Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23334A24C8611F192B9C2B0CE1D38B0.roa
File:                     B23334A24C8611F192B9C2B0CE1D38B0.roa (raw, json)
Hash identifier:          vcIxNPuijfB0is1RurOMFM1MWxE1vUBzrm7q7vz2pqQ=
Subject key identifier:   3B:F8:C8:97:A3:7E:6E:CE:F6:C9:50:49:BF:6B:C7:6D:DC:1B:E2:93
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B365
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23334A24C8611F192B9C2B0CE1D38B0.roa
Signing time:             Sun 10 May 2026 15:41:23 +0000
ROA not before:           Sun 10 May 2026 15:41:18 +0000
ROA not after:            Wed 10 Jun 2026 15:41:18 +0000
asID:                     61112
IP address blocks:        45.192.240.0/24 maxlen: 24
                          45.196.96.0/24 maxlen: 24
                          45.196.97.0/24 maxlen: 24
                          45.202.240.0/22 maxlen: 24
                          45.202.244.0/24 maxlen: 24
                          45.202.245.0/24 maxlen: 24
                          45.202.254.0/23 maxlen: 24
                          45.202.254.0/24 maxlen: 24
                          45.202.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111461 (0x1b365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 10 15:41:18 2026 GMT
            Not After : Jun 10 15:41:18 2026 GMT
        Subject: CN=6a00a723-832b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:25:84:a4:1c:e7:19:df:0a:d0:20:d5:54:
                    e8:fa:82:1a:59:55:30:f2:38:d3:27:a8:f2:c3:f9:
                    7a:9d:75:01:3d:f5:49:30:e6:94:ad:59:b4:5b:48:
                    69:2b:43:ad:ea:af:e4:02:a5:e8:5f:9f:a5:07:70:
                    98:88:43:14:62:f0:89:dd:70:ca:3e:ab:e0:35:9a:
                    af:2e:d8:f5:da:10:45:c5:6f:93:5b:0b:da:cf:82:
                    77:0c:19:70:65:38:42:d9:85:c9:3c:fb:52:2d:f0:
                    8d:6d:80:e6:43:68:7e:bc:f9:9e:b4:92:a3:06:e7:
                    ee:f2:58:49:94:dc:35:97:f4:92:b1:fd:f5:93:8e:
                    15:81:e5:2a:63:b0:bd:af:2d:7a:1e:ba:45:48:87:
                    5c:fb:8d:92:56:91:b1:57:9e:4a:d7:2a:29:bb:b0:
                    ec:e5:6d:71:3b:04:14:db:f2:30:f0:59:dc:21:6b:
                    b6:e9:f8:33:65:66:35:7b:fd:2f:47:6d:57:2b:54:
                    ab:ce:66:b0:da:b4:d2:33:46:b3:64:64:96:ca:59:
                    59:13:c8:64:69:21:37:60:cb:9b:f0:68:66:97:e8:
                    92:53:7e:bb:d4:0e:af:61:7f:11:7a:10:1a:d9:bf:
                    db:a5:de:35:c2:f1:6d:ab:1b:9f:2c:b2:a2:82:b7:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:C8:97:A3:7E:6E:CE:F6:C9:50:49:BF:6B:C7:6D:DC:1B:E2:93
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23334A24C8611F192B9C2B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.240.0/24
                  45.196.96.0/23
                  45.202.240.0-45.202.245.255
                  45.202.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:cb:69:65:05:fb:3f:c0:e5:dd:92:70:db:bc:72:a7:73:
         fe:3d:71:02:80:ad:85:13:fe:d8:0d:be:65:30:63:bb:1a:24:
         a7:8f:4f:88:ed:96:de:4c:23:6b:2b:09:d3:ef:07:a6:4e:e9:
         1b:2f:a6:74:69:25:86:78:0f:fd:48:40:5a:5c:6f:29:c8:0d:
         42:07:3a:7a:2a:63:51:54:2e:19:a0:56:a7:6f:75:a3:96:07:
         91:77:99:f3:33:05:d9:36:77:3d:05:d2:f5:4e:21:32:42:47:
         28:73:fe:43:72:80:c1:3b:f7:c4:ff:73:96:ee:22:c0:d6:7f:
         30:5a:fe:69:6f:4f:62:58:3c:49:f3:2f:ea:5b:f8:be:cf:bb:
         93:86:f3:8d:90:69:53:81:a3:96:35:5f:8b:bd:d0:b0:85:a2:
         d4:b3:dc:27:cd:fe:cb:4a:f1:b6:8a:87:83:bb:ca:74:5a:39:
         b7:89:88:54:c0:be:27:c7:19:3f:a6:04:c2:97:e1:6f:eb:cd:
         7c:3b:d1:c4:ca:fa:3a:ef:86:cb:88:bf:0f:00:7d:74:0a:24:
         89:f0:59:2c:3a:dc:0c:ae:51:2e:fc:97:e7:77:9a:0a:5c:47:
         d8:1e:55:ec:5c:4a:9e:d1:57:4c:d9:54:c1:4b:88:64:20:80:
         94:6f:60:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 11:58:28 2026 by rpki-client