Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F03DE943E3811F1BF7D6D14CF1D38B0.roa
File:                     2F03DE943E3811F1BF7D6D14CF1D38B0.roa (raw, json)
Hash identifier:          CzmRRdFmYPGgLV8od8Vdak4uhrhrwbx6Mb3Xu/Ijp70=
Subject key identifier:   1E:60:23:62:CE:10:A0:49:8A:5F:83:22:AE:1E:14:11:89:5E:8E:6A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01ADFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F03DE943E3811F1BF7D6D14CF1D38B0.roa
Signing time:             Wed 22 Apr 2026 10:44:06 +0000
ROA not before:           Wed 22 Apr 2026 10:44:01 +0000
ROA not after:            Thu 28 May 2026 10:44:01 +0000
asID:                     44559
IP address blocks:        45.199.231.0/24 maxlen: 24
                          45.199.232.0/24 maxlen: 24
                          45.199.233.0/24 maxlen: 24
                          45.199.234.0/24 maxlen: 24
                          45.199.235.0/24 maxlen: 24
                          45.199.236.0/24 maxlen: 24
                          45.199.237.0/24 maxlen: 24
                          45.199.238.0/24 maxlen: 24
                          45.199.239.0/24 maxlen: 24
                          45.199.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110077 (0x1adfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 10:44:01 2026 GMT
            Not After : May 28 10:44:01 2026 GMT
        Subject: CN=69e8a675-b181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:88:a6:33:a0:fe:ca:61:a0:04:8a:e3:b0:
                    0c:66:58:e9:1d:ba:77:8d:00:13:0b:87:f1:c9:e6:
                    08:b6:81:65:47:7c:9c:07:c9:61:2f:ea:67:67:1e:
                    5e:90:5d:7f:00:48:f5:7a:eb:5e:e7:2d:f4:c9:7b:
                    83:2c:25:b0:2b:0e:ce:3c:50:d5:69:ab:ff:07:6e:
                    20:74:e8:16:9a:96:76:b5:3b:93:ef:4c:be:aa:80:
                    cf:da:e3:77:e7:5f:22:79:a5:60:4c:3c:aa:84:e0:
                    4f:42:da:10:65:cf:55:c3:9f:0d:c4:d8:04:e9:e8:
                    1b:ae:b5:6b:29:1a:c3:18:ec:b0:c7:b0:6b:03:2f:
                    03:7a:62:be:17:d4:8a:6b:42:0a:25:9d:50:a3:a6:
                    e3:ae:61:21:c9:0c:7f:6a:e6:de:6c:38:de:77:db:
                    5f:ec:0f:56:0c:9d:2e:b0:a2:2a:48:2c:dd:2e:81:
                    90:e2:ac:36:97:a1:1a:6d:88:24:51:b4:fb:67:11:
                    71:a4:ba:02:44:41:00:00:52:c9:a7:94:19:ac:95:
                    56:f5:f1:51:8b:1c:d4:6e:5c:d9:35:4c:72:8e:3a:
                    95:a8:29:82:dd:7a:2f:a4:60:b0:b1:84:a0:b0:57:
                    26:60:69:54:00:e8:65:5e:02:20:a1:1d:7c:5e:4f:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:60:23:62:CE:10:A0:49:8A:5F:83:22:AE:1E:14:11:89:5E:8E:6A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F03DE943E3811F1BF7D6D14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.231.0-45.199.240.255

    Signature Algorithm: sha256WithRSAEncryption
         98:38:2f:39:c7:fc:3a:e1:c4:4c:c6:e4:b5:86:37:02:98:f7:
         8e:84:b5:c1:08:9f:52:d7:a1:fd:2e:d1:88:6f:0d:c7:e5:65:
         4a:49:06:9f:7a:91:2b:1e:6c:c8:75:50:64:b4:c6:dd:8e:80:
         65:4b:24:2a:ab:b3:f2:35:5b:4e:bc:8f:21:94:b1:56:f7:ce:
         1e:2e:7a:73:23:84:48:fa:39:2a:d8:82:1c:d2:53:10:65:7f:
         c2:1d:c9:74:fa:ba:59:28:af:9f:69:cb:fe:da:c7:01:08:eb:
         98:6d:d5:8c:c8:36:0f:6c:9d:05:2c:b8:06:cf:0c:fd:9b:a6:
         7a:d6:30:da:dc:92:80:d1:91:5e:2b:a1:d2:b1:19:d9:8d:08:
         da:e5:63:b8:93:ff:4b:06:93:52:1a:df:de:a3:ae:5c:d7:aa:
         20:18:4a:34:ab:7b:f7:ed:5b:5f:8a:89:e4:e8:4b:8b:98:ba:
         18:42:e8:99:dc:99:92:21:c1:e9:b3:9c:13:d9:1f:30:6e:1e:
         a3:15:0e:53:f2:a0:df:c2:3f:42:4e:d9:a3:71:d6:a2:3f:20:
         68:57:d1:b3:b8:e1:2c:78:38:37:e9:79:0e:a7:47:5c:47:b8:
         f4:71:f1:7a:3d:0f:3a:e8:8e:9e:3f:9e:fd:45:57:a5:95:34:
         b6:fb:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:41 2026 by rpki-client