Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD9ADC02B0D911F1A2A4D0CFCE1D38B0.roa
File:                     BD9ADC02B0D911F1A2A4D0CFCE1D38B0.roa (raw, json)
Hash identifier:          2TNIzQJUTTzaXbAkRJ2+NM3+AC43vkGLi8TclDnvX2A=
Subject key identifier:   F0:E9:41:DF:49:FA:AE:05:AE:16:FA:80:E8:1C:FE:E7:FC:F5:2E:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D623
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD9ADC02B0D911F1A2A4D0CFCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:47:46 +0000
ROA not before:           Tue 15 Sep 2026 07:47:42 +0000
ROA not after:            Wed 21 Oct 2026 07:47:42 +0000
asID:                     214143
IP address blocks:        45.195.157.0/24 maxlen: 24
                          45.195.158.0/24 maxlen: 24
                          45.198.104.0/24 maxlen: 24
                          45.198.109.0/24 maxlen: 24
                          45.198.112.0/24 maxlen: 24
                          45.198.138.0/24 maxlen: 24
                          45.198.163.0/24 maxlen: 24
                          45.198.168.0/24 maxlen: 24
                          45.198.181.0/24 maxlen: 24
                          45.206.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120355 (0x1d623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 07:47:42 2026 GMT
            Not After : Oct 21 07:47:42 2026 GMT
        Subject: CN=6aa8f822-c920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:56:45:e1:a1:1c:a5:b3:71:d7:75:1d:e7:
                    04:20:fa:2f:6a:b3:e8:a7:94:c4:80:43:2d:e3:0c:
                    a6:c6:d0:92:34:17:c4:a6:48:b2:22:83:2f:5d:07:
                    2c:34:74:ef:73:03:56:87:3d:22:19:4b:8c:44:9d:
                    9b:1f:c1:36:12:2d:80:f0:62:1a:f4:b8:4c:50:3e:
                    ed:2f:a6:71:af:6f:8f:f7:cd:cb:20:bb:a5:4c:68:
                    b0:75:df:5f:3e:a7:3a:2a:ac:3e:12:18:d3:6d:eb:
                    f9:ae:c6:95:e1:41:d3:01:43:d2:69:a2:af:22:71:
                    df:98:62:2d:0a:5e:be:8f:5f:58:52:c2:7e:58:f0:
                    9c:ba:b3:f3:60:d6:f8:68:db:a1:a1:b6:4a:51:50:
                    c4:5b:80:b5:c4:4e:25:16:19:58:19:04:cb:03:33:
                    52:c1:c4:dd:f3:0b:fe:c6:b2:94:35:c1:ac:81:58:
                    37:df:00:40:db:29:4f:4a:f1:2a:77:3a:e3:d4:1e:
                    3e:1c:89:2f:e7:c8:4b:5c:a2:35:e1:b3:3c:78:20:
                    e4:f5:46:b8:12:f1:f3:d9:85:ae:8e:10:24:f6:f0:
                    7c:75:d2:c4:73:f2:8b:b8:7b:78:5d:62:a3:0e:d3:
                    66:e1:fd:b6:58:86:e9:1f:0b:4b:9d:f8:11:76:04:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E9:41:DF:49:FA:AE:05:AE:16:FA:80:E8:1C:FE:E7:FC:F5:2E:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD9ADC02B0D911F1A2A4D0CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.157.0-45.195.158.255
                  45.198.104.0/24
                  45.198.109.0/24
                  45.198.112.0/24
                  45.198.138.0/24
                  45.198.163.0/24
                  45.198.168.0/24
                  45.198.181.0/24
                  45.206.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:e6:47:73:6a:e2:4f:6f:13:c2:66:32:f5:9f:62:6a:ba:
         d6:3c:c9:e9:6a:86:f6:f7:7f:00:fb:ce:ae:40:d7:57:12:79:
         7c:f9:b0:34:5e:9b:56:1f:2a:55:2e:77:6f:c2:f3:3a:27:9d:
         84:e8:a4:61:0e:cd:50:67:40:45:47:62:e0:74:2e:eb:c3:0d:
         cb:9e:eb:ff:0b:54:34:dd:e5:ca:34:f3:35:8b:87:9b:60:b1:
         71:f0:94:f7:37:cc:a8:25:b2:87:77:28:0a:b7:0a:fd:6a:da:
         af:3c:ab:7a:cf:03:e6:c0:35:ab:23:d4:d8:89:a9:ab:b4:2c:
         9b:f4:2c:8d:e7:ef:2e:62:e0:7d:fd:38:a7:9b:47:e0:da:3d:
         ee:b6:1a:f7:3d:a5:8f:47:d3:63:b0:ba:1e:58:de:f3:c7:d1:
         3b:66:4e:ee:3b:e4:8c:14:6f:bd:50:1e:59:36:54:38:93:33:
         50:08:0c:6f:5e:df:57:44:ec:c8:d8:0a:94:c8:4d:a5:10:bb:
         11:27:80:36:26:a6:e3:30:80:e7:c2:02:43:46:9b:47:63:e1:
         5d:da:28:bf:73:1d:23:83:0a:98:21:f9:2b:dc:e4:52:a2:11:
         dd:41:fd:20:27:67:eb:4a:f7:9a:b8:f0:49:6f:a5:9d:e8:27:
         3a:bd:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----