Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA42908752911F086688182DAE4EC9C.roa
File:                     BCA42908752911F086688182DAE4EC9C.roa (raw, json)
Hash identifier:          Z7campENA/sKoisIax+E6b/PYd/KFrY4YtHoa9ErCA0=
Subject key identifier:   23:A9:CB:8A:10:F7:47:F2:11:E3:F5:1B:7B:90:7F:2D:BE:5C:3A:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0169E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA42908752911F086688182DAE4EC9C.roa
Signing time:             Sat 09 Aug 2025 14:04:17 +0000
ROA not before:           Sat 09 Aug 2025 14:04:12 +0000
ROA not after:            Tue 16 Sep 2025 14:04:12 +0000
asID:                     215748
IP address blocks:        45.192.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92640 (0x169e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 14:04:12 2025 GMT
            Not After : Sep 16 14:04:12 2025 GMT
        Subject: CN=68975561-caff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:c0:40:2c:51:91:22:8a:b2:5d:7f:b7:13:
                    1c:02:da:5c:7d:96:d1:c0:76:c9:d3:2b:17:5c:4a:
                    3d:19:24:c8:96:f5:aa:3e:16:95:d4:46:c4:5c:35:
                    1f:44:50:1f:c6:12:a7:51:04:18:ef:50:83:17:c6:
                    2a:44:3c:02:fa:7e:b7:e0:7b:c5:14:84:4c:3e:6c:
                    ef:76:d3:04:d8:8b:37:b3:0f:7e:c2:1f:4d:4c:d7:
                    1c:6a:57:d4:64:bf:b4:93:02:00:bc:bd:92:dc:f7:
                    c7:ea:8c:f4:13:3a:e3:65:09:d3:52:a0:be:7f:0f:
                    0a:d1:c0:c3:05:3d:6e:5b:e2:ed:7e:38:c0:3c:15:
                    4b:8b:69:1e:5b:0a:23:10:8b:d9:f9:dc:d4:5b:cf:
                    7f:b1:b7:15:8b:99:c1:4e:4d:ea:9b:4d:8b:b8:90:
                    0f:54:05:28:e9:b6:af:ad:b2:1e:dc:bd:90:22:72:
                    f6:e2:38:06:8c:4d:10:e0:a9:75:35:f1:3a:ab:43:
                    96:e4:de:6e:bb:93:12:6a:92:58:bb:80:2a:5b:71:
                    70:25:69:0a:d4:f7:18:ca:4e:2e:c5:ee:79:c9:35:
                    a2:ad:d8:42:04:36:e8:d9:f0:4c:5d:9f:e9:72:56:
                    0a:e0:34:73:2c:ce:aa:1c:8c:2a:1c:c2:dd:9e:63:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A9:CB:8A:10:F7:47:F2:11:E3:F5:1B:7B:90:7F:2D:BE:5C:3A:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA42908752911F086688182DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:0f:a8:95:86:89:8f:53:89:95:b9:50:7e:13:be:5b:f6:
         16:2b:6e:49:19:18:de:ca:65:f6:92:32:54:73:76:f4:65:fd:
         75:7e:87:bb:c6:58:08:9c:40:e4:84:f6:03:21:52:d9:bd:5c:
         ed:fa:97:59:7f:25:bf:45:cb:76:b5:95:60:bb:34:96:07:9f:
         28:20:01:0e:ae:86:1b:98:45:e4:1b:97:83:47:8a:44:b0:1b:
         40:8d:04:18:92:b3:f8:d6:b5:d6:dc:40:0d:4e:a2:e2:29:a2:
         38:b2:bd:76:ee:f3:35:54:7c:0f:e0:31:d4:42:31:7c:36:1f:
         50:c3:93:a2:ab:cc:80:f9:53:54:74:75:49:d7:7d:f8:93:c1:
         2b:96:3a:18:2f:d1:3e:eb:25:fe:16:f3:a0:2a:81:ea:e8:b6:
         d2:12:7e:3d:99:e6:d3:73:41:8b:73:79:71:6b:67:01:5b:c6:
         47:d1:ff:dd:0e:b5:f7:89:bf:97:f4:43:b9:a9:c2:6d:a7:d7:
         88:37:da:33:fe:33:97:50:c3:98:f2:b7:b3:ee:85:ba:ac:62:
         dd:2e:4f:70:bc:7c:13:89:e0:d0:81:fe:f5:4b:ed:56:f3:d0:
         c3:0a:9c:60:51:6e:07:1e:f4:7c:6b:52:77:2d:4f:11:46:90:
         21:ee:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:52 2025 by rpki-client