Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC543A463011F195CB34AACE1D38B0.roa
File:                     57EC543A463011F195CB34AACE1D38B0.roa (raw, json)
Hash identifier:          mrKbZg2RXoTTmS6fom3048hL1JYaQcqv/XMIUo4GyQA=
Subject key identifier:   D4:E9:B1:73:59:1B:DD:67:50:C3:0D:FB:EC:1D:6C:47:A5:D9:DF:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B151
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC543A463011F195CB34AACE1D38B0.roa
Signing time:             Sat 02 May 2026 14:08:08 +0000
ROA not before:           Sat 02 May 2026 14:08:03 +0000
ROA not after:            Tue 09 Jun 2026 14:08:03 +0000
asID:                     138915
IP address blocks:        45.197.64.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
                          45.197.106.0/24 maxlen: 24
                          45.197.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110929 (0x1b151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  2 14:08:03 2026 GMT
            Not After : Jun  9 14:08:03 2026 GMT
        Subject: CN=69f60547-64bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:f9:3d:a1:00:b4:95:da:b5:e7:31:55:aa:
                    35:ff:a6:7e:6e:8c:0c:2e:ca:79:64:da:23:f9:df:
                    79:fe:64:c1:49:19:ae:fb:42:f8:f5:73:60:0c:74:
                    31:1a:21:ad:e2:ad:12:27:f3:12:2d:6f:65:7b:23:
                    16:08:9d:4f:11:57:35:ee:a3:8e:43:bd:4c:21:8f:
                    31:f7:fd:9e:ee:4e:14:ec:67:01:4b:d7:91:58:9c:
                    04:dd:51:c2:7c:26:fa:51:7e:e7:fb:d5:5d:9f:4d:
                    c5:26:43:6d:3e:84:1f:d3:6f:12:e7:c0:2e:b8:04:
                    2f:64:15:bb:f0:2c:66:58:45:ea:09:a9:4b:a2:26:
                    56:85:32:0a:f0:20:fc:d0:02:3e:29:55:7a:c1:79:
                    a1:0c:80:25:a3:e4:21:b5:e9:ab:91:74:a5:14:66:
                    bb:48:8c:34:cc:9b:0b:6a:10:d3:69:2d:dc:48:74:
                    e2:af:e4:3b:5e:94:fc:4a:ae:cf:c8:78:a2:90:46:
                    60:21:c4:bc:98:dd:88:d6:02:48:d7:cc:3f:48:2e:
                    47:75:13:96:df:3d:9b:eb:4f:15:1f:35:04:81:85:
                    67:ea:8d:37:45:3e:a8:05:89:f6:ca:8f:b5:be:86:
                    9c:74:04:90:49:39:5a:18:47:5b:28:31:e7:b8:b4:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E9:B1:73:59:1B:DD:67:50:C3:0D:FB:EC:1D:6C:47:A5:D9:DF:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC543A463011F195CB34AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.64.0/24
                  45.197.74.0/23
                  45.197.96.0/23
                  45.197.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:9a:ef:41:8e:df:a0:82:d9:a2:12:38:01:a0:fd:c9:c4:
         91:df:b0:f0:12:78:fc:be:5b:f8:93:12:ed:cd:68:71:3b:2e:
         ca:2d:9d:df:91:33:9a:f0:b5:86:95:b9:5e:02:a6:5f:c0:ae:
         92:61:53:5c:ca:d1:ec:69:fd:9f:73:7c:05:eb:12:9a:0b:ae:
         30:38:69:26:3d:01:55:b2:ea:4b:8a:a5:49:a7:e6:01:fa:3c:
         80:8a:32:06:bf:da:eb:e7:02:8b:7a:ee:82:4c:b6:f9:38:61:
         fd:b4:af:0d:92:3f:18:c2:81:b7:a3:bf:b2:5d:7d:97:e2:54:
         b2:5b:43:fb:35:98:72:3b:8f:19:29:1b:d8:04:cc:74:01:fd:
         97:f5:71:43:1f:f2:08:36:3a:7d:8c:44:68:7a:9c:30:a2:33:
         c9:72:3f:5c:be:17:46:08:63:09:e6:62:74:1f:c9:88:bb:be:
         b0:25:43:88:f5:1d:a8:86:ef:81:e8:62:4f:a2:35:c7:2d:61:
         7e:3b:3f:48:3e:43:6b:60:b2:68:62:54:bf:aa:77:b2:8a:96:
         cc:fb:04:6b:3a:5e:c7:c8:36:dd:e2:3d:32:20:4a:bd:42:8f:
         79:91:4a:a8:c3:01:2c:17:61:db:ca:10:0b:ca:9c:a8:53:c1:
         63:e0:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:13 2026 by rpki-client