Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9825FE6484DA11F181EB710ECF1D38B0.roa
File:                     9825FE6484DA11F181EB710ECF1D38B0.roa (raw, json)
Hash identifier:          fBCC3y8ulK7CziTOoLROLBWe7ed7zmHJm3XZowyVOIc=
Subject key identifier:   26:2C:6D:4E:4B:8A:87:6A:E4:49:B6:14:19:3C:33:8A:B4:9D:AD:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C69C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9825FE6484DA11F181EB710ECF1D38B0.roa
Signing time:             Tue 21 Jul 2026 08:03:02 +0000
ROA not before:           Tue 21 Jul 2026 08:02:58 +0000
ROA not after:            Thu 27 Aug 2026 08:02:58 +0000
asID:                     25198
IP address blocks:        45.196.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116380 (0x1c69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 08:02:58 2026 GMT
            Not After : Aug 27 08:02:58 2026 GMT
        Subject: CN=6a5f27b6-c10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:b9:08:0e:d4:09:64:2a:56:36:57:f0:35:
                    fa:40:de:75:58:74:92:d4:83:a9:d1:8e:fd:34:03:
                    84:63:8e:52:a7:97:8b:b4:6f:b0:ce:dd:93:00:32:
                    9d:22:35:6e:42:91:6e:10:08:76:ff:3f:81:02:23:
                    38:e7:9e:e1:08:de:fa:60:b6:76:95:1c:ed:2c:3e:
                    48:9b:6f:39:63:8e:3c:6b:03:16:56:c1:86:97:d9:
                    ef:b6:fa:e4:ce:63:59:51:f8:28:a4:06:51:bd:b3:
                    f1:b7:26:05:58:10:ad:c7:12:d7:5a:d9:b0:14:b8:
                    42:cf:73:db:19:aa:97:53:13:4f:fa:06:26:1f:d1:
                    82:e6:a1:6d:ca:21:5e:da:7c:5d:0e:57:aa:1f:24:
                    f4:de:77:d0:d5:f4:44:ff:cf:d8:79:ae:e8:a4:aa:
                    dd:4f:da:e1:1b:15:cf:8e:f9:4d:75:0f:1a:c4:73:
                    9e:8e:d3:90:61:99:f0:3d:b5:c6:12:6a:9e:89:f0:
                    8f:e2:ae:df:1f:02:77:81:a8:02:5c:58:98:0a:8a:
                    b6:8c:af:9e:67:8e:82:ac:82:0c:09:a3:b9:a9:b4:
                    53:cd:d5:4e:4f:ee:85:58:a5:23:06:32:22:18:36:
                    b1:3f:28:a5:cf:c2:9c:18:db:d8:09:f7:5f:9d:a6:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2C:6D:4E:4B:8A:87:6A:E4:49:B6:14:19:3C:33:8A:B4:9D:AD:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9825FE6484DA11F181EB710ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:30:b9:9f:98:32:97:23:13:b0:ed:0c:36:97:a8:d3:24:bd:
         50:63:0c:c3:45:e6:b4:5a:e4:32:0e:67:86:66:06:4d:54:08:
         ee:5a:50:23:67:f1:5b:49:20:62:b8:40:12:ce:21:5b:16:bc:
         90:1c:a0:23:4d:44:81:e7:0e:7b:62:6a:78:7b:28:84:1b:1f:
         67:b2:53:ee:b2:85:0e:27:6e:5e:60:fe:a7:55:a4:35:90:94:
         96:2e:2a:55:cd:e4:0d:c0:2a:88:99:38:48:bf:26:12:01:76:
         01:08:fd:da:5a:1f:55:41:1c:a7:e6:1e:95:98:63:4d:da:19:
         79:0f:21:da:70:43:b9:0b:f6:3d:19:2d:5b:03:40:6d:c3:a1:
         da:9b:ad:76:df:f3:d4:8c:98:54:24:68:64:9f:71:3e:ba:cb:
         8b:47:87:d4:79:e2:e9:10:3d:0f:0b:1b:7e:76:eb:78:b0:ff:
         38:47:85:88:d2:f0:c2:f2:b7:9d:a8:9e:57:7f:86:c8:d4:01:
         a8:ba:a7:6a:76:27:34:60:cc:36:f7:9b:90:07:4d:d0:e2:73:
         2a:13:6a:6b:0b:2b:5e:5c:f6:5c:d3:52:51:23:c9:3d:63:65:
         62:3b:82:36:de:a9:6c:36:0d:1e:8d:37:39:7b:58:32:19:31:
         b9:17:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:17 2026 by rpki-client