Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5067E7C46AF11F184A16AB9CE1D38B0.roa
File:                     C5067E7C46AF11F184A16AB9CE1D38B0.roa (raw, json)
Hash identifier:          ZEYHTm1DbaZCyawsWCD9b8m/7Ry6+5b70IAyvEUjznM=
Subject key identifier:   C0:10:8A:38:D5:82:46:B7:69:1F:44:77:9B:F2:1C:75:CC:6D:1D:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B15A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5067E7C46AF11F184A16AB9CE1D38B0.roa
Signing time:             Sun 03 May 2026 05:20:17 +0000
ROA not before:           Sun 03 May 2026 05:20:12 +0000
ROA not after:            Wed 02 May 2029 05:20:12 +0000
asID:                     17561
IP address blocks:        45.204.202.0/24 maxlen: 24
                          45.204.203.0/24 maxlen: 24
                          45.204.204.0/24 maxlen: 24
                          45.204.205.0/24 maxlen: 24
                          45.204.206.0/24 maxlen: 24
                          45.204.207.0/24 maxlen: 24
                          45.204.208.0/24 maxlen: 24
                          45.204.209.0/24 maxlen: 24
                          45.204.210.0/24 maxlen: 24
                          45.204.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110938 (0x1b15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  3 05:20:12 2026 GMT
            Not After : May  2 05:20:12 2029 GMT
        Subject: CN=69f6db11-f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:63:0c:18:81:38:79:5a:08:51:0c:bf:d1:
                    af:50:24:a2:b8:b7:ee:4a:f5:3f:3a:b3:14:e5:dd:
                    dc:4d:67:b2:9f:34:31:65:f4:48:b5:0e:59:4d:34:
                    28:7b:c7:18:30:58:15:e4:9f:08:c2:45:09:12:ed:
                    ac:ec:cf:c1:8d:55:5d:7b:38:78:04:93:c2:33:a9:
                    95:d3:1b:f6:25:32:67:14:9e:bd:79:2a:de:d7:03:
                    d1:33:c0:12:0d:b4:c2:77:36:e5:cc:96:fe:31:8d:
                    ca:97:65:4b:9a:57:d0:78:67:b8:d4:56:21:83:0e:
                    bb:b2:44:2f:81:28:8e:4f:3b:a0:9b:45:25:3e:c9:
                    fd:c7:5d:8c:aa:df:47:4f:7e:3e:ca:9d:fe:24:79:
                    72:07:8d:d3:84:87:0a:92:8b:d0:66:39:15:65:22:
                    8a:ff:aa:54:e7:52:ab:9a:e1:4f:ed:5e:9b:7e:88:
                    ce:b6:30:68:a8:66:e3:bf:1c:d7:ac:21:5b:e6:46:
                    4d:cb:5e:82:a6:4f:2c:0d:3e:d1:0d:16:b3:dc:ee:
                    ed:62:06:6e:ba:56:64:36:56:bf:7e:e7:5f:f6:b1:
                    f9:ee:a8:6e:23:9e:65:f6:1b:8a:55:b2:f8:0e:91:
                    b2:e8:dc:66:2f:67:20:64:61:05:db:2b:c3:29:e9:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:10:8A:38:D5:82:46:B7:69:1F:44:77:9B:F2:1C:75:CC:6D:1D:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5067E7C46AF11F184A16AB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.202.0-45.204.211.255

    Signature Algorithm: sha256WithRSAEncryption
         53:7c:47:63:27:dc:1b:85:67:c7:c4:0a:23:9d:e5:ca:12:40:
         7b:98:ca:df:b7:22:30:98:9e:2c:8e:84:af:27:03:89:38:02:
         da:d8:89:24:3d:73:0f:65:91:6b:e2:a9:b5:42:bc:fb:58:cb:
         3e:36:da:67:8c:dc:30:79:76:19:d8:e8:35:4b:9a:fe:33:02:
         69:01:1c:20:5b:6b:62:57:d1:cd:0e:fa:b5:f2:4f:f2:44:f0:
         83:80:48:96:97:08:1a:05:39:88:5b:4a:60:7d:5d:90:77:a2:
         bf:c6:82:80:bf:2a:6d:22:f2:dc:f9:44:9b:66:00:22:94:77:
         ea:cb:0d:e7:6d:1b:05:4d:05:4b:5c:3d:cc:4b:e2:b8:9f:20:
         69:a0:d7:57:46:58:cb:5f:39:a8:a4:a2:79:79:22:3d:ad:6a:
         e6:15:45:e7:38:f1:11:43:cd:20:cb:06:b7:c1:d4:e3:3b:1e:
         ee:1f:48:be:1b:df:c6:41:f4:1a:bb:f9:fd:47:e6:c9:3b:25:
         54:fe:0b:17:15:de:4f:4f:d4:b5:0b:93:6c:1f:02:ac:72:09:
         ad:0b:b8:ea:b2:09:15:53:a1:0d:06:86:ec:1f:bb:b3:cc:89:
         15:16:fd:c8:c7:77:88:47:73:ba:14:98:bb:89:b2:66:0a:50:
         a3:9b:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:31 2026 by rpki-client