Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE51B8CB66111F18AE4ADE5CE1D38B0.roa
File:                     FDE51B8CB66111F18AE4ADE5CE1D38B0.roa (raw, json)
Hash identifier:          5RGJCU4yOoknSvBRNGG5z71DLzdl7efGe3MJny3vPB4=
Subject key identifier:   D1:0F:71:0D:95:78:CD:FD:D0:E7:9F:1C:C9:DF:CF:37:0E:CD:8F:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE51B8CB66111F18AE4ADE5CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 08:45:42 +0000
ROA not before:           Tue 22 Sep 2026 08:45:37 +0000
ROA not after:            Thu 29 Oct 2026 08:45:37 +0000
asID:                     44559
IP address blocks:        45.192.52.0/24 maxlen: 24
                          45.192.53.0/24 maxlen: 24
                          45.195.161.0/24 maxlen: 24
                          45.195.177.0/24 maxlen: 24
                          45.195.179.0/24 maxlen: 24
                          45.195.181.0/24 maxlen: 24
                          45.195.186.0/24 maxlen: 24
                          45.199.207.0/24 maxlen: 24
                          45.199.208.0/24 maxlen: 24
                          45.199.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120800 (0x1d7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 08:45:37 2026 GMT
            Not After : Oct 29 08:45:37 2026 GMT
        Subject: CN=6ab24035-0fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:c0:0d:43:b2:ac:a7:e1:31:d5:d0:06:85:
                    f1:13:b7:49:ec:95:17:b8:99:70:9c:d7:81:be:dd:
                    a9:52:5f:55:16:30:3e:f0:8b:ec:bb:4a:45:47:1a:
                    ab:ae:2b:67:2e:20:0b:52:56:ee:f1:9f:44:0c:f5:
                    ba:bd:88:86:0b:a2:fd:d4:9f:3f:44:84:04:01:14:
                    e4:8d:b1:bd:3a:78:ce:7f:b4:65:fa:1d:4e:26:e7:
                    30:82:f7:d8:c3:07:f2:80:a5:d1:83:26:4c:91:a2:
                    b4:86:05:b1:33:18:a7:23:84:fd:9a:50:1a:74:49:
                    b2:80:d8:6a:da:31:03:16:71:8c:84:03:9c:9b:3c:
                    4f:d5:ce:42:84:99:7a:a5:ea:0d:ed:51:35:90:25:
                    89:d5:b3:08:e1:45:cd:0c:ff:78:48:eb:af:bf:32:
                    05:01:88:d0:9a:66:41:71:9b:fa:9e:ef:54:09:c3:
                    7d:9d:fa:50:98:b3:15:10:48:0f:44:a1:39:17:de:
                    d8:51:1b:e1:ae:76:8e:c3:98:b5:33:28:55:09:8e:
                    7b:a5:4b:6a:1a:44:35:4c:c7:f0:a8:e1:02:79:e9:
                    e4:4d:d3:c5:2a:a2:33:68:3a:1e:3f:5c:a3:46:10:
                    28:11:f3:bb:79:06:c8:97:3c:56:b6:ce:01:fd:58:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:71:0D:95:78:CD:FD:D0:E7:9F:1C:C9:DF:CF:37:0E:CD:8F:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE51B8CB66111F18AE4ADE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.52.0/23
                  45.195.161.0/24
                  45.195.177.0/24
                  45.195.179.0/24
                  45.195.181.0/24
                  45.195.186.0/24
                  45.199.207.0-45.199.209.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:33:f6:31:27:9f:86:ba:31:35:89:b8:ca:78:d8:c4:5e:96:
         b2:01:4d:4e:60:e9:9b:8c:2b:c8:34:6c:e9:66:a3:e5:34:2c:
         9d:9f:b4:8d:c5:c3:83:e4:a0:48:3d:07:f7:3d:2c:55:a3:92:
         41:a2:a1:d1:22:c6:af:62:ff:95:b9:24:a2:3e:22:24:7a:d2:
         e4:3a:36:ed:3b:60:d3:8b:18:f8:10:6f:de:6e:bf:01:fd:7c:
         43:b0:8c:6a:5d:a5:bc:d2:f4:da:7e:f9:0c:29:76:7e:4d:0a:
         bf:74:38:28:fb:58:da:ba:b8:8a:b2:3d:69:00:2b:2c:bf:79:
         5f:8e:df:7e:2d:e0:dd:49:2c:0e:18:de:b3:d6:e4:74:04:2c:
         56:61:ad:0c:ef:3b:9c:23:62:9f:1a:ae:29:6a:dc:2e:ce:21:
         32:09:0c:9f:af:3f:aa:af:88:96:6f:39:3a:fe:f5:70:15:f5:
         32:be:28:fb:8a:d6:7f:d7:ce:78:f2:77:68:26:b5:fb:ad:ed:
         2f:fe:32:16:2f:cf:8e:d1:b5:67:10:e8:89:e7:8f:6e:fd:f3:
         ea:76:d6:d6:7c:0d:7f:4b:b4:dd:55:b0:69:62:98:99:60:13:
         c0:d9:77:b6:ac:66:5d:20:79:d4:fc:ef:6c:3a:1b:e6:47:0c:
         bc:1c:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----