0d:
         5e:b4:f6:a7:5b:4a:8d:df:ca:62:21:39:e7:e0:6e:05:70:11:
         16:c4:7e:a7:36:51:0f:4f:cf:de:e5:75:36:21:01:30:9f:04:
         62:2a:e5:f2:41:93:6e:7a:ae:e6:4c:a4:b1:85:0d:55:31:2a:
         3d:93:59:fe:b5:67:ff:ad:da:85:48:93:15:e1:3d:a8:f2:5e:
         6a:f4:82:eb:b0:91:a9:0e:b1:4d:37:90:f1:e8:d0:b0:1b:a1:
         d1:61:d3:49:85:94:50:2a:dd:67:88:13:37:d5:1b:db:a3:83:
         91:24:12:4a:28:80:d4:5e:a4:bf:97:34:bd:a7:37:ba:c6:c6:
         a3:65:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----