Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EDCA3A1A0111F1BA2129E6DAE4EC9C.roa
File:                     36EDCA3A1A0111F1BA2129E6DAE4EC9C.roa (raw, json)
Hash identifier:          Z5p/YtZrrIHyEAc8OeGqegtuxaDw+gBGDmgj5K28k1Y=
Subject key identifier:   C3:30:21:D6:7F:D6:85:7B:DF:B3:5E:15:9E:CA:19:C6:85:7D:9C:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A330
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EDCA3A1A0111F1BA2129E6DAE4EC9C.roa
Signing time:             Sat 07 Mar 2026 08:39:55 +0000
ROA not before:           Sat 07 Mar 2026 08:39:39 +0000
ROA not after:            Thu 16 Apr 2026 08:39:39 +0000
asID:                     51142
IP address blocks:        45.195.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107312 (0x1a330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar  7 08:39:39 2026 GMT
            Not After : Apr 16 08:39:39 2026 GMT
        Subject: CN=69abe45b-ee7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:32:dc:17:e1:3e:54:a2:2f:e1:f9:80:56:a0:
                    60:48:88:41:78:9d:3b:7c:ab:9e:e6:62:b0:dc:ea:
                    ca:a7:ff:23:7e:7f:79:68:4e:12:1e:80:0d:b5:bc:
                    a5:21:8d:90:88:a7:6b:52:cd:38:95:c6:2b:46:1a:
                    9d:ba:5a:cd:83:37:1e:c6:ff:82:03:f8:37:0e:a4:
                    31:18:aa:f7:ff:7a:ae:45:da:8d:03:ad:2d:69:30:
                    cd:ec:9d:81:a2:e9:c5:15:e5:2c:ab:01:ea:24:bb:
                    b8:34:62:c1:a3:4d:2e:a3:78:0d:9d:69:05:1e:82:
                    e6:2e:92:b2:9f:33:3f:2d:f3:69:44:81:b3:5c:53:
                    46:2b:23:24:5f:95:c0:71:66:e1:b4:12:65:39:64:
                    4e:b8:2a:93:d5:bf:50:ef:8d:a1:e5:19:c8:93:29:
                    0f:7f:a9:00:22:cc:fa:94:a3:f2:07:f5:25:cc:35:
                    4e:20:0d:9a:3a:ce:de:0d:57:5c:66:6b:e7:c4:24:
                    11:7e:de:4e:4b:26:85:96:1e:ea:47:ab:2f:88:48:
                    a4:a3:ed:3e:bc:8d:01:60:b3:a2:92:8c:af:77:3c:
                    95:c7:28:53:a6:c2:78:8f:cc:57:ae:7d:1c:6f:a9:
                    79:37:0c:b5:1b:39:e2:05:06:0e:bc:bd:6a:10:d4:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:21:D6:7F:D6:85:7B:DF:B3:5E:15:9E:CA:19:C6:85:7D:9C:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EDCA3A1A0111F1BA2129E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:d8:75:ed:90:d7:e3:97:6f:8f:1e:b6:2d:03:bf:95:b2:
         0a:f8:c0:22:93:f2:8c:3e:22:a7:c2:da:12:13:31:e7:8f:71:
         3e:fd:07:19:f1:27:1f:60:85:d0:ba:87:1e:50:cd:a9:9f:ce:
         06:ad:48:f4:50:14:ee:20:0f:73:5f:4f:59:d7:5d:cf:1d:10:
         16:48:60:5d:07:b2:ba:af:28:28:4e:b7:9f:c3:da:f7:4f:03:
         44:a0:b0:fc:df:b1:52:6a:4b:ed:d8:6d:b1:cb:4a:c0:74:49:
         bb:33:f0:23:8f:e5:8f:a9:8d:aa:72:b2:80:b0:17:26:e3:95:
         73:56:89:18:88:bb:68:64:6d:9f:06:64:a0:1f:c9:dd:17:ad:
         19:d9:d1:3f:14:4d:fd:10:c7:b7:3f:f1:43:71:a6:e1:fc:0f:
         9b:99:a1:23:1b:3b:a8:a6:4d:c5:48:e3:c1:52:cc:40:e3:0d:
         76:79:12:39:14:02:49:d6:f7:83:3e:8d:6b:b7:4c:80:6a:51:
         8c:20:67:5f:e6:6f:3b:b6:96:28:2e:80:d5:8b:c3:68:d1:21:
         24:53:81:19:ca:2e:bf:6f:c1:b0:e8:d5:2e:a4:69:77:da:3a:
         28:de:a2:e1:1a:8b:5e:3d:a2:04:d3:c6:84:9b:b5:64:89:1b:
         53:f0:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:48 2026 by rpki-client