Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8AEFC9684E311F1A03A5FC5CE1D38B0.roa
File:                     A8AEFC9684E311F1A03A5FC5CE1D38B0.roa (raw, json)
Hash identifier:          cezen5ws71l97Zbh0KgnebpBzEfX6RAPltMCtMb5dfE=
Subject key identifier:   A0:5B:7D:AE:01:01:E8:E4:55:C2:06:82:BB:17:B4:68:8F:D2:C6:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C6B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8AEFC9684E311F1A03A5FC5CE1D38B0.roa
Signing time:             Tue 21 Jul 2026 09:07:55 +0000
ROA not before:           Tue 21 Jul 2026 09:07:51 +0000
ROA not after:            Sat 29 Aug 2026 09:07:51 +0000
asID:                     202656
IP address blocks:        45.199.200.0/24 maxlen: 24
                          45.199.201.0/24 maxlen: 24
                          45.199.202.0/24 maxlen: 24
                          45.199.203.0/24 maxlen: 24
                          45.199.204.0/24 maxlen: 24
                          45.199.205.0/24 maxlen: 24
                          45.199.206.0/24 maxlen: 24
                          45.199.221.0/24 maxlen: 24
                          45.199.222.0/24 maxlen: 24
                          45.199.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116408 (0x1c6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 09:07:51 2026 GMT
            Not After : Aug 29 09:07:51 2026 GMT
        Subject: CN=6a5f36eb-4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:cb:16:20:e7:17:af:b7:c2:d1:fd:74:9d:
                    d2:be:91:db:03:1f:8c:0c:60:90:d5:39:e2:dd:db:
                    31:f9:ae:cd:2f:f0:01:65:59:30:2a:fa:48:70:4a:
                    f5:bc:5b:75:7e:4a:55:58:42:3c:e5:4f:cb:87:ce:
                    9b:07:23:cc:2d:23:d2:3e:6d:03:4c:c8:e2:04:fc:
                    8d:23:25:3e:bf:2b:a2:f0:bc:9a:7a:ea:c4:07:22:
                    2e:ed:fe:5c:9a:bb:2c:92:68:d8:09:06:9a:ab:12:
                    56:bf:83:66:fd:ed:cd:25:58:ae:31:2f:38:9e:25:
                    91:ea:7a:f9:4d:4f:d0:04:41:aa:56:5b:79:bb:5e:
                    d6:23:f4:cc:17:6a:b7:a0:04:c1:f2:ff:12:d8:86:
                    15:b4:20:1a:77:06:1d:55:7d:0c:65:0f:27:65:28:
                    15:f6:52:84:4e:0d:15:51:86:ba:42:02:59:73:40:
                    c7:08:1d:ae:9d:5d:3e:55:bf:c3:46:ad:01:0c:6e:
                    0d:47:bf:6c:92:cb:ca:28:f5:88:9b:59:2c:2b:c2:
                    ad:83:10:a9:79:c1:82:f4:44:b8:bb:89:f5:df:f9:
                    69:9a:ef:4b:76:1c:1d:80:58:b0:8f:ba:45:34:8d:
                    51:af:f0:73:36:80:c5:7f:bb:99:c9:c1:4b:fe:34:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5B:7D:AE:01:01:E8:E4:55:C2:06:82:BB:17:B4:68:8F:D2:C6:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8AEFC9684E311F1A03A5FC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.200.0-45.199.206.255
                  45.199.221.0-45.199.223.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:d2:5e:85:e2:ba:6c:01:1b:d1:40:c0:f2:61:b1:a7:1e:
         4e:d5:60:4b:04:97:04:52:76:89:09:b1:92:52:11:14:cd:36:
         d6:eb:07:c7:e5:03:c3:d3:8d:53:93:55:3a:ef:76:55:48:53:
         cb:36:43:bd:70:f6:c2:2b:0a:40:fb:c2:df:04:34:e5:9e:6a:
         fa:51:92:24:8a:fc:db:16:40:75:a4:1e:da:11:a4:68:24:1d:
         2d:c7:0b:cf:c2:b9:56:a4:b3:03:54:b3:01:82:fc:5f:11:c0:
         d1:d2:2e:10:1d:97:2d:5c:cf:d7:b1:40:b2:54:46:9c:9a:67:
         82:99:17:42:bb:28:1f:70:12:65:6b:6b:6b:f5:dd:dd:5d:4c:
         54:01:a2:bc:de:83:5f:bb:e1:33:1b:dc:d5:92:72:16:3c:e8:
         01:4f:8b:69:86:4c:36:29:7c:97:10:5b:6b:3a:c6:03:88:0e:
         2a:0a:b3:4c:36:54:61:ac:c3:93:55:e9:5d:ff:25:34:59:bf:
         ee:82:37:70:e1:0a:83:d2:93:0b:28:2f:9b:aa:1f:a0:d8:2a:
         36:01:e6:14:da:8e:5a:89:e6:b4:f2:d3:e8:c4:15:48:c6:d8:
         29:f0:73:57:56:1d:4f:16:9e:54:85:5a:d5:65:93:64:85:c4:
         f0:1d:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:03 2026 by rpki-client