Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1106312488A11F181427EF7CE1D38B0.roa
File:                     E1106312488A11F181427EF7CE1D38B0.roa (raw, json)
Hash identifier:          jdKp2QJQRy3oCyeM54HEavaTTriOZiL8s0dBMwcd6nE=
Subject key identifier:   E9:60:9A:DF:48:9B:EB:70:B1:2C:99:C4:3C:68:D3:B6:14:38:03:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B189
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1106312488A11F181427EF7CE1D38B0.roa
Signing time:             Tue 05 May 2026 14:01:15 +0000
ROA not before:           Tue 05 May 2026 14:01:10 +0000
ROA not after:            Fri 12 Jun 2026 14:01:10 +0000
asID:                     401696
IP address blocks:        45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110985 (0x1b189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  5 14:01:10 2026 GMT
            Not After : Jun 12 14:01:10 2026 GMT
        Subject: CN=69f9f82b-660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:0f:92:e8:57:24:6c:5d:bb:43:01:fc:69:
                    35:c6:8c:24:cc:26:af:a4:7c:d5:ca:50:fc:44:87:
                    d4:93:9e:b4:db:10:60:a7:84:74:df:34:29:9b:fc:
                    11:78:3f:b9:d9:b3:95:66:22:25:f7:b0:0c:2c:87:
                    e4:37:7f:0b:2c:e0:13:a6:3e:2f:61:12:20:cc:ca:
                    22:21:64:01:1d:b3:a7:0d:35:9c:30:50:14:a0:67:
                    bc:bf:b2:e9:63:30:da:09:b4:c6:b9:2e:b8:f0:de:
                    e8:d9:49:d3:e7:8f:0c:6f:82:9d:85:0f:bf:2e:7f:
                    6c:fa:59:37:fd:cc:3d:dc:b3:2b:d7:f4:8f:ac:11:
                    46:2f:c7:0f:11:01:23:b5:17:41:34:61:87:01:71:
                    6c:73:16:ee:b7:07:e2:bd:6e:ae:4f:de:b4:b9:22:
                    c8:bd:df:71:20:1e:f9:60:12:6a:05:b6:5e:1b:c3:
                    0b:7b:b9:b8:db:6b:27:92:79:88:8e:dc:66:55:fa:
                    d6:9e:02:89:4b:f9:74:55:4e:91:50:80:fc:9d:d6:
                    43:f4:cc:3f:05:9b:98:d9:e6:76:e4:f9:9b:cd:29:
                    c4:8a:0c:58:18:12:d0:5c:e7:b8:2c:22:d1:59:e1:
                    22:1f:cd:f1:41:8b:14:4d:95:80:96:9e:31:cd:fe:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:9A:DF:48:9B:EB:70:B1:2C:99:C4:3C:68:D3:B6:14:38:03:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1106312488A11F181427EF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:85:8c:ff:6d:6f:6d:8d:0a:e5:72:c9:6d:5f:e4:81:e9:
         89:7f:67:7b:b5:1a:b7:4a:0e:03:7f:e2:ea:6e:e5:2e:07:b5:
         60:86:d8:00:44:c9:41:f8:f0:1e:4f:d6:ac:a6:4e:59:d0:80:
         c5:3f:1f:89:0b:26:d4:99:7b:81:da:49:5d:b8:c6:64:58:84:
         a1:d5:3b:41:c9:66:58:1d:ac:49:bc:3c:ab:5b:af:c5:c6:00:
         7e:cc:6d:8b:49:96:35:f5:9d:31:a1:be:ab:e6:3a:c0:52:d5:
         78:94:c4:79:b5:69:29:cd:99:13:61:7b:2c:ff:f6:3e:20:4a:
         60:3d:e9:53:85:05:e6:e4:cc:75:a9:13:6f:45:46:ea:a6:27:
         50:df:91:b1:8d:55:30:15:1b:6c:65:89:89:2b:e5:4f:b1:b3:
         2e:06:0a:92:29:e3:6e:31:2f:ee:e0:07:c5:0d:4e:55:4a:31:
         24:29:4c:b2:d1:c1:f0:f9:25:ae:fd:6f:ec:c4:3c:dc:5d:1e:
         5c:e9:12:0b:b8:72:34:8b:c6:00:1e:19:4a:6b:2e:07:5d:40:
         3e:2b:2b:fe:48:fe:38:35:3c:3a:29:53:be:41:b6:fc:99:d5:
         ba:8d:4c:a5:6c:6e:c5:2b:4d:80:76:5a:60:cc:bd:47:be:ea:
         37:f9:41:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbGJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA1MTQwMTEwWhcNMjYwNjEyMTQwMTEwWjAYMRYw
FAYDVQQDEw02OWY5ZjgyYi02NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2tgPkuhXJGxdu0MB/Gk1xowkzCavpHzVylD8RIfUk5602xBgp4R03zQp
m/wReD+52bOVZiIl97AMLIfkN38LLOATpj4vYRIgzMoiIWQBHbOnDTWcMFAUoGe8
v7LpYzDaCbTGuS648N7o2UnT548Mb4KdhQ+/Ln9s+lk3/cw93LMr1/SPrBFGL8cP
EQEjtRdBNGGHAXFscxbutwfivW6uT960uSLIvd9xIB75YBJqBbZeG8MLe7m422sn
knmIjtxmVfrWngKJS/l0VU6RUID8ndZD9Mw/BZuY2eZ25PmbzSnEigxYGBLQXOe4
LCLRWeEiH83xQYsUTZWAlp4xzf4WxwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOlg
mt9Im+twsSyZxDxo07YUOAN1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTEwNjMxMjQ4OEExMUYxODE0MjdFRjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQAV4IWM/21vbY0K5XLJbV/kgemJf2d7tRq3Sg4Df+LqbuUuB7VghtgARMlB
+PAeT9aspk5Z0IDFPx+JCybUmXuB2klduMZkWISh1TtByWZYHaxJvDyrW6/FxgB+
zG2LSZY19Z0xob6r5jrAUtV4lMR5tWkpzZkTYXss//Y+IEpgPelThQXm5Mx1qRNv
RUbqpidQ35GxjVUwFRtsZYmJK+VPsbMuBgqSKeNuMS/u4AfFDU5VSjEkKUyy0cHw
+SWu/W/sxDzcXR5c6RILuHI0i8YAHhlKay4HXUA+Kyv+SP44NTw6KVO+Qbb8mdW6
jUylbG7FK02AdlpgzL1Hvuo3+UHh
-----END CERTIFICATE-----
Generated at Wed May 13 14:11:04 2026 by rpki-client