Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683DF6D4860B11F1B0076DC2CE1D38B0.roa
File:                     683DF6D4860B11F1B0076DC2CE1D38B0.roa (raw, json)
Hash identifier:          J04P2pDNVnwQjdP5WSa6YtVGM0uJGVetm+Ph4QZUrBQ=
Subject key identifier:   1B:18:3B:B1:30:CC:1B:2F:5F:27:A0:9E:92:3E:8E:75:F2:73:88:62
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C7A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683DF6D4860B11F1B0076DC2CE1D38B0.roa
Signing time:             Wed 22 Jul 2026 20:24:58 +0000
ROA not before:           Wed 22 Jul 2026 20:24:53 +0000
ROA not after:            Sun 26 Jul 2026 20:24:53 +0000
asID:                     138590
IP address blocks:        45.194.14.0/24 maxlen: 24
                          45.194.15.0/24 maxlen: 24
                          45.194.25.0/24 maxlen: 24
                          45.194.26.0/24 maxlen: 24
                          45.194.80.0/24 maxlen: 24
                          45.194.81.0/24 maxlen: 24
                          45.194.88.0/24 maxlen: 24
                          45.194.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116645 (0x1c7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 20:24:53 2026 GMT
            Not After : Jul 26 20:24:53 2026 GMT
        Subject: CN=6a61271a-b167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:0f:ff:0a:66:2f:a2:2c:ec:60:e4:5d:43:
                    62:59:78:fd:d8:6b:2f:d3:47:b6:ce:cb:42:10:ea:
                    7c:32:93:d2:53:ed:05:09:f6:29:ef:ce:4f:5b:d3:
                    6c:53:67:e6:81:9d:48:7b:27:75:45:8d:93:16:5b:
                    14:b7:3c:53:1a:ca:91:ea:b6:56:ab:e3:e8:bd:90:
                    90:8f:34:4b:d3:93:a9:10:84:12:1b:c9:8c:96:6c:
                    d6:aa:7d:82:50:31:cf:c4:4a:d5:51:9b:5c:c5:a4:
                    d3:df:27:04:04:f1:cd:86:54:ee:f1:e9:df:a3:58:
                    80:42:62:26:51:1e:b3:3b:f9:23:a5:0a:df:e4:75:
                    26:e2:07:5e:24:c1:dd:87:9c:05:7f:4f:f6:97:47:
                    36:bb:48:d4:9e:d4:22:42:88:11:46:a7:e1:3f:f6:
                    cb:7b:53:bf:7f:5d:0c:b0:3a:a5:26:87:99:61:b6:
                    7c:27:66:a3:14:22:2d:06:55:b4:b6:e4:e6:c8:36:
                    39:59:50:2a:bc:39:77:78:e5:f8:ad:a4:35:81:b5:
                    fd:f6:53:e6:47:44:15:ff:46:a6:35:02:5b:e8:16:
                    0e:f8:f0:e1:dd:b9:29:42:10:fa:e3:c6:93:2d:35:
                    db:74:fd:79:9e:40:e2:74:4a:08:99:40:54:56:c3:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:3B:B1:30:CC:1B:2F:5F:27:A0:9E:92:3E:8E:75:F2:73:88:62
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683DF6D4860B11F1B0076DC2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.14.0/23
                  45.194.25.0-45.194.26.255
                  45.194.80.0/23
                  45.194.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:78:db:f9:fa:27:45:e3:5c:cb:67:e2:d6:98:1a:ea:f2:a9:
         32:da:60:b9:57:f1:94:12:a0:2a:f2:9f:97:63:b8:f8:a7:b3:
         69:f1:5c:52:2b:6c:eb:6c:57:2c:c5:77:af:b4:72:57:cb:51:
         2d:6e:82:b2:db:80:fd:66:c0:75:66:4e:f1:5d:cb:9a:8a:68:
         b1:76:56:e1:05:68:91:04:1d:b1:db:dc:07:28:ae:e8:19:92:
         d5:ba:2c:d4:be:d6:41:4e:c4:42:db:ed:ba:4b:77:bb:e6:92:
         a5:0f:15:74:d5:20:ef:e4:0b:07:2b:36:aa:51:d6:4b:80:6e:
         65:3c:d7:5a:52:2e:d9:e1:53:be:53:8e:71:af:07:ab:11:b7:
         86:ce:7b:5f:ea:fd:94:00:d8:ca:f9:6a:55:0b:e8:21:97:82:
         10:c1:7a:60:48:93:d2:90:3c:50:5c:3b:ed:01:79:94:3f:8d:
         a7:c7:f5:2b:9d:a5:de:75:db:78:4a:a9:8b:b9:4e:7f:4b:3e:
         04:13:a8:0b:db:da:c6:37:51:e5:91:1a:d7:96:30:e3:c5:ef:
         fb:06:72:c4:cb:4b:40:24:72:75:76:c0:10:31:c0:4c:4e:19:
         61:d8:da:30:52:8b:ea:7d:68:e6:98:cd:97:cb:46:2c:32:97:
         84:32:42:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:34 2026 by rpki-client