Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F88E15E253C11F18090B1DDDAE4EC9C.roa
File:                     6F88E15E253C11F18090B1DDDAE4EC9C.roa (raw, json)
Hash identifier:          W2cwTHPvcAenCXd+/S5Q4hwAKki2uHy7spox4/mR1d8=
Subject key identifier:   57:61:49:AE:14:69:C6:B7:AC:74:58:49:8A:B8:18:5F:CE:09:8D:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A680
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F88E15E253C11F18090B1DDDAE4EC9C.roa
Signing time:             Sat 21 Mar 2026 15:41:33 +0000
ROA not before:           Sat 21 Mar 2026 15:41:28 +0000
ROA not after:            Tue 28 Apr 2026 15:41:28 +0000
asID:                     202656
IP address blocks:        45.192.50.0/24 maxlen: 24
                          45.192.51.0/24 maxlen: 24
                          45.192.54.0/24 maxlen: 24
                          45.192.55.0/24 maxlen: 24
                          45.192.56.0/24 maxlen: 24
                          45.192.57.0/24 maxlen: 24
                          45.192.58.0/24 maxlen: 24
                          45.192.60.0/24 maxlen: 24
                          45.192.61.0/24 maxlen: 24
                          45.199.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108160 (0x1a680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 21 15:41:28 2026 GMT
            Not After : Apr 28 15:41:28 2026 GMT
        Subject: CN=69bebc2d-6960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:8e:1c:66:f6:43:14:1d:6a:ae:05:99:18:
                    62:bf:1b:86:1f:34:9e:c4:c1:1e:a6:13:ac:ac:19:
                    f8:d2:79:20:ec:1a:eb:10:58:ae:86:64:a9:fb:45:
                    77:7d:f2:58:3e:a0:fb:c5:21:bc:d6:f6:32:d4:fd:
                    ff:3f:41:b9:fa:a4:72:da:5b:ea:3e:94:66:b3:17:
                    2d:3c:8c:9e:e8:52:5a:6e:89:04:ac:62:54:1d:59:
                    ca:4a:97:e4:35:05:51:cc:be:01:65:dd:73:53:0a:
                    11:2f:93:4f:12:40:a2:6a:d6:e1:44:de:05:fa:77:
                    88:cf:b4:7f:59:39:e4:d5:4b:4e:ad:a8:06:36:62:
                    e9:5c:8a:75:da:7e:8a:22:83:fb:77:eb:9d:df:9c:
                    53:97:d5:61:5f:d7:b6:85:a5:04:cf:37:9f:e3:58:
                    33:0c:08:0a:25:2f:b3:ab:6b:32:24:34:26:79:8a:
                    c5:d3:2a:f0:c2:ad:0a:64:44:70:00:7c:93:f3:c6:
                    3a:f2:49:d5:df:37:fc:0a:76:fa:f2:66:83:3e:83:
                    9f:6d:00:f2:bb:ad:ad:70:3f:69:55:51:7c:0c:2a:
                    c8:46:c2:35:d5:7c:87:4a:88:20:fe:2d:84:97:8a:
                    e4:c0:03:7f:13:b2:c7:bc:90:d0:0c:55:17:a5:29:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:49:AE:14:69:C6:B7:AC:74:58:49:8A:B8:18:5F:CE:09:8D:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F88E15E253C11F18090B1DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.50.0/23
                  45.192.54.0-45.192.58.255
                  45.192.60.0/23
                  45.199.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:0e:dc:4f:bd:a4:60:c1:10:1d:00:48:ab:c8:ae:84:e7:
         9b:18:65:a5:7e:8e:10:56:1a:35:31:11:07:b9:39:04:66:2d:
         85:a7:20:67:c5:2e:6f:97:7b:2f:58:00:4e:d1:d3:07:2d:98:
         dd:0a:db:b2:e4:d2:7e:0f:01:52:3b:b3:35:c1:d0:23:e2:5e:
         e5:b5:3b:32:2b:5e:fd:a3:69:92:83:48:86:5e:39:a5:ae:12:
         a2:aa:49:6e:76:e5:b1:db:d3:82:58:d6:ef:4d:43:2e:b6:36:
         3c:ca:cc:0e:2e:46:03:ce:76:cc:b5:35:3b:cb:89:d3:8b:64:
         51:f9:34:08:69:89:c2:af:9b:84:7f:68:f6:df:bb:49:f6:ca:
         01:2e:cc:06:d3:cd:10:ad:4f:ac:4f:39:f1:d4:6b:de:74:a2:
         14:c6:07:e7:0a:f7:ca:17:f5:e3:6c:d0:56:a8:06:13:b1:7e:
         bc:e0:91:60:8a:08:78:27:8e:6c:14:32:2b:d9:cc:f3:16:f1:
         87:5a:b7:5e:a5:7b:d3:55:06:17:ba:f5:98:a8:ea:6f:50:ff:
         0e:50:5c:76:2f:2f:3c:0a:15:80:1a:cb:33:27:71:e4:d2:cc:
         ad:50:b5:1d:3b:e3:83:6c:bb:47:29:c5:ad:9b:f4:19:39:2a:
         a3:06:69:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:33 2026 by rpki-client