Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D06CF8085FE11F1B63EF6F5CE1D38B0.roa
File:                     7D06CF8085FE11F1B63EF6F5CE1D38B0.roa (raw, json)
Hash identifier:          wJs1PriGzCIuxhcDO6NxFpM/1vlE2QG45ozthcZQSjA=
Subject key identifier:   4C:A2:9A:B6:C4:CB:D0:CE:7E:EE:AC:9D:31:12:7B:AE:98:9E:C9:A6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D06CF8085FE11F1B63EF6F5CE1D38B0.roa
Signing time:             Wed 22 Jul 2026 18:52:29 +0000
ROA not before:           Wed 22 Jul 2026 18:52:25 +0000
ROA not after:            Thu 27 Aug 2026 18:52:25 +0000
asID:                     134824
IP address blocks:        45.194.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116631 (0x1c797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 18:52:25 2026 GMT
            Not After : Aug 27 18:52:25 2026 GMT
        Subject: CN=6a61116d-3103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:dd:db:a8:2d:e7:e3:23:17:55:9b:68:45:
                    83:e6:97:30:c8:96:69:ca:64:d1:aa:51:8e:98:22:
                    f5:1d:c5:a5:4d:ef:a9:bf:23:27:62:c8:34:e2:b7:
                    75:94:d6:a3:2e:85:a2:2b:7e:cd:81:8b:ee:31:72:
                    56:f1:ed:21:95:76:e8:c4:c9:ba:80:d7:c5:7b:8f:
                    d2:42:08:3a:2c:e0:d2:f9:78:30:ac:bb:ca:50:e1:
                    4a:78:c0:03:ed:76:e5:2f:cc:d2:45:e0:8d:e2:c5:
                    a9:6d:4d:71:d1:76:5c:af:1f:14:11:54:2f:00:75:
                    00:53:19:64:e3:8d:c8:51:43:d1:c9:bc:12:cf:8c:
                    f1:1b:c7:5d:07:a0:4e:de:73:67:7e:bc:0a:d4:2f:
                    21:ab:32:bd:d5:e6:98:54:a4:f3:5e:f1:c8:47:8a:
                    1e:e8:3b:64:66:ef:e8:86:ee:ff:93:5a:de:b4:cc:
                    a2:2a:b0:23:f9:68:1f:3c:9c:ac:cc:8d:e6:2d:05:
                    a6:71:e6:ff:1c:71:83:c6:4a:3a:46:39:4b:6a:bd:
                    91:3e:6d:ae:be:36:d0:63:29:04:28:38:4f:10:a9:
                    c4:67:d8:f4:f7:4f:b6:d2:25:d9:8a:b1:6e:8c:6e:
                    00:90:99:e1:a1:90:bd:10:4b:76:0c:b8:e8:47:c4:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:9A:B6:C4:CB:D0:CE:7E:EE:AC:9D:31:12:7B:AE:98:9E:C9:A6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D06CF8085FE11F1B63EF6F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:8b:07:ad:63:7f:e2:38:55:4d:f9:7e:6b:7d:b6:e4:7a:
         a8:4b:ff:c3:0f:51:8d:41:2f:1a:cb:06:1a:8e:fc:6f:87:92:
         c9:bf:ee:5a:c9:57:b8:63:12:9d:52:14:a4:04:b1:c7:43:cc:
         d3:a8:d6:ed:3c:0d:12:7a:e4:8f:60:f0:e8:8b:68:68:34:28:
         20:62:b0:be:ee:fc:9b:62:2f:04:c8:bc:e2:26:bb:4b:d8:bf:
         cd:84:ac:89:2d:94:01:18:26:97:f7:88:4a:b5:00:59:14:fe:
         d6:51:e2:60:d5:3c:3d:de:11:5e:b3:fa:d6:b4:1f:45:d5:91:
         04:ec:1d:f7:c4:3f:d6:72:05:90:98:5f:27:80:95:86:0e:31:
         0a:5b:33:53:da:fa:9a:32:e1:23:3c:b2:25:cd:df:04:b4:2b:
         1a:a2:6b:79:7c:0a:57:19:e8:ed:e7:4a:d0:b3:8f:28:d1:6f:
         85:33:da:8f:e4:37:63:f9:63:fa:93:ed:ba:7a:f1:47:e2:17:
         4b:f5:fa:34:6a:19:27:13:72:e4:b0:eb:9a:9d:a9:d1:ec:39:
         bc:73:63:4b:d8:ed:24:fd:16:9d:b8:f8:5a:f3:34:35:55:3a:
         2e:3e:0d:6f:19:b0:a5:9b:5f:9b:67:ba:e2:41:a2:38:31:5b:
         91:62:6d:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAceXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTg1MjI1WhcNMjYwODI3MTg1MjI1WjAYMRYw
FAYDVQQDEw02YTYxMTE2ZC0zMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzvd26gt5+MjF1WbaEWD5pcwyJZpymTRqlGOmCL1HcWlTe+pvyMnYsg0
4rd1lNajLoWiK37NgYvuMXJW8e0hlXboxMm6gNfFe4/SQgg6LODS+XgwrLvKUOFK
eMAD7XblL8zSReCN4sWpbU1x0XZcrx8UEVQvAHUAUxlk443IUUPRybwSz4zxG8dd
B6BO3nNnfrwK1C8hqzK91eaYVKTzXvHIR4oe6DtkZu/ohu7/k1retMyiKrAj+Wgf
PJyszI3mLQWmceb/HHGDxko6RjlLar2RPm2uvjbQYykEKDhPEKnEZ9j090+20iXZ
irFujG4AkJnhoZC9EEt2DLjoR8TzvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEyi
mrbEy9DOfu6snTESe66YnsmmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDA2Q0Y4MDg1RkUxMUYxQjYzRUY2RjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJdMA0GCSqGSIb3DQEBCwUA
A4IBAQClqIsHrWN/4jhVTfl+a3225HqoS//DD1GNQS8aywYajvxvh5LJv+5ayVe4
YxKdUhSkBLHHQ8zTqNbtPA0SeuSPYPDoi2hoNCggYrC+7vybYi8EyLziJrtL2L/N
hKyJLZQBGCaX94hKtQBZFP7WUeJg1Tw93hFes/rWtB9F1ZEE7B33xD/WcgWQmF8n
gJWGDjEKWzNT2vqaMuEjPLIlzd8EtCsaomt5fApXGejt50rQs48o0W+FM9qP5Ddj
+WP6k+26evFH4hdL9fo0ahknE3LksOuananR7Dm8c2NL2O0k/RaduPha8zQ1VTou
Pg1vGbClm1+bZ7riQaI4MVuRYm00
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:37 2026 by rpki-client