Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CE7AC24AC611F183C13711CF1D38B0.roa
File:                     45CE7AC24AC611F183C13711CF1D38B0.roa (raw, json)
Hash identifier:          Fifgu/iUZo3MYGwXbpoHUuWeTPKvMgywmGTi8xsbOyY=
Subject key identifier:   CF:A9:AD:3E:4B:B7:F1:79:DB:06:41:02:F2:1E:94:8D:06:A1:4D:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B2CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CE7AC24AC611F183C13711CF1D38B0.roa
Signing time:             Fri 08 May 2026 10:11:26 +0000
ROA not before:           Fri 08 May 2026 10:11:21 +0000
ROA not after:            Mon 15 Jun 2026 10:11:21 +0000
asID:                     199707
IP address blocks:        45.195.64.0/24 maxlen: 24
                          45.195.65.0/24 maxlen: 24
                          45.195.66.0/24 maxlen: 24
                          45.195.67.0/24 maxlen: 24
                          45.195.140.0/24 maxlen: 24
                          45.195.141.0/24 maxlen: 24
                          45.195.142.0/24 maxlen: 24
                          45.195.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111311 (0x1b2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  8 10:11:21 2026 GMT
            Not After : Jun 15 10:11:21 2026 GMT
        Subject: CN=69fdb6ce-e0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:c6:fa:6d:b7:65:63:5d:0f:da:18:18:de:
                    75:e8:cd:dc:e4:ed:88:c4:b6:09:c4:37:25:80:60:
                    6f:b1:2e:86:bc:23:39:f9:4f:73:1c:d2:23:1f:4c:
                    d7:ea:c6:35:b9:87:9e:1c:15:03:a1:48:0f:5d:2a:
                    db:2c:86:b7:56:b1:d1:4a:34:39:8c:38:93:8d:88:
                    88:f0:a8:71:60:f8:d0:48:f3:9a:ab:84:b9:22:5f:
                    6a:1c:ac:ff:71:a1:bd:32:f6:38:3e:dd:c7:b3:1b:
                    f0:7d:ce:61:2f:20:68:46:b9:5d:3b:4d:58:57:04:
                    aa:b5:e8:e9:2a:cc:8a:37:8e:64:aa:56:8f:ac:92:
                    da:36:ca:61:9b:42:59:d7:da:54:d1:9d:de:38:a8:
                    fa:f8:ff:22:a4:3f:30:f7:ed:5c:1b:1a:f3:fd:d5:
                    e0:fb:83:08:42:b5:fa:77:6d:aa:c1:4a:2f:61:c0:
                    98:6a:f6:fd:8a:b6:3d:40:2c:c1:6e:28:28:4a:d1:
                    bb:48:4f:92:44:c0:49:4b:67:d1:be:51:10:0d:f7:
                    a7:bd:48:4e:05:42:ad:4d:cf:48:db:f1:3c:a5:06:
                    f0:ee:dd:d5:23:b7:9a:ef:fe:86:f4:24:9a:e4:22:
                    a0:ea:a9:74:db:2a:26:51:b7:73:db:c9:3e:47:d0:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:AD:3E:4B:B7:F1:79:DB:06:41:02:F2:1E:94:8D:06:A1:4D:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CE7AC24AC611F183C13711CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.64.0/22
                  45.195.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:df:42:5f:e8:aa:a4:e6:b8:5d:3c:e0:f6:54:9d:ea:23:
         2f:d2:60:c7:2b:92:97:da:be:20:63:d7:f4:46:ae:f3:9a:26:
         2f:ef:7e:50:5a:8a:50:6c:e7:d1:7a:89:83:bb:e5:fc:e7:87:
         b8:62:1d:37:c7:64:c5:f5:c7:15:89:4a:b2:d7:b6:54:32:7b:
         b0:0a:c5:e9:83:24:d7:d5:be:bc:ac:42:d7:3e:78:c7:58:ed:
         92:33:ed:9a:87:e3:34:4c:f8:e6:9b:68:bd:7d:6f:bb:87:93:
         ce:d6:00:1b:12:f1:3e:42:04:87:7b:bf:8a:ef:8d:dc:72:6b:
         43:45:0a:f0:3f:38:e2:7e:aa:a1:ed:f5:34:99:80:6c:6f:f4:
         76:7d:fa:bb:4c:dc:3f:73:22:29:38:04:11:ae:3b:97:0c:7f:
         8e:0a:8c:af:67:73:24:29:64:8e:5a:ea:17:78:15:66:2a:58:
         c7:91:27:d9:fa:7a:22:0f:3c:e8:4e:62:b4:5e:35:86:31:8b:
         d1:05:4a:3d:03:a0:30:88:4c:dd:a0:30:c9:e7:46:72:4f:28:
         4f:94:66:9c:af:c3:08:b3:b2:36:57:da:98:f7:30:54:1d:f5:
         39:23:f7:03:43:31:2c:6f:f6:78:da:3d:89:02:e2:79:f5:26:
         bd:1e:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:43 2026 by rpki-client