Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48907CF085E611F1BA63C3E4CE1D38B0.roa
File:                     48907CF085E611F1BA63C3E4CE1D38B0.roa (raw, json)
Hash identifier:          UrfSs6coCUHjZGOc2wcmB0kYDgWTPUbvwM2Ei2AUJ6c=
Subject key identifier:   EB:26:26:F3:DD:C0:E1:BC:47:7E:7C:F5:1A:B5:B2:F6:8B:70:58:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C76F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48907CF085E611F1BA63C3E4CE1D38B0.roa
Signing time:             Wed 22 Jul 2026 15:59:14 +0000
ROA not before:           Wed 22 Jul 2026 15:59:09 +0000
ROA not after:            Wed 09 Sep 2026 15:59:09 +0000
asID:                     395793
IP address blocks:        45.192.112.0/24 maxlen: 24
                          45.194.12.0/23 maxlen: 24
                          45.195.133.0/24 maxlen: 24
                          45.197.6.0/23 maxlen: 24
                          45.198.183.0/24 maxlen: 24
                          45.198.184.0/24 maxlen: 24
                          45.204.150.0/24 maxlen: 24
                          45.204.151.0/24 maxlen: 24
                          45.206.65.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116591 (0x1c76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 15:59:09 2026 GMT
            Not After : Sep  9 15:59:09 2026 GMT
        Subject: CN=6a60e8d1-a80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:81:a0:26:69:8a:86:69:49:07:4e:04:11:
                    c3:36:ca:29:8d:18:55:ae:63:c5:49:9d:78:fe:f8:
                    9e:a3:81:8e:53:d6:0b:13:31:65:cb:8a:d8:50:97:
                    bd:aa:9b:ee:bc:e9:08:e7:d2:c2:a9:d7:d8:63:6c:
                    d1:f9:5d:b9:5b:99:31:e8:9a:8d:99:ae:c2:1f:9c:
                    c7:c8:f7:38:01:6a:37:fa:9f:12:99:b9:d7:47:8e:
                    24:37:67:16:5c:a0:cc:ca:db:6b:35:08:b9:74:52:
                    2d:fa:f0:4d:2a:1f:38:0b:93:ff:bb:a5:97:7b:21:
                    5f:c4:94:01:13:28:3c:47:57:02:8f:57:c8:ec:ca:
                    db:36:a7:60:e8:7b:0d:71:9c:b1:ad:e4:e8:56:32:
                    30:ff:a3:43:18:ce:51:ea:fb:7f:6a:59:57:87:b9:
                    41:25:22:cc:d0:c1:34:2d:23:59:85:b5:73:cd:8f:
                    9f:44:98:36:57:94:fe:5e:88:18:3d:7d:cd:be:1b:
                    56:16:63:8b:b1:f1:47:09:20:77:25:23:4f:5a:70:
                    7d:df:95:37:ea:93:58:32:33:33:f7:88:0d:24:6a:
                    92:9a:49:c7:c0:90:8e:2a:ea:1c:0d:81:fe:e6:a4:
                    2a:d0:cd:73:34:49:7b:2f:85:92:01:c7:22:59:3a:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:26:F3:DD:C0:E1:BC:47:7E:7C:F5:1A:B5:B2:F6:8B:70:58:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48907CF085E611F1BA63C3E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.112.0/24
                  45.194.12.0/23
                  45.195.133.0/24
                  45.197.6.0/23
                  45.198.183.0-45.198.184.255
                  45.204.150.0/23
                  45.206.65.0-45.206.66.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:c8:85:10:58:af:3b:8f:a9:3e:ca:11:da:84:d4:2d:d2:
         68:91:43:21:4c:85:7b:58:a1:b3:d1:d5:e1:dc:59:0e:7b:7b:
         9b:ee:47:c2:88:d9:ac:fe:f1:50:00:f6:8a:73:86:b1:26:36:
         1f:d4:02:28:8e:57:21:6c:54:3d:f9:cc:69:58:38:0c:61:59:
         1c:59:b8:29:ba:f4:43:24:54:e0:05:9f:fb:8a:84:0a:ac:10:
         a4:08:de:d3:63:cf:59:f8:75:cd:8c:4e:20:51:0a:16:1c:06:
         c0:81:07:ee:8b:74:ff:33:88:a7:ae:29:70:ed:47:26:60:15:
         59:c6:8d:5c:0c:18:19:28:96:a2:c5:05:6f:55:2d:99:85:c3:
         ef:38:f4:25:99:5a:1f:ef:1c:4b:30:f2:bd:08:a4:72:9e:2c:
         78:c3:99:8f:b3:d5:0f:ba:6f:71:77:36:b5:21:af:97:98:a4:
         bf:0e:9a:0d:7e:bc:a1:65:b9:0e:6c:95:ac:bc:93:10:5d:25:
         88:ba:ae:b1:fc:e8:df:3d:62:0a:e1:29:fb:fa:92:58:ef:98:
         f5:da:7e:59:71:77:e6:c8:25:c1:15:7b:98:70:7f:4f:4d:94:
         59:f4:4f:a0:dc:11:d9:f8:46:ca:36:37:da:99:5c:e1:15:f3:
         c4:3c:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:11 2026 by rpki-client