Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69AE82D685FC11F1A8FEC6E9CE1D38B0.roa
File:                     69AE82D685FC11F1A8FEC6E9CE1D38B0.roa (raw, json)
Hash identifier:          Mpl5bmyl0i4E6rkh4RZcgJVTwNEG7HyUiu/tcY8O/BI=
Subject key identifier:   99:98:26:68:CF:2C:9A:32:B8:86:05:59:9A:ED:9B:C9:EE:FE:B7:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C793
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69AE82D685FC11F1A8FEC6E9CE1D38B0.roa
Signing time:             Wed 22 Jul 2026 18:37:38 +0000
ROA not before:           Wed 22 Jul 2026 18:37:34 +0000
ROA not after:            Wed 09 Sep 2026 18:37:34 +0000
asID:                     2914
IP address blocks:        45.192.232.0/24 maxlen: 24
                          45.192.244.0/24 maxlen: 24
                          45.201.12.0/22 maxlen: 24
                          45.202.74.0/24 maxlen: 24
                          45.204.149.0/24 maxlen: 24
                          45.204.150.0/24 maxlen: 24
                          45.204.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116627 (0x1c793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 18:37:34 2026 GMT
            Not After : Sep  9 18:37:34 2026 GMT
        Subject: CN=6a610df2-90b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:78:74:bc:75:02:64:50:7b:31:c2:86:bc:
                    73:02:05:d2:4b:dc:35:72:a9:73:25:52:ba:95:49:
                    de:dd:d0:4a:61:3c:a6:60:5c:38:0c:fe:e1:a2:b9:
                    75:76:d7:46:c1:ac:92:0b:5f:cb:0b:48:74:55:29:
                    eb:4f:f3:5e:ce:97:58:93:c7:3d:af:74:ce:33:4a:
                    98:e1:8d:c3:af:03:52:37:a9:df:bd:67:95:25:86:
                    0d:e3:54:82:1f:44:2d:e6:a1:22:3a:78:be:b5:c4:
                    19:30:b9:b2:21:b6:47:48:dd:c2:91:38:d1:10:90:
                    24:31:a8:be:31:44:24:ed:00:74:b5:f7:69:f8:c8:
                    ec:50:6a:fd:3c:20:09:cc:a3:e3:06:73:ab:68:9d:
                    c1:3e:8c:90:0c:db:2b:e8:06:ee:b0:fc:89:48:b2:
                    9a:08:18:99:d2:4b:63:ec:5f:69:30:89:57:6f:68:
                    65:64:7d:a4:6a:b3:e2:90:f3:24:57:39:a3:f5:0c:
                    ec:42:88:0a:48:fc:db:6e:90:42:9c:e8:e9:08:b2:
                    22:e8:df:98:2c:a9:26:31:cb:c4:f5:b9:69:75:0b:
                    94:98:9f:e5:ac:83:64:35:71:31:3e:32:3b:80:29:
                    87:2b:5d:69:bb:97:9c:af:8b:98:76:35:f1:38:06:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:98:26:68:CF:2C:9A:32:B8:86:05:59:9A:ED:9B:C9:EE:FE:B7:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69AE82D685FC11F1A8FEC6E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.232.0/24
                  45.192.244.0/24
                  45.201.12.0/22
                  45.202.74.0/24
                  45.204.149.0-45.204.151.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:2b:42:5b:45:26:8a:f1:21:3c:3c:48:2d:57:e8:eb:5d:42:
         ed:fc:40:f4:25:fa:77:21:a5:a1:04:90:12:8c:c3:31:a6:e9:
         0a:bf:90:2f:ba:0d:74:4d:eb:f3:a4:73:2b:9b:c3:2b:dc:ec:
         b8:7c:38:a6:12:a0:fc:ec:e4:60:11:32:95:42:31:ee:66:55:
         d7:be:6a:ef:0f:d3:fd:b8:3c:0a:e4:06:65:4d:0a:2c:7a:c9:
         33:40:74:d0:90:15:f3:64:22:6e:3c:31:21:fd:b5:70:20:89:
         e3:ff:47:b7:64:99:ea:c9:b3:32:b5:21:cd:35:7c:d1:ac:96:
         3d:5d:e2:3e:2b:f2:78:b0:a4:55:f1:0c:9c:3a:87:a1:83:fa:
         72:bc:d3:47:42:f9:9f:ff:9f:f8:c0:50:c0:b9:47:80:08:01:
         3b:f0:ad:8b:89:9c:56:d1:2f:9f:cf:e7:52:32:b7:48:c7:c9:
         ad:29:6c:e7:ec:fe:12:0b:c3:ec:b2:0d:6a:4b:a3:fd:05:e0:
         6b:97:0e:8e:37:0f:f1:a0:c2:c9:02:0b:ce:8f:2c:ee:f8:3b:
         cf:48:81:00:50:3d:1a:68:7b:26:f3:ef:7b:25:1f:52:ec:62:
         e4:8f:c7:8d:1c:cf:cb:9f:88:29:9f:83:0e:91:16:f8:28:a2:
         39:37:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:29 2026 by rpki-client