Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE921004B0E811F180086AACCE1D38B0.roa
File:                     FE921004B0E811F180086AACCE1D38B0.roa (raw, json)
Hash identifier:          Hmxo8VL/N2SDMPNqeZIQwqtLg9/cjfyaejctJZS9jnQ=
Subject key identifier:   CE:66:6A:F2:77:ED:A9:C3:32:00:88:18:A3:35:E6:A5:CD:24:DD:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D64D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE921004B0E811F180086AACCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:36:58 +0000
ROA not before:           Tue 15 Sep 2026 09:36:54 +0000
ROA not after:            Wed 21 Oct 2026 09:36:54 +0000
asID:                     63199
IP address blocks:        45.195.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120397 (0x1d64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:36:54 2026 GMT
            Not After : Oct 21 09:36:54 2026 GMT
        Subject: CN=6aa911ba-e33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:e0:89:25:50:41:cd:0c:75:b0:ff:16:12:
                    fe:cf:28:51:77:b3:2f:ab:1c:84:95:51:ba:21:dc:
                    f1:fd:07:ff:4d:85:fa:0a:c4:b6:2b:c4:20:ed:9f:
                    ad:30:85:db:a5:d9:32:a5:32:a1:57:22:1a:c9:79:
                    93:89:74:9c:84:11:42:50:b2:46:01:d1:4a:53:55:
                    78:fc:87:e3:5c:02:c4:c1:8c:02:0d:8e:0f:ce:da:
                    99:23:7f:09:25:78:34:7c:0d:81:a1:db:d3:e8:8f:
                    f4:a1:34:c0:65:c4:28:08:35:31:7b:95:0c:c9:a5:
                    ad:af:3c:a8:3c:34:e5:1d:f5:c4:28:7f:04:7a:a7:
                    82:ac:99:49:8c:32:06:2c:01:27:b1:b0:ea:3b:76:
                    82:9e:13:82:19:4b:41:6f:de:96:02:3a:2e:89:ed:
                    21:8f:cf:dc:3d:4b:be:7d:03:8a:15:18:d9:7c:86:
                    63:04:fb:c4:60:67:e3:63:15:ee:e5:ef:02:39:7c:
                    01:95:44:30:6c:7d:98:c9:d0:f4:28:01:69:d6:76:
                    e2:c8:cb:71:25:a3:b6:7b:aa:74:90:0a:7b:da:7b:
                    29:59:b5:24:93:49:ba:87:e6:51:1e:44:74:1f:66:
                    c9:b9:bb:fc:1e:d8:45:6f:08:8e:ba:81:15:5e:19:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:6A:F2:77:ED:A9:C3:32:00:88:18:A3:35:E6:A5:CD:24:DD:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE921004B0E811F180086AACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:31:0f:9f:98:fd:ab:99:8e:ad:b1:84:01:12:7a:30:b2:fc:
         23:fe:96:5d:49:d7:96:5d:7c:84:fb:14:a7:01:e6:36:f1:a9:
         c4:98:35:e4:0d:86:6a:6d:9b:24:6c:65:73:14:c5:f4:fd:5a:
         7f:54:f6:f9:8e:2e:1d:11:13:c7:77:a1:0f:07:92:1c:5b:0a:
         48:1b:e2:68:85:96:fe:18:4f:07:b6:d7:ca:2a:c6:f6:ca:5c:
         be:19:8d:c0:9a:1d:e8:f2:f9:0a:fc:32:cb:a5:3f:8c:c6:07:
         c4:2e:83:c2:15:8d:df:8e:41:e8:75:71:1b:42:6b:39:c9:58:
         e0:de:29:ae:75:bc:83:81:ce:42:65:06:70:16:81:36:dd:e2:
         84:e5:b6:08:8b:2d:f5:25:e4:cb:e4:12:ee:a0:27:92:86:b7:
         b0:53:b7:15:16:82:21:bd:9a:3d:1f:89:f7:a5:3f:68:91:1b:
         f6:3b:a0:ae:d4:e1:2c:17:2a:b9:b9:71:1c:b2:3d:73:51:ba:
         41:e2:a9:f6:1a:55:53:aa:7b:81:5d:a1:ba:0b:c0:67:c9:95:
         15:64:14:a9:b3:9f:53:ac:48:4c:81:e0:2c:4d:d9:2e:60:3b:
         53:fb:d8:aa:bd:aa:d8:a9:56:92:e7:2e:02:f0:a6:5c:26:6f:
         3c:a3:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----