Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10788E2249C611F1AA5FF4F4CE1D38B0.roa
File:                     10788E2249C611F1AA5FF4F4CE1D38B0.roa (raw, json)
Hash identifier:          IrHAmDu+1UmRWbzuc2aRRoHtUXBQbA82iounOTL1CJE=
Subject key identifier:   1A:9A:98:79:16:73:92:94:EE:1B:4F:D1:2C:CF:2C:3D:01:B1:B0:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B201
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10788E2249C611F1AA5FF4F4CE1D38B0.roa
Signing time:             Thu 07 May 2026 03:37:26 +0000
ROA not before:           Thu 07 May 2026 03:37:20 +0000
ROA not after:            Fri 15 May 2026 03:37:20 +0000
asID:                     137443
IP address blocks:        45.192.160.0/24 maxlen: 24
                          45.192.161.0/24 maxlen: 24
                          45.192.162.0/24 maxlen: 24
                          45.192.163.0/24 maxlen: 24
                          45.192.172.0/24 maxlen: 24
                          45.192.173.0/24 maxlen: 24
                          45.192.174.0/24 maxlen: 24
                          45.192.175.0/24 maxlen: 24
                          45.192.176.0/24 maxlen: 24
                          45.192.177.0/24 maxlen: 24
                          45.192.178.0/24 maxlen: 24
                          45.192.179.0/24 maxlen: 24
                          45.192.180.0/24 maxlen: 24
                          45.192.181.0/24 maxlen: 24
                          45.192.182.0/24 maxlen: 24
                          45.192.183.0/24 maxlen: 24
                          45.192.184.0/24 maxlen: 24
                          45.192.185.0/24 maxlen: 24
                          45.192.186.0/24 maxlen: 24
                          45.192.187.0/24 maxlen: 24
                          45.192.188.0/24 maxlen: 24
                          45.192.189.0/24 maxlen: 24
                          45.192.190.0/24 maxlen: 24
                          45.192.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111105 (0x1b201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  7 03:37:20 2026 GMT
            Not After : May 15 03:37:20 2026 GMT
        Subject: CN=69fc08f6-92b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:29:cb:d2:49:1b:d6:6c:4b:dc:8d:1c:18:
                    88:bc:5a:0e:dc:e0:07:8f:e6:45:0b:02:d1:7d:0f:
                    8d:68:f7:9e:f4:51:f9:5c:60:a5:4a:66:f4:c8:a0:
                    96:3c:20:b5:39:88:5a:2f:7c:4b:41:09:d4:3c:ab:
                    5c:1f:2e:2e:b6:8b:e3:79:db:9d:77:93:a9:fa:84:
                    ac:6a:64:e7:28:63:80:0c:e2:7c:a2:98:07:15:b7:
                    6c:90:f4:b3:11:79:c7:92:ca:7e:d3:a3:62:ad:c8:
                    67:3d:42:a0:0e:62:a8:3d:8a:57:50:60:b3:e2:54:
                    9f:36:b3:c9:7a:fc:e3:b2:bd:79:cf:d2:5f:85:d1:
                    26:f1:47:70:20:e1:f3:b7:4d:40:db:cb:e1:a1:33:
                    89:69:a9:91:0b:34:7d:8c:27:e5:b6:00:9c:55:7b:
                    07:e5:f4:e5:03:89:23:3c:60:e0:f8:78:7a:5e:f4:
                    65:ad:43:80:8a:4f:88:35:d1:bf:e5:af:5d:dc:8f:
                    f2:6d:16:2b:21:c2:58:33:18:d8:bd:46:75:1e:85:
                    d9:91:c7:7e:1f:a9:79:ce:bf:29:53:d5:cf:29:48:
                    72:57:e9:e3:07:ae:b3:21:0f:a1:6a:35:d3:4e:51:
                    e2:ce:f3:b0:7b:32:08:04:74:55:8b:6d:ba:90:c7:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:98:79:16:73:92:94:EE:1B:4F:D1:2C:CF:2C:3D:01:B1:B0:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10788E2249C611F1AA5FF4F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/22
                  45.192.172.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         21:46:54:ae:98:39:59:82:50:e2:ba:41:82:ec:e4:7f:0f:9d:
         66:a4:55:19:7a:c8:ca:ef:ee:9c:3a:1b:89:ff:f2:ff:52:e7:
         f9:7e:f3:9c:f5:45:e2:31:ef:20:8f:a9:1a:d2:05:39:59:0d:
         f4:5d:01:70:f4:3b:46:1e:bf:3b:3a:b0:62:8a:ac:47:bf:e9:
         7b:09:6c:35:d9:be:1e:f2:9c:5a:bc:0e:5a:b6:9f:e7:42:19:
         f7:23:95:b1:19:03:90:5d:e1:4e:32:0b:2b:c3:03:2f:a5:f0:
         20:81:0d:4f:75:be:a7:4c:61:00:89:13:6f:22:9a:2e:b1:be:
         77:fd:7a:2f:d3:84:61:2b:f7:f5:09:8a:22:1f:51:4d:3f:d0:
         cf:0e:7d:ae:75:ef:86:e6:01:25:0b:45:3d:49:52:0c:62:37:
         c9:4d:e2:b2:06:7f:d5:95:da:e9:ac:ab:cf:24:c8:29:44:2a:
         19:d3:ca:4c:bf:f6:7e:66:50:5d:23:6e:fd:e6:fb:c6:16:a4:
         fe:1a:21:6d:68:3c:80:ca:b6:9f:98:42:d6:3e:b9:07:32:63:
         82:4f:53:2d:ef:df:1d:cd:5f:a6:97:ca:67:5e:73:10:7a:b3:
         d9:f8:6f:a5:04:fd:16:18:71:0f:aa:90:a0:c9:1d:7d:2c:7b:
         c4:7c:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:20 2026 by rpki-client