Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6D990E860211F18638650FCF1D38B0.roa
File:                     8D6D990E860211F18638650FCF1D38B0.roa (raw, json)
Hash identifier:          o26DG4VtY/VIAGI1RpZMuuwYMr6vM723maCgO32Byec=
Subject key identifier:   CA:D7:39:62:3E:89:7B:26:FD:F4:06:B7:3E:E0:BF:AE:80:DD:F8:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6D990E860211F18638650FCF1D38B0.roa
Signing time:             Wed 22 Jul 2026 19:21:35 +0000
ROA not before:           Wed 22 Jul 2026 19:21:31 +0000
ROA not after:            Thu 27 Aug 2026 19:21:31 +0000
asID:                     212238
IP address blocks:        45.195.150.0/24 maxlen: 24
                          45.196.160.0/24 maxlen: 24
                          45.196.163.0/24 maxlen: 24
                          45.196.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116633 (0x1c799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 19:21:31 2026 GMT
            Not After : Aug 27 19:21:31 2026 GMT
        Subject: CN=6a61183f-3af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:70:5d:11:37:b3:31:35:95:12:c4:fd:6b:
                    ff:8b:2b:4b:e6:0d:b8:f9:d2:13:db:35:80:28:b7:
                    6a:28:f8:d4:0c:6d:86:84:9a:85:3f:11:3a:c9:f2:
                    1c:91:36:62:02:16:fe:6e:8a:e4:40:c0:a1:2f:c3:
                    70:1d:83:8b:1b:ca:35:b8:9e:e6:b4:b7:0d:c4:0d:
                    ae:8e:58:6a:d1:30:df:b1:df:55:d4:5d:57:d4:ad:
                    88:d7:3d:fd:ad:42:b1:fa:71:d7:14:8d:14:bb:e7:
                    7b:14:36:7b:4b:f6:e3:d7:63:06:de:1c:c0:f7:b9:
                    12:dc:f1:5f:7a:ed:d6:28:a1:6f:65:ed:3f:2e:b0:
                    5e:e5:b5:9f:f8:87:8c:22:86:fb:7f:f0:c9:0e:7f:
                    c3:25:1b:9b:15:14:e4:ff:13:14:96:0a:b3:b6:b8:
                    6d:33:11:a6:dc:51:fd:ea:d9:cf:a5:b7:7b:de:0b:
                    37:73:c5:20:d2:e5:62:a5:9d:f2:57:fb:a1:ed:ad:
                    34:bc:0f:7a:25:3e:63:77:73:3b:3a:52:fa:df:72:
                    20:a6:e9:0c:04:cd:17:23:dd:bc:6d:66:70:0b:ee:
                    46:07:70:c3:ec:c9:6d:4c:18:d7:55:d8:ca:7f:be:
                    f5:1e:74:16:76:4d:df:8d:3a:a2:a3:82:2c:80:c1:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:39:62:3E:89:7B:26:FD:F4:06:B7:3E:E0:BF:AE:80:DD:F8:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6D990E860211F18638650FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.150.0/24
                  45.196.160.0/24
                  45.196.163.0/24
                  45.196.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:51:e4:ed:18:a3:85:ec:74:af:6f:f0:fd:ee:ba:61:c1:8e:
         59:9a:59:11:01:42:68:d8:9d:70:3f:7d:85:98:62:38:f0:37:
         7c:d9:8b:af:3e:37:ae:42:17:0b:ec:d6:14:fd:9d:e2:9a:36:
         42:a1:2b:9c:dd:05:be:8f:e6:fe:41:f5:3c:f9:8c:0a:21:2f:
         83:57:4f:55:a1:82:15:26:1c:6f:d9:65:5f:38:06:3a:82:4a:
         7f:0d:2b:34:9b:00:6c:2b:db:3d:83:33:8d:f3:36:2d:54:38:
         83:12:1a:51:bd:06:2c:25:62:17:de:c7:45:ad:f1:83:a2:a5:
         4a:1a:6a:3d:a1:77:96:2b:3f:37:14:e4:a5:c5:2b:2d:ee:d4:
         73:0a:99:74:9f:7e:b1:62:88:2f:3d:af:d1:55:46:ee:e7:cf:
         2b:80:66:e4:b1:57:94:9c:03:76:fe:66:34:65:f6:ac:8e:c6:
         9c:c2:49:56:e5:ce:b0:88:14:0d:bc:cd:ed:aa:c6:31:7a:7c:
         16:35:31:02:bf:04:3e:ea:d7:b5:d7:f1:ea:a4:5a:1e:ac:64:
         8a:48:c9:d5:8f:f9:5b:db:3d:2e:0c:4c:90:35:b1:79:36:d4:
         78:3f:44:07:f2:dd:6a:3f:0c:99:a7:46:eb:9f:b0:8e:18:91:
         d1:14:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:49:05 2026 by rpki-client