Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2C40147E6311F0B8491EBDDAE4EC9C.roa
File:                     6A2C40147E6311F0B8491EBDDAE4EC9C.roa (raw, json)
Hash identifier:          wG/1P7HFUzcUF8HN1QjWoOk1DuufT8NNywg5YQRjYo0=
Subject key identifier:   EA:93:0D:49:BD:DE:65:02:DE:CF:0D:22:9B:BB:03:A3:A3:B2:52:1B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016DB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2C40147E6311F0B8491EBDDAE4EC9C.roa
Signing time:             Thu 21 Aug 2025 07:49:50 +0000
ROA not before:           Thu 21 Aug 2025 07:49:45 +0000
ROA not after:            Sat 01 Nov 2025 07:49:45 +0000
asID:                     149014
IP address blocks:        45.192.162.0/24 maxlen: 24
                          45.192.172.0/24 maxlen: 24
                          45.192.173.0/24 maxlen: 24
                          45.192.174.0/24 maxlen: 24
                          45.192.182.0/24 maxlen: 24
                          45.192.183.0/24 maxlen: 24
                          45.192.184.0/24 maxlen: 24
                          45.192.186.0/24 maxlen: 24
                          45.192.187.0/24 maxlen: 24
                          45.192.188.0/24 maxlen: 24
                          45.192.189.0/24 maxlen: 24
                          45.192.190.0/24 maxlen: 24
                          45.192.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93623 (0x16db7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 07:49:45 2025 GMT
            Not After : Nov  1 07:49:45 2025 GMT
        Subject: CN=68a6cf9e-a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:4b:8c:f9:87:b6:f9:6d:7f:d8:4f:65:63:
                    b0:16:b8:7b:01:69:82:b9:b1:f5:2a:61:14:c4:15:
                    f6:ed:3c:97:f6:17:ae:64:b5:cd:b4:02:0f:89:02:
                    2f:ab:18:05:aa:f8:e2:c2:8f:da:3e:94:34:07:a6:
                    78:9f:62:27:a8:e9:16:05:88:b1:21:5b:f5:8f:0c:
                    76:c7:42:39:cc:7a:1e:0f:b5:8f:90:ca:2b:ec:e2:
                    fc:e5:27:99:65:1c:34:ee:34:a0:d7:9a:83:70:e9:
                    bc:62:0b:50:0e:65:a1:c9:1e:39:64:0f:65:41:81:
                    e5:4c:dd:99:dd:d4:ea:bf:77:d3:c0:a5:d0:7f:87:
                    94:3c:15:54:25:45:3e:e8:00:19:49:06:14:c3:3a:
                    33:fb:c7:b5:65:5b:7f:98:d4:49:9b:cd:89:0d:45:
                    e7:eb:09:57:7f:14:d3:7b:fd:ad:21:22:21:4b:de:
                    9b:12:97:c1:30:0b:0c:89:1c:89:bc:8d:56:8a:64:
                    0b:3c:1c:b5:40:d1:bd:a5:d6:11:7d:ec:01:9b:0b:
                    51:6c:18:69:62:f6:7b:1f:44:ae:44:bf:61:5f:9e:
                    46:5f:f6:4e:d0:7a:91:a1:88:e2:33:f8:36:59:10:
                    38:ff:7c:e9:ce:30:69:bb:97:35:83:d4:55:dc:c9:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:0D:49:BD:DE:65:02:DE:CF:0D:22:9B:BB:03:A3:A3:B2:52:1B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2C40147E6311F0B8491EBDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.162.0/24
                  45.192.172.0-45.192.174.255
                  45.192.182.0-45.192.184.255
                  45.192.186.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:58:db:05:9f:0a:9f:e4:fa:4e:35:46:08:bf:56:ad:28:
         61:fc:f5:c1:a7:e0:c9:fc:02:c4:5a:fa:95:2d:f7:bf:bd:44:
         08:e0:08:51:a2:58:25:c8:b8:f1:ad:4b:4f:c4:62:22:00:41:
         6c:c3:2d:89:b7:66:ef:42:a5:57:71:f7:63:83:55:98:89:02:
         8a:c9:3f:27:b4:3c:7e:48:b7:2e:9b:b4:1f:03:20:f5:42:54:
         45:6b:4f:af:07:14:72:0c:84:9d:d0:f2:0b:4b:0e:fc:89:ca:
         e7:61:76:53:6c:0b:63:a6:75:1d:6e:55:df:f9:f7:5f:9c:93:
         75:be:6a:7c:12:28:8a:01:ff:d0:7d:33:89:f2:98:bc:78:32:
         c8:bd:7f:62:63:f8:24:a3:05:ff:e0:bb:96:b5:22:0a:5e:ed:
         13:41:1d:e9:07:53:bd:51:1b:3b:0c:26:da:d6:e9:2d:c0:e4:
         15:75:de:84:4d:20:b1:0a:d8:8d:14:ff:0b:02:59:50:aa:34:
         fa:d4:04:4f:1c:06:4d:d5:24:4e:7c:c3:7e:7c:a3:7b:19:3c:
         66:c3:29:39:a5:1e:3a:b7:b3:dd:8c:36:e7:f2:69:ee:1a:e9:
         e6:4e:d4:34:1b:68:9b:d1:bd:8a:b9:e8:46:27:6e:1f:7b:4c:
         7e:dc:db:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:21:10 2025 by rpki-client