Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B470541EAD0911F19E7C82B6CE1D38B0.roa
File:                     B470541EAD0911F19E7C82B6CE1D38B0.roa (raw, json)
Hash identifier:          rzHYW/hYDRpxrn3iDmN3ZhbQCU9eYw+1T9oJgZ4cVlc=
Subject key identifier:   F3:E2:E8:17:50:E1:26:5A:42:B1:C7:22:AA:C0:34:D2:19:EB:62:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B470541EAD0911F19E7C82B6CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 11:21:02 +0000
ROA not before:           Thu 10 Sep 2026 11:20:58 +0000
ROA not after:            Tue 13 Oct 2026 11:20:58 +0000
asID:                     213795
IP address blocks:        45.196.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120050 (0x1d4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 11:20:58 2026 GMT
            Not After : Oct 13 11:20:58 2026 GMT
        Subject: CN=6aa2929e-196c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:7f:36:44:d9:62:e7:a3:0a:e3:ec:8b:84:
                    ff:4c:76:66:50:46:a6:6a:d3:81:50:eb:67:8e:23:
                    8d:56:5a:50:6a:15:24:81:50:53:62:e9:70:70:0a:
                    4f:07:93:39:fc:50:08:66:36:a0:3d:87:38:75:b0:
                    87:2c:98:8c:ff:79:10:17:53:dc:12:98:29:45:16:
                    01:33:76:af:05:8f:58:ef:94:17:66:4c:67:75:92:
                    c6:bb:4e:d7:c2:96:95:52:2b:fb:7b:52:06:5f:de:
                    96:2b:a1:82:70:ca:0c:90:bf:86:39:0f:ef:32:63:
                    cd:a1:09:1e:aa:8e:dc:41:d5:07:84:94:ba:ca:86:
                    63:62:00:74:9f:ee:15:a5:c7:20:c1:e6:96:7d:40:
                    07:75:1b:6a:cb:c0:7d:fe:9a:0b:bb:63:a1:ba:fa:
                    0f:3d:27:00:e3:d2:21:8b:dd:84:c3:c8:07:98:78:
                    66:5e:e1:0d:5e:23:ec:8c:94:4f:6f:7e:d9:19:4f:
                    2c:75:f2:c9:79:51:85:22:38:b2:35:5b:66:96:f4:
                    fc:7e:a4:e5:f9:3d:fd:7e:56:49:99:64:14:b6:3e:
                    9d:43:24:f9:e4:1f:cb:a0:da:4c:b5:3b:d1:2a:db:
                    91:88:38:aa:5f:1e:75:c1:1c:8d:85:67:66:a8:ed:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:E8:17:50:E1:26:5A:42:B1:C7:22:AA:C0:34:D2:19:EB:62:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B470541EAD0911F19E7C82B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:66:91:21:46:ec:8e:79:87:1f:30:7d:03:9a:26:78:ff:aa:
         ec:7e:c2:8e:df:04:7c:c7:de:4e:e0:cd:8d:d6:44:f9:0f:e8:
         90:e6:ad:0c:f0:da:92:78:4f:25:d5:9f:07:cb:96:1c:43:10:
         6c:8c:a2:4b:46:51:75:d7:07:46:aa:81:8f:07:97:3e:2d:1a:
         25:47:cc:1b:f4:1f:b6:84:38:39:7d:d2:b0:1f:33:1f:53:42:
         02:44:e8:f4:ce:a9:a5:33:94:d4:e3:fe:06:a1:9e:fb:8f:9e:
         ee:92:6b:73:17:39:0b:33:f5:9b:b0:d2:98:06:be:84:c7:34:
         fd:b4:dc:ec:41:9a:3b:6b:b9:a1:28:ee:a6:93:85:f4:d5:99:
         5b:4d:ea:6f:ee:a1:8c:fe:14:5f:c6:fa:ef:28:ee:54:6d:63:
         0a:cf:97:95:99:d7:c1:4d:1c:8e:76:0c:26:df:c4:2f:f1:d5:
         89:18:83:ea:4f:b1:8e:41:19:ad:f2:8a:b0:c9:ed:bc:23:00:
         31:11:d3:29:78:9f:9d:58:64:39:3b:fb:7a:11:b7:12:85:8a:
         cc:52:63:7e:26:ab:dd:a7:90:45:fe:9e:cb:34:81:6a:53:fe:
         02:9b:de:aa:3e:08:48:02:dd:26:55:c8:e5:05:9b:2f:54:e4:
         fe:b5:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----