Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B36466C43FD511F192AF17F8CE1D38B0.roa
File:                     B36466C43FD511F192AF17F8CE1D38B0.roa (raw, json)
Hash identifier:          Dsc02pID2bako/8kNHZljOBghZ0+ktNfi07GbD8GHk4=
Subject key identifier:   30:1C:23:F6:56:F2:9F:D7:43:CC:27:F2:20:72:9F:2C:AD:24:0D:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AEF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B36466C43FD511F192AF17F8CE1D38B0.roa
Signing time:             Fri 24 Apr 2026 12:04:10 +0000
ROA not before:           Fri 24 Apr 2026 12:04:05 +0000
ROA not after:            Sun 31 May 2026 12:04:05 +0000
asID:                     44559
IP address blocks:        45.192.252.0/24 maxlen: 24
                          45.195.103.0/24 maxlen: 24
                          45.195.252.0/24 maxlen: 24
                          45.195.253.0/24 maxlen: 24
                          45.196.121.0/24 maxlen: 24
                          45.196.124.0/24 maxlen: 24
                          45.196.125.0/24 maxlen: 24
                          45.196.126.0/24 maxlen: 24
                          45.196.127.0/24 maxlen: 24
                          45.196.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110322 (0x1aef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 24 12:04:05 2026 GMT
            Not After : May 31 12:04:05 2026 GMT
        Subject: CN=69eb5c3a-19d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:d4:b0:42:49:2c:10:f0:f9:36:11:2b:d6:
                    39:af:f0:a0:8a:9f:3f:5c:26:73:c2:a2:aa:98:df:
                    2a:ee:66:c2:8a:53:0a:4d:5f:e1:a5:88:f6:2e:e8:
                    54:8f:3a:fb:b5:e2:a8:00:77:82:33:a9:62:1a:59:
                    44:65:6c:de:49:2e:fb:f4:8c:d8:62:2e:55:34:81:
                    c6:6b:c1:72:f3:7f:56:37:fb:de:e3:ed:3a:0b:2d:
                    32:32:a5:b0:71:89:86:e3:18:83:42:32:af:fb:75:
                    fa:d0:51:e2:b5:71:53:ee:d4:22:38:00:a9:39:8a:
                    b7:17:81:1e:2c:ec:a7:0c:9d:be:ae:4c:52:87:69:
                    71:2d:fb:8d:4b:c1:ae:d2:77:94:d2:45:77:c6:5b:
                    c5:d9:7a:0e:cf:5f:5f:ec:76:ee:ed:69:41:84:53:
                    32:2d:99:2c:53:01:05:47:0a:9f:1a:94:9a:7b:b3:
                    aa:c5:48:1d:52:2e:cb:a6:c6:2f:63:74:6f:aa:f0:
                    65:84:c0:63:29:89:31:dc:7f:7f:71:0c:62:7e:8a:
                    90:ea:e1:66:38:ba:12:c9:c1:69:b9:24:39:86:62:
                    69:de:34:df:96:04:e4:da:70:fc:a0:b1:7d:a6:be:
                    e6:cb:4f:10:c4:39:79:bd:43:c6:b5:33:16:cb:c7:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1C:23:F6:56:F2:9F:D7:43:CC:27:F2:20:72:9F:2C:AD:24:0D:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B36466C43FD511F192AF17F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.252.0/24
                  45.195.103.0/24
                  45.195.252.0/23
                  45.196.121.0/24
                  45.196.124.0/22
                  45.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:96:26:ac:8e:ff:be:3f:57:c3:5e:b1:e9:05:19:54:8f:b0:
         a7:8f:e3:9d:db:f4:83:1f:26:78:31:63:0a:d7:af:d8:a1:ca:
         38:2a:c7:ff:d8:ca:8a:0a:cc:db:38:22:3a:41:bd:85:89:45:
         5c:9e:26:ab:58:26:88:a1:50:e2:d6:d8:ff:41:84:38:f3:f0:
         8e:87:49:0b:a1:1e:24:9f:27:b8:c6:21:af:a0:2c:5a:2b:6d:
         db:37:1b:dc:32:d2:67:c7:a9:16:15:10:d0:46:c5:03:fc:7b:
         ac:9e:45:db:85:3c:db:d5:95:6a:10:3b:fb:a5:50:74:22:33:
         d7:84:95:92:08:6c:f2:2c:b7:03:79:e0:a4:7a:f4:b3:bd:03:
         e7:98:44:88:59:9a:6b:c7:26:ac:db:23:09:70:23:54:17:5f:
         47:71:2e:73:b3:7f:08:63:43:cf:0c:42:77:ff:63:1a:09:d2:
         a8:ab:ff:50:fa:3a:c9:03:4b:0b:53:41:43:ad:69:ac:50:ec:
         a9:2d:fc:18:73:50:20:6f:af:f3:69:c6:6f:a7:ca:27:64:24:
         94:77:18:54:01:a0:e2:06:58:3f:98:5b:6a:cf:b0:38:5e:db:
         60:eb:7f:b4:b5:7d:b9:5c:8a:f6:9f:be:2a:09:d3:89:96:23:
         cb:8a:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:41 2026 by rpki-client