Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2946294B68011F18FFA1FAACE1D38B0.roa
File:                     C2946294B68011F18FFA1FAACE1D38B0.roa (raw, json)
Hash identifier:          KQxkeWHVk2nrWi9+fVlkWG9PQ8yCESCWIErLEYzDC7w=
Subject key identifier:   CD:ED:54:AF:E0:38:43:C0:A2:84:C2:64:75:80:DE:11:5A:AF:4F:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D834
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2946294B68011F18FFA1FAACE1D38B0.roa
Signing time:             Tue 22 Sep 2026 12:25:56 +0000
ROA not before:           Tue 22 Sep 2026 12:25:52 +0000
ROA not after:            Sat 07 Nov 2026 12:25:52 +0000
asID:                     9304
IP address blocks:        45.204.48.0/24 maxlen: 24
                          45.204.49.0/24 maxlen: 24
                          45.204.50.0/24 maxlen: 24
                          45.204.51.0/24 maxlen: 24
                          45.204.52.0/24 maxlen: 24
                          45.204.53.0/24 maxlen: 24
                          45.204.154.0/24 maxlen: 24
                          45.204.181.0/24 maxlen: 24
                          45.204.248.0/24 maxlen: 24
                          45.204.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120884 (0x1d834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 12:25:52 2026 GMT
            Not After : Nov  7 12:25:52 2026 GMT
        Subject: CN=6ab273d4-d3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:73:ee:ff:4b:e6:dd:ac:78:ef:a5:49:e8:
                    7e:bb:9a:16:3c:74:c0:c0:ca:f0:17:11:7c:de:a6:
                    bb:8d:2d:fb:95:ec:23:55:20:86:57:0f:34:66:14:
                    76:a4:20:50:89:a0:58:6a:d6:c9:db:0a:6e:8e:69:
                    c6:d1:81:5d:e1:da:47:d1:5d:54:18:a4:af:75:f4:
                    0c:b5:bf:f9:73:23:fb:6d:48:48:c4:a3:d7:e1:5f:
                    e5:f7:ef:d3:ac:1c:ae:35:a6:b4:36:62:bd:cb:db:
                    ec:38:ab:79:b3:68:9c:01:1c:a7:05:df:d4:9d:f5:
                    31:67:2a:a9:64:3e:5e:cb:24:c0:d2:72:59:55:eb:
                    bb:f3:df:df:eb:d1:e6:d7:f3:74:6d:4f:10:96:c4:
                    0e:19:c6:85:8b:db:8b:4b:ec:f3:c9:80:1d:11:1f:
                    52:59:f2:d3:7e:10:dc:f3:d4:a6:d8:b6:ef:a3:0e:
                    bd:d9:c1:63:79:17:26:30:59:12:01:83:d9:e5:74:
                    ab:5c:50:82:3e:1d:20:22:36:0c:cb:c1:cf:75:cf:
                    e7:fa:1f:f4:dc:8e:db:22:f3:8f:99:c2:f9:1b:6b:
                    d9:e6:25:8e:6f:67:dd:5e:c9:23:50:8c:35:54:bd:
                    7c:ad:59:b9:84:2d:6c:82:3e:f1:cb:b8:61:3d:8c:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:54:AF:E0:38:43:C0:A2:84:C2:64:75:80:DE:11:5A:AF:4F:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2946294B68011F18FFA1FAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.48.0-45.204.53.255
                  45.204.154.0/24
                  45.204.181.0/24
                  45.204.248.0/24
                  45.204.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:2c:2c:f1:5c:1c:04:45:93:24:ec:8f:3c:c2:5d:7f:aa:
         5a:5b:61:04:12:e7:03:ef:1c:f7:21:9f:58:3b:8a:91:2a:8d:
         61:e2:b6:f7:a3:c6:c8:84:aa:bc:ae:31:a9:8d:af:17:80:71:
         3b:11:cc:dd:11:d8:2f:1f:f4:6f:96:33:36:4a:d6:34:e4:cd:
         07:36:ee:14:81:69:cd:36:c2:4b:1b:6f:cd:34:44:88:12:05:
         ee:38:53:2c:59:1c:55:77:e2:7a:c9:27:4c:64:3f:4d:f9:75:
         4c:b5:e2:cc:dd:d0:c7:05:b4:15:8a:5d:ec:ad:9f:7e:19:d5:
         b6:5e:10:a9:11:41:2e:51:30:f6:7a:ea:cb:0f:7f:70:9d:4f:
         97:f1:8f:fd:4d:b3:12:3a:ec:a8:7d:1e:de:92:05:2b:67:69:
         00:bc:6d:b8:24:e8:47:47:9b:7d:70:0a:a9:69:17:d4:c1:34:
         2e:c2:c6:f7:f3:84:f4:d2:d1:c1:54:6a:a6:8f:a5:c0:24:67:
         3b:35:87:1c:0a:a0:71:b4:80:5e:c1:f7:fc:2f:6a:04:7c:cf:
         a8:54:b2:b5:48:f0:af:cd:c9:70:ab:91:8f:c2:19:c5:04:15:
         76:96:7c:70:80:41:25:91:89:68:a8:c8:c4:3a:86:5b:ed:56:
         24:03:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----