Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F8B9CE47A811F1BA2FB419CF1D38B0.roa
File:                     78F8B9CE47A811F1BA2FB419CF1D38B0.roa (raw, json)
Hash identifier:          xKvk1A4eQvr358vAIP57ee14kL5kACQCaMv7Aw0FjIY=
Subject key identifier:   2A:40:F0:5D:0E:00:B2:A2:55:D8:08:38:4D:C9:21:87:F3:B8:7A:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B173
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F8B9CE47A811F1BA2FB419CF1D38B0.roa
Signing time:             Mon 04 May 2026 11:00:34 +0000
ROA not before:           Mon 04 May 2026 11:00:29 +0000
ROA not after:            Wed 03 Jun 2026 11:00:29 +0000
asID:                     206938
IP address blocks:        45.196.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110963 (0x1b173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  4 11:00:29 2026 GMT
            Not After : Jun  3 11:00:29 2026 GMT
        Subject: CN=69f87c52-486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:cb:42:9c:a6:4a:a2:7b:39:0b:55:78:91:
                    a6:e5:57:37:b9:79:12:ba:9f:2e:00:bc:d7:e1:e0:
                    30:0e:67:6b:a3:3d:cc:6f:ab:ea:f6:f7:b3:64:a3:
                    db:5b:14:dd:a1:7b:93:52:6e:f7:28:39:a8:f2:ea:
                    e0:62:87:94:90:09:cc:d7:70:a8:ab:65:b3:26:dd:
                    ec:5d:e4:de:ec:de:35:40:17:1e:a1:b4:7c:ea:fd:
                    7f:02:46:90:6c:09:10:35:d8:c0:46:a6:1a:87:1e:
                    a9:5e:e9:65:75:f1:d5:8b:ec:01:51:fe:20:97:d8:
                    7e:8f:01:9d:8d:50:d5:08:f2:2d:19:d2:88:d3:6c:
                    f9:07:34:8c:d7:2f:01:f9:51:0c:50:d3:80:a9:14:
                    dd:46:e4:77:e6:d5:14:85:62:13:d2:a3:e0:93:39:
                    ce:b2:3f:e0:1d:2a:a5:30:28:88:24:1e:65:31:cf:
                    16:5a:38:46:e5:19:79:a8:58:7f:25:13:3b:23:91:
                    0e:ce:a7:2a:98:d6:d1:6a:50:02:f1:c4:5e:37:f0:
                    39:ed:f4:3c:2d:c9:5e:f9:56:a1:51:62:79:05:3f:
                    59:a3:23:04:80:1d:fa:24:de:0e:62:c6:bd:b6:31:
                    d9:c4:6f:88:72:ac:aa:60:d0:2d:f3:71:ae:82:2f:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:F0:5D:0E:00:B2:A2:55:D8:08:38:4D:C9:21:87:F3:B8:7A:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F8B9CE47A811F1BA2FB419CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:32:4a:6a:d0:95:91:7d:68:1c:1b:d5:80:c4:b4:af:fe:1e:
         2b:b2:7f:fd:21:5a:52:a7:42:40:60:db:50:77:c3:de:99:4f:
         48:e5:41:7b:c2:cb:bb:2c:ee:01:f2:78:f6:b4:ac:0e:26:dc:
         4e:7a:ca:60:01:6f:53:61:27:ef:36:59:3e:a3:37:76:67:b5:
         6b:8c:53:1f:ce:f5:e7:23:59:51:cf:cd:e6:40:d4:02:ee:39:
         6d:f4:26:db:ef:ed:03:59:c5:15:49:f2:de:0d:37:7f:a6:c0:
         99:37:1e:2e:a5:6d:05:b4:93:cc:74:46:3f:30:79:08:8b:7a:
         9e:9f:e4:ff:f3:bf:d7:82:35:60:3e:7b:ab:86:99:0b:8b:fb:
         2e:9a:de:91:c8:41:d8:8a:da:16:09:fa:eb:05:3c:1b:29:37:
         61:a7:55:5b:3b:84:fe:a5:bf:7c:13:59:31:01:d5:06:cf:c2:
         5e:4b:74:de:9c:60:7f:53:af:f1:43:c4:ab:61:27:3e:a2:d4:
         9f:34:17:9d:46:d2:35:2a:9e:af:ac:0c:8c:41:c0:d8:98:a9:
         46:d7:64:8a:75:47:a3:7d:b4:f1:eb:b4:09:23:12:31:93:86:
         ff:18:ef:f1:af:30:59:e8:fa:15:1b:ea:7d:2d:b2:34:f2:83:
         db:02:22:f1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbFzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA0MTEwMDI5WhcNMjYwNjAzMTEwMDI5WjAYMRYw
FAYDVQQDEw02OWY4N2M1Mi00ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApiTLQpymSqJ7OQtVeJGm5Vc3uXkSup8uALzX4eAwDmdroz3Mb6vq9vez
ZKPbWxTdoXuTUm73KDmo8urgYoeUkAnM13Coq2WzJt3sXeTe7N41QBceobR86v1/
AkaQbAkQNdjARqYahx6pXulldfHVi+wBUf4gl9h+jwGdjVDVCPItGdKI02z5BzSM
1y8B+VEMUNOAqRTdRuR35tUUhWIT0qPgkznOsj/gHSqlMCiIJB5lMc8WWjhG5Rl5
qFh/JRM7I5EOzqcqmNbRalAC8cReN/A57fQ8Lcle+VahUWJ5BT9ZoyMEgB36JN4O
Ysa9tjHZxG+IcqyqYNAt83Gugi+fHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCpA
8F0OALKiVdgIOE3JIYfzuHo4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OEY4QjlDRTQ3QTgxMUYxQkEyRkI0MTlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSEMA0GCSqGSIb3DQEBCwUA
A4IBAQAYMkpq0JWRfWgcG9WAxLSv/h4rsn/9IVpSp0JAYNtQd8PemU9I5UF7wsu7
LO4B8nj2tKwOJtxOespgAW9TYSfvNlk+ozd2Z7VrjFMfzvXnI1lRz83mQNQC7jlt
9Cbb7+0DWcUVSfLeDTd/psCZNx4upW0FtJPMdEY/MHkIi3qen+T/87/XgjVgPnur
hpkLi/sumt6RyEHYitoWCfrrBTwbKTdhp1VbO4T+pb98E1kxAdUGz8JeS3TenGB/
U6/xQ8SrYSc+otSfNBedRtI1Kp6vrAyMQcDYmKlG12SKdUejfbTx67QJIxIxk4b/
GO/xrzBZ6PoVG+p9LbI08oPbAiLx
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:52 2026 by rpki-client