Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9961DBEB65111F1AF6E33FCCE1D38B0.roa
File:                     C9961DBEB65111F1AF6E33FCCE1D38B0.roa (raw, json)
Hash identifier:          QWgu35OZSK8kONJEAI0Aze7JZzAo2Kp6Tq9HNI+36MI=
Subject key identifier:   30:CB:3D:1B:0A:99:30:94:F6:80:DB:6B:AA:60:00:D3:22:81:FB:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9961DBEB65111F1AF6E33FCCE1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:49:42 +0000
ROA not before:           Tue 22 Sep 2026 06:49:38 +0000
ROA not after:            Tue 20 Oct 2026 06:49:38 +0000
asID:                     11404
IP address blocks:        45.195.0.0/24 maxlen: 24
                          45.196.92.0/22 maxlen: 24
                          45.197.224.0/21 maxlen: 24
                          45.204.32.0/20 maxlen: 24
                          45.205.176.0/20 maxlen: 24
                          45.205.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120755 (0x1d7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:49:38 2026 GMT
            Not After : Oct 20 06:49:38 2026 GMT
        Subject: CN=6ab22506-329b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:38:4b:29:90:99:4d:1e:57:1c:67:75:1d:
                    5f:b4:bf:f9:25:0e:9c:84:d1:07:ed:be:99:e6:b2:
                    c2:83:5c:9a:66:71:d2:9f:b0:de:13:1d:8b:d2:54:
                    6a:4c:77:cb:94:85:fe:9e:d1:2d:b8:1b:42:5c:81:
                    7f:f0:95:db:ac:c3:2b:2a:69:16:6d:36:67:bd:17:
                    12:e5:4d:94:dc:08:20:be:44:37:20:b2:5f:d7:4b:
                    6a:f1:61:c8:3b:92:63:e6:8d:c5:20:ff:97:86:ce:
                    0a:cb:6f:00:bd:e1:84:94:5f:af:0e:07:33:87:a1:
                    5a:c7:ca:4c:ce:80:21:69:bc:a1:be:07:b5:9c:9c:
                    cf:ba:61:3c:5a:c4:8b:0f:e8:bc:1a:78:65:13:87:
                    34:27:6b:a7:df:71:dd:ef:5b:f6:53:d1:a1:b4:66:
                    ed:1d:bf:a1:54:1c:08:35:ef:0a:61:dc:07:05:86:
                    eb:a9:f6:53:d8:00:94:62:2c:02:2c:88:0c:ce:04:
                    2b:a8:b7:b3:43:ac:c7:f3:57:4c:1f:68:98:99:eb:
                    84:a7:ad:a1:e9:46:87:d1:79:aa:57:92:e5:4e:84:
                    ed:06:d7:37:e4:28:eb:f5:bd:3c:72:8c:c2:7c:5a:
                    57:29:68:e7:db:eb:e5:5a:d7:94:b5:b7:b3:03:fe:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:3D:1B:0A:99:30:94:F6:80:DB:6B:AA:60:00:D3:22:81:FB:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9961DBEB65111F1AF6E33FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.0.0/24
                  45.196.92.0/22
                  45.197.224.0/21
                  45.204.32.0/20
                  45.205.176.0/20
                  45.205.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:29:07:32:50:b5:dc:bb:ed:92:25:18:52:42:d6:ef:fb:
         45:dc:63:51:a0:d6:6f:a2:8b:57:67:00:fd:ae:f5:c8:92:80:
         d8:44:79:bb:f7:4c:af:88:8a:bf:aa:c1:14:66:e1:91:68:eb:
         44:78:e4:10:2d:cd:d3:ab:ef:38:a2:97:74:35:26:25:76:7a:
         99:1e:d6:2a:67:f2:21:52:48:dc:fb:c9:b3:4a:b9:f1:0e:9b:
         44:93:86:f4:a0:7b:2c:e8:8f:bc:7d:90:49:6b:d1:9f:46:fd:
         64:4b:03:f3:27:c8:dd:34:ca:32:2d:f5:c5:23:64:ca:a6:1d:
         20:ff:74:53:e5:7c:73:08:e2:d1:24:e2:61:9f:88:8c:b1:93:
         68:c1:e9:5f:bb:46:6e:8e:e7:a0:9e:a6:66:d4:2b:f2:29:50:
         d1:d6:ee:a1:91:fc:c1:2c:ab:b6:64:75:42:ef:47:7a:f7:bc:
         db:ed:59:33:c2:94:ec:6b:ca:ce:8f:f5:e1:2d:36:34:ec:47:
         f3:32:d1:ab:cb:a0:b7:ff:c2:b2:1d:43:7c:cf:6e:20:72:14:
         ad:2a:e3:e0:8e:af:b0:47:f4:9e:1c:3e:08:b3:ef:f4:32:bd:
         b6:6b:c4:cc:b9:e6:c0:a4:f7:d3:d0:b2:ff:08:f0:8e:0e:74:
         61:55:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----