Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3264099A3E4E11F18E769916CF1D38B0.roa
File:                     3264099A3E4E11F18E769916CF1D38B0.roa (raw, json)
Hash identifier:          ChghZVteW1APIKOdRB4isrzzvFhigGP906a9oFfzbIE=
Subject key identifier:   1D:0B:D0:4B:4D:5B:D3:70:93:08:D7:AF:41:87:BC:B3:D3:DA:B8:EA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AE1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3264099A3E4E11F18E769916CF1D38B0.roa
Signing time:             Wed 22 Apr 2026 13:21:40 +0000
ROA not before:           Wed 22 Apr 2026 13:21:35 +0000
ROA not after:            Tue 09 Jun 2026 13:21:35 +0000
asID:                     395793
IP address blocks:        45.192.165.0/24 maxlen: 24
                          45.192.166.0/24 maxlen: 24
                          45.192.227.0/24 maxlen: 24
                          45.192.228.0/22 maxlen: 24
                          45.192.228.0/24 maxlen: 24
                          45.192.229.0/24 maxlen: 24
                          45.192.230.0/24 maxlen: 24
                          45.192.231.0/24 maxlen: 24
                          45.192.232.0/22 maxlen: 24
                          45.192.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110109 (0x1ae1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 13:21:35 2026 GMT
            Not After : Jun  9 13:21:35 2026 GMT
        Subject: CN=69e8cb64-9271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:85:ce:31:be:9c:11:53:3f:83:57:41:f1:
                    ac:b1:f8:77:4c:2d:b7:b2:36:a3:11:ed:42:3b:6d:
                    f1:4b:62:ea:ae:5a:ff:6f:25:c5:ad:75:75:bf:31:
                    77:ef:79:d0:c6:7a:a5:4f:f0:75:48:42:d0:9f:0f:
                    8f:ea:e0:d1:19:83:12:84:03:45:ca:fd:46:f3:4c:
                    d4:88:06:3b:26:b6:51:02:d8:e7:8e:f3:03:39:94:
                    ca:50:3a:44:79:ef:70:ad:f7:60:1e:53:da:86:c4:
                    ad:df:5e:d3:db:45:bc:e0:60:8b:53:52:7d:e9:b5:
                    dc:81:f8:c4:38:40:8a:c0:b3:5d:98:37:6a:9a:93:
                    ea:36:2b:a8:a0:27:ac:3d:ef:5d:70:c8:86:88:9e:
                    db:5f:15:7f:4a:3b:11:78:cb:8e:bf:27:22:8a:6e:
                    25:f2:94:39:e8:26:3c:ef:70:76:49:94:3e:70:f7:
                    ff:01:29:73:67:c3:aa:49:0c:df:12:74:63:89:07:
                    9a:2b:95:3a:ad:fd:89:4a:09:8b:1c:d8:0e:da:22:
                    6d:4f:29:5e:60:e5:02:64:5c:04:61:76:0e:46:7e:
                    22:62:bf:60:0b:83:7d:9a:fa:6d:13:2c:2c:f3:28:
                    88:1f:af:f4:79:e5:dc:b3:41:f2:4f:70:44:5c:6e:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:D0:4B:4D:5B:D3:70:93:08:D7:AF:41:87:BC:B3:D3:DA:B8:EA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3264099A3E4E11F18E769916CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.165.0-45.192.166.255
                  45.192.227.0-45.192.239.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:39:e6:8f:64:57:fd:a7:c7:12:45:9b:3e:3d:6c:4d:24:
         d7:45:3b:6c:4e:30:9c:19:0e:cd:65:b4:34:95:69:a4:dd:97:
         16:db:91:7f:b5:93:1d:2d:fa:e7:28:c0:05:f5:22:b2:3a:4a:
         02:80:ca:0b:c8:c7:8d:42:1d:b4:8c:5f:b2:45:e0:3d:c3:bc:
         47:bb:2b:5f:7b:3e:94:5e:74:c3:81:56:52:cd:22:b5:da:c9:
         7d:8e:ea:24:43:ed:c8:65:ea:ff:75:e5:35:f8:a1:fa:26:ce:
         c3:6a:aa:89:61:a8:60:48:b1:54:c7:d4:85:2a:fe:6f:50:21:
         96:95:d6:ef:79:98:19:74:82:8a:6a:49:59:1b:ba:9a:2f:e6:
         ac:36:d5:4e:e7:80:2d:19:6f:68:07:51:c3:b1:b3:8d:e1:21:
         ed:03:da:15:79:98:29:61:35:ae:f1:53:4f:a0:63:fb:4e:dc:
         17:29:58:bf:d6:9e:a0:06:68:90:80:f2:83:11:fe:53:a4:09:
         b8:dc:0d:73:0c:4a:84:1f:7a:78:0d:04:dc:a4:49:d1:af:0c:
         69:66:0c:2a:39:d7:2c:59:bc:53:c6:88:66:68:0d:5b:41:96:
         e4:4a:ff:06:35:6c:af:b6:4f:e9:f9:0f:94:e6:e2:0c:ce:89:
         75:44:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:35 2026 by rpki-client