Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75239E884E211F19E8A41C1CE1D38B0.roa
File:                     C75239E884E211F19E8A41C1CE1D38B0.roa (raw, json)
Hash identifier:          W53Fa6SiMT5IdH50uMjNhOwhZIfQx5YbXVpPqkiGR4A=
Subject key identifier:   C0:12:7B:6E:0A:0B:A0:35:53:7F:EF:76:4F:21:45:E5:BC:A4:DA:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C6B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75239E884E211F19E8A41C1CE1D38B0.roa
Signing time:             Tue 21 Jul 2026 09:01:37 +0000
ROA not before:           Tue 21 Jul 2026 09:01:33 +0000
ROA not after:            Sat 29 Aug 2026 09:01:33 +0000
asID:                     202656
IP address blocks:        45.195.190.0/24 maxlen: 24
                          45.195.191.0/24 maxlen: 24
                          45.199.192.0/24 maxlen: 24
                          45.199.193.0/24 maxlen: 24
                          45.199.194.0/24 maxlen: 24
                          45.199.195.0/24 maxlen: 24
                          45.199.196.0/24 maxlen: 24
                          45.199.197.0/24 maxlen: 24
                          45.199.198.0/24 maxlen: 24
                          45.199.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116406 (0x1c6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 09:01:33 2026 GMT
            Not After : Aug 29 09:01:33 2026 GMT
        Subject: CN=6a5f3571-2f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:af:70:90:dc:63:fd:86:eb:63:e9:4a:8f:
                    69:88:7b:3e:8a:68:22:d0:d8:e7:68:c3:ae:92:a4:
                    58:7a:0d:87:7e:bf:e2:cc:af:75:15:ee:1a:a5:a5:
                    67:56:f2:91:63:b6:74:bc:c2:b0:71:aa:70:0f:97:
                    ed:94:9c:a8:39:ff:ec:20:98:54:d3:98:91:7e:eb:
                    3f:c4:19:81:72:ba:ef:95:27:79:73:14:0f:ee:4a:
                    3b:78:d4:e6:a4:17:03:62:cd:89:75:6d:0a:e4:4d:
                    89:b9:16:0e:2e:b6:ad:40:80:75:5a:02:ed:9c:72:
                    62:60:2a:49:dc:14:00:ea:2d:33:b5:db:12:c1:34:
                    38:a0:cb:09:8d:19:e6:63:7a:62:5d:e4:7a:e2:0f:
                    dc:6a:59:45:13:e2:6f:14:9a:a2:bf:e7:fa:f7:b1:
                    ec:c1:10:05:8f:46:5f:86:e7:6e:88:ea:d3:4e:0b:
                    70:31:82:23:a4:7f:c1:2a:d9:9a:a6:3d:cd:a3:04:
                    5b:40:d5:54:0f:cd:2d:7b:a8:73:62:a5:98:83:9d:
                    dd:8f:be:8c:02:90:f6:4b:9a:4e:a5:ac:fd:d8:6d:
                    38:cc:2e:e8:3c:b0:73:5e:3d:49:f2:8f:97:3f:75:
                    0c:0a:56:8a:0a:30:6e:1e:b8:a5:8c:25:7a:9b:5e:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:7B:6E:0A:0B:A0:35:53:7F:EF:76:4F:21:45:E5:BC:A4:DA:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75239E884E211F19E8A41C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.190.0/23
                  45.199.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:f9:d7:5a:4d:60:4b:44:ba:5e:d0:90:59:39:9b:84:fe:
         b4:bb:57:b5:bc:e6:e0:d0:3f:40:be:3a:98:8e:57:0c:14:95:
         d2:de:c4:cb:99:47:ec:d8:5c:08:5e:14:03:5f:bf:53:c3:1e:
         18:76:50:4a:9d:43:39:91:09:61:d3:e9:e4:35:a2:e1:91:e5:
         c6:13:be:ae:d8:10:f6:48:41:f0:69:3e:94:fb:28:85:97:64:
         cf:87:e5:82:d9:3d:58:6a:fc:87:60:c5:3c:74:d5:3b:f3:da:
         70:61:0a:f3:07:96:0f:6a:f1:09:67:ce:22:4c:31:f9:5e:65:
         aa:c1:2c:9d:76:ee:95:c4:d6:ee:85:86:17:87:11:ab:00:d0:
         fc:da:37:32:6e:21:2c:e2:df:c0:1c:2a:81:72:5a:3e:d6:6a:
         db:d6:d9:71:1b:07:19:d8:c6:e9:85:7f:f3:53:4b:94:12:c5:
         b5:7e:11:32:b6:ea:7c:92:d4:63:1b:d3:3e:64:41:91:d7:06:
         f8:ed:a4:fb:ec:70:62:ab:23:44:9f:fc:9c:6f:45:7e:91:2e:
         28:7b:84:9f:52:d1:04:63:f7:6d:9a:4c:9b:aa:ac:7d:81:4c:
         c9:b1:5f:81:c9:b1:24:d4:f8:c0:f6:3b:a4:95:b7:d0:71:0b:
         88:ad:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:52 2026 by rpki-client