Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF948A460F11F1BF85CFE8CE1D38B0.roa
File:                     CBEF948A460F11F1BF85CFE8CE1D38B0.roa (raw, json)
Hash identifier:          vIPGl7V+BJ/n7fX8kA/Oz0koo9eZKk2TiVE9HRbBY0M=
Subject key identifier:   FC:85:F9:4F:69:C6:85:35:1B:E7:C2:8B:7F:A9:CB:3D:3E:A2:58:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B147
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF948A460F11F1BF85CFE8CE1D38B0.roa
Signing time:             Sat 02 May 2026 10:15:09 +0000
ROA not before:           Sat 02 May 2026 10:15:04 +0000
ROA not after:            Tue 09 Jun 2026 10:15:04 +0000
asID:                     63139
IP address blocks:        45.197.73.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.76.0/24 maxlen: 24
                          45.197.77.0/24 maxlen: 24
                          45.197.78.0/24 maxlen: 24
                          45.197.79.0/24 maxlen: 24
                          45.197.80.0/24 maxlen: 24
                          45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110919 (0x1b147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  2 10:15:04 2026 GMT
            Not After : Jun  9 10:15:04 2026 GMT
        Subject: CN=69f5cead-46a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:d7:d4:40:df:cc:ea:03:58:3c:b4:77:b6:
                    58:6f:f3:25:f0:85:c7:d2:82:08:98:81:3e:2d:81:
                    97:55:8e:bb:59:d2:e7:e4:f8:2a:34:56:4a:f0:09:
                    b7:df:7a:bb:8d:e8:84:5b:a7:18:c7:2c:b0:79:a1:
                    de:4d:ca:33:55:5f:ac:0e:9e:c3:3f:d9:26:f6:15:
                    87:a7:17:d0:31:66:b1:f7:40:48:0d:12:17:ca:a6:
                    33:d7:41:53:0e:91:de:80:fc:cd:8c:ae:b0:e3:05:
                    21:4c:de:0b:c3:13:68:a5:a7:3a:ab:84:78:6f:99:
                    fa:82:0c:b0:81:c5:e8:b5:11:58:35:11:20:75:c9:
                    73:43:4e:c2:e2:2a:16:d0:af:46:b9:31:bf:f0:5d:
                    6a:4a:d1:97:10:63:4e:6b:e7:5e:dd:a0:7e:73:06:
                    2e:03:98:f7:3a:b3:b9:0f:20:86:a1:52:a4:18:3f:
                    f7:27:8d:be:01:21:e1:79:6c:a1:c7:e3:54:bb:dd:
                    6e:f9:6e:b9:4e:98:9f:74:5d:87:f0:19:8f:c8:6b:
                    a8:28:46:31:8d:80:83:21:a6:37:91:aa:47:39:87:
                    f5:47:6c:63:10:62:63:5b:56:48:6c:2b:fa:89:13:
                    6a:dc:cd:9c:47:35:73:7d:b7:4a:41:5f:01:fd:f7:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:F9:4F:69:C6:85:35:1B:E7:C2:8B:7F:A9:CB:3D:3E:A2:58:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF948A460F11F1BF85CFE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.73.0-45.197.82.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:1c:a6:eb:57:c3:6a:0d:60:0a:da:11:a6:82:d4:91:da:
         5a:02:ac:d6:e4:32:a4:b1:15:27:d7:40:83:05:e7:95:75:d8:
         e2:2c:2d:57:af:a1:1a:38:05:4a:33:67:28:5d:ba:42:09:e3:
         1e:5f:64:c9:e6:90:b4:ef:85:31:7f:ad:14:6a:1f:86:5f:16:
         56:15:07:cf:79:4e:da:14:c4:05:b8:f6:ef:0c:61:19:be:e0:
         d3:42:5e:30:fb:a6:0e:02:0d:c7:f9:32:53:eb:a0:2c:6d:49:
         9f:dd:82:40:87:bc:59:d4:94:94:65:c0:e7:5a:aa:c1:8b:6c:
         32:7b:58:3a:00:7b:e2:3a:dd:8c:fd:91:7a:60:8d:a7:6a:71:
         13:30:ee:52:ab:fd:d4:59:6a:a0:9c:52:c6:4f:01:72:cc:7b:
         f7:75:2f:63:50:60:ee:70:5c:da:0d:45:9e:57:00:0c:c9:51:
         d2:0c:48:86:75:51:8e:e3:92:eb:ae:82:25:9e:9b:c5:0b:00:
         5e:1e:da:a4:f5:91:52:a3:eb:ab:4a:83:d9:c2:29:21:5f:0f:
         a6:5b:32:16:8b:f6:9f:bc:9e:0e:1c:04:30:a0:dd:42:4f:78:
         7f:a9:13:d7:26:40:d8:10:1b:3e:fe:a8:84:a2:b2:35:4a:27:
         8d:29:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:10 2026 by rpki-client