Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76103714282C11F19536D68BDAE4EC9C.roa
File:                     76103714282C11F19536D68BDAE4EC9C.roa (raw, json)
Hash identifier:          tho8TfZFXgMeR/EhX2UWhQUPg6GqPv6JHn4M8XW7OGk=
Subject key identifier:   1C:44:63:06:92:EB:A6:81:C3:31:5C:3D:87:9B:31:00:F5:3D:26:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A755
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76103714282C11F19536D68BDAE4EC9C.roa
Signing time:             Wed 25 Mar 2026 09:24:46 +0000
ROA not before:           Wed 25 Mar 2026 09:24:40 +0000
ROA not after:            Tue 04 May 2027 09:24:40 +0000
asID:                     13335
IP address blocks:        45.194.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108373 (0x1a755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 25 09:24:40 2026 GMT
            Not After : May  4 09:24:40 2027 GMT
        Subject: CN=69c3a9dd-dbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:a4:e8:48:dc:36:bd:5a:ff:b4:48:e5:b7:
                    58:d8:9a:be:3b:9b:ba:bf:2a:08:ec:21:53:aa:04:
                    19:6c:fa:c4:ec:8e:48:a0:48:a4:2b:1c:2e:bb:40:
                    ba:e5:c3:53:f9:63:03:cf:ac:18:58:8d:35:73:6f:
                    d3:8b:a1:ed:7d:a4:07:77:7b:12:1d:c2:14:6b:0d:
                    9f:c5:f0:66:69:d3:3c:be:64:db:ea:3f:02:2e:ce:
                    1c:4e:83:aa:6c:fd:c7:13:db:b6:b1:21:ee:f1:9c:
                    6e:07:76:e8:08:76:55:33:5d:44:ed:43:c3:30:19:
                    ff:e9:a6:b5:27:4a:0d:b1:a2:aa:88:d4:eb:59:1d:
                    3b:5d:28:18:ef:ea:30:39:cd:7e:d6:30:60:cc:5d:
                    6e:e2:23:9c:24:69:42:37:18:b4:44:95:c1:c9:33:
                    49:4e:a7:f1:72:c9:a1:25:7a:1f:84:5b:d6:f0:d1:
                    b4:16:3b:bc:69:c3:d1:85:27:56:0d:69:1f:78:bb:
                    df:48:2e:c1:a7:26:96:37:cc:0b:ed:d6:fc:e0:c0:
                    63:8f:24:43:62:87:00:2b:31:db:62:12:af:75:ef:
                    69:51:ae:76:23:9c:5d:a7:dc:d9:a6:76:6d:11:8b:
                    14:f7:fa:0b:e1:8d:e4:25:35:9b:e9:2b:7b:b2:51:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:44:63:06:92:EB:A6:81:C3:31:5C:3D:87:9B:31:00:F5:3D:26:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76103714282C11F19536D68BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:ec:b9:c8:ba:09:ea:7e:9b:2d:f6:8d:0f:53:32:f0:b2:
         75:44:ef:f8:27:a3:28:42:ca:0e:f8:93:a8:fd:04:0b:45:0f:
         f6:62:c8:f3:0d:a2:34:eb:40:c8:f0:74:7d:06:96:fe:d2:2e:
         43:b0:97:70:d3:88:6c:6e:a8:92:ba:95:00:6d:9a:19:57:a2:
         55:e9:3d:77:81:07:3e:af:c5:90:f6:fa:e1:16:36:f1:6f:7f:
         fd:a5:43:ae:67:28:10:b4:27:de:35:bf:00:3a:a2:20:cc:a7:
         ce:fe:6c:31:65:13:b9:88:d9:96:23:f3:f1:0c:1b:2f:f8:76:
         3c:a4:cd:a3:83:fc:52:88:fe:c7:7a:47:91:66:94:ec:f1:f7:
         cd:56:bd:c1:8e:5b:76:5d:5e:b5:c2:8b:ea:c5:5f:c9:dd:ea:
         22:e6:1a:af:ee:da:fc:32:16:11:92:f7:2f:68:6a:f3:68:85:
         69:77:64:aa:a2:95:6b:1d:3f:a9:d0:9f:85:7c:ae:c7:b8:0e:
         b5:4b:f3:07:69:66:da:7d:dc:ca:08:56:32:ec:4b:3b:50:ef:
         18:22:cb:64:52:ff:71:8d:57:b8:a1:89:16:fe:d8:91:00:35:
         d0:21:c1:98:e0:b4:4f:f7:cc:32:7a:c2:ba:24:b0:40:d2:da:
         f3:f5:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:12 2026 by rpki-client