Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8EE7AB444A511F1AE0015C6CE1D38B0.roa
File:                     C8EE7AB444A511F1AE0015C6CE1D38B0.roa (raw, json)
Hash identifier:          RVUXKH0DpzWX15NDBjuQFF4mamx2/YjD9UChJo1Yl8s=
Subject key identifier:   C2:93:75:4A:04:30:72:AF:A6:F7:03:FA:50:16:7E:CA:87:41:57:E9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B048
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8EE7AB444A511F1AE0015C6CE1D38B0.roa
Signing time:             Thu 30 Apr 2026 15:03:46 +0000
ROA not before:           Thu 30 Apr 2026 15:03:41 +0000
ROA not after:            Wed 10 Jun 2026 15:03:41 +0000
asID:                     215691
IP address blocks:        45.198.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110664 (0x1b048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 30 15:03:41 2026 GMT
            Not After : Jun 10 15:03:41 2026 GMT
        Subject: CN=69f36f52-4d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:f9:48:b3:96:fb:09:8b:44:0e:8b:75:93:
                    a5:b7:ec:47:93:82:51:33:37:c2:ec:ac:63:9f:b1:
                    3c:52:b0:64:43:02:21:d3:08:ec:c8:59:cb:ce:d8:
                    5a:12:d9:25:01:93:63:46:27:23:6c:13:ec:67:17:
                    ef:d0:e2:87:d6:63:76:1a:a3:0a:2e:78:33:e2:5d:
                    53:8c:56:77:f2:21:49:09:9e:85:3c:aa:b4:d9:ab:
                    0d:e1:91:f8:39:a3:c6:c2:af:d2:4b:5c:fa:d8:e6:
                    b8:8a:3c:0c:70:99:0b:75:97:ee:07:bd:b7:a4:b5:
                    65:d4:bb:6e:9a:8b:e5:27:b6:62:fd:bc:b2:59:66:
                    f2:a7:e4:b2:c8:a4:7e:b9:5e:de:3a:e8:e5:e2:2f:
                    da:45:50:0b:81:62:6c:1c:34:61:b1:64:83:c0:d9:
                    de:ac:fb:63:72:99:4a:75:22:ed:8b:6e:93:17:8f:
                    3a:86:c6:80:cd:ad:98:84:d2:66:57:55:77:68:a1:
                    f6:1e:59:2d:02:8f:b0:cf:6d:39:73:72:4a:3a:1c:
                    86:a0:42:71:04:28:89:7a:df:87:60:4f:d6:88:81:
                    a6:a8:7f:9f:55:a1:9f:5e:c8:98:e1:b4:cb:19:5f:
                    b3:80:cc:0b:6f:9e:98:f9:e2:e1:34:72:ee:58:3f:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:75:4A:04:30:72:AF:A6:F7:03:FA:50:16:7E:CA:87:41:57:E9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8EE7AB444A511F1AE0015C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:fd:f9:9b:14:a9:02:8d:98:c3:d2:32:5e:5f:6d:6d:f8:
         2c:5f:08:f8:76:2f:73:bd:a8:0e:08:38:29:45:ba:77:64:ff:
         b3:49:98:b5:7e:a5:e8:e3:ad:8d:03:99:11:2e:37:ab:38:bd:
         3c:51:00:16:92:e1:ea:7a:26:6e:91:55:75:1a:65:74:e5:62:
         28:42:94:81:6d:43:1e:e4:8c:4f:a5:67:f8:6c:42:0f:d2:40:
         73:03:1a:20:a8:a0:70:5f:08:24:ea:ff:7c:52:5b:f9:87:72:
         3e:57:0e:43:a8:32:38:ae:80:58:d4:73:91:e2:c2:6e:d7:01:
         9f:ca:4e:9d:a7:26:b1:9e:af:d2:40:44:97:e7:fd:59:b8:51:
         f8:a9:4f:e3:2b:21:f0:95:a4:7d:d5:80:03:54:ae:27:42:d8:
         1a:3c:0c:3a:98:77:57:f9:4d:ed:e1:fb:8e:72:ec:3d:62:74:
         13:ff:33:14:9f:4f:fe:03:be:70:9c:64:6e:a7:81:41:23:f3:
         ad:f0:73:4b:d9:bc:70:e5:aa:2e:8f:85:8c:ff:a6:2d:bf:3c:
         01:80:2e:5c:9a:4a:85:60:fe:19:69:77:62:10:63:7b:e2:02:
         b7:f5:4c:03:c7:47:65:fb:4b:44:02:15:dc:02:cf:ae:58:59:
         a3:18:09:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbBIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDMwMTUwMzQxWhcNMjYwNjEwMTUwMzQxWjAYMRYw
FAYDVQQDEw02OWYzNmY1Mi00ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArQ/5SLOW+wmLRA6LdZOlt+xHk4JRMzfC7Kxjn7E8UrBkQwIh0wjsyFnL
zthaEtklAZNjRicjbBPsZxfv0OKH1mN2GqMKLngz4l1TjFZ38iFJCZ6FPKq02asN
4ZH4OaPGwq/SS1z62Oa4ijwMcJkLdZfuB723pLVl1LtumovlJ7Zi/byyWWbyp+Sy
yKR+uV7eOujl4i/aRVALgWJsHDRhsWSDwNnerPtjcplKdSLti26TF486hsaAza2Y
hNJmV1V3aKH2HlktAo+wz205c3JKOhyGoEJxBCiJet+HYE/WiIGmqH+fVaGfXsiY
4bTLGV+zgMwLb56Y+eLhNHLuWD/S+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMKT
dUoEMHKvpvcD+lAWfsqHQVfpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOEVFN0FCNDQ0QTUxMUYxQUUwMDE1QzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcY3MA0GCSqGSIb3DQEBCwUA
A4IBAQBiWv35mxSpAo2Yw9IyXl9tbfgsXwj4di9zvagOCDgpRbp3ZP+zSZi1fqXo
462NA5kRLjerOL08UQAWkuHqeiZukVV1GmV05WIoQpSBbUMe5IxPpWf4bEIP0kBz
AxogqKBwXwgk6v98Ulv5h3I+Vw5DqDI4roBY1HOR4sJu1wGfyk6dpyaxnq/SQESX
5/1ZuFH4qU/jKyHwlaR91YADVK4nQtgaPAw6mHdX+U3t4fuOcuw9YnQT/zMUn0/+
A75wnGRup4FBI/Ot8HNL2bxw5aouj4WM/6YtvzwBgC5cmkqFYP4ZaXdiEGN74gK3
9UwDx0dl+0tEAhXcAs+uWFmjGAlE
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:42 2026 by rpki-client