Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9E9C15085F011F1B87EE2A4CE1D38B0.roa
File:                     F9E9C15085F011F1B87EE2A4CE1D38B0.roa (raw, json)
Hash identifier:          E3J9GtzqHLY3IiWMx3bKjSMMVJ4WTBPyU3duD2x6VGA=
Subject key identifier:   8D:CB:7D:40:F4:3F:69:32:DE:AC:48:BB:20:DD:E6:48:63:7C:29:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C785
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9E9C15085F011F1B87EE2A4CE1D38B0.roa
Signing time:             Wed 22 Jul 2026 17:15:46 +0000
ROA not before:           Wed 22 Jul 2026 17:15:41 +0000
ROA not after:            Wed 09 Sep 2026 17:15:41 +0000
asID:                     395793
IP address blocks:        45.192.239.0/24 maxlen: 24
                          45.192.244.0/24 maxlen: 24
                          45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
                          45.201.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116613 (0x1c785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 17:15:41 2026 GMT
            Not After : Sep  9 17:15:41 2026 GMT
        Subject: CN=6a60fac2-ffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:00:22:74:54:38:3f:5f:ba:90:b0:0d:f7:
                    3e:22:7e:70:ed:0a:be:19:05:25:e9:f0:dd:b3:4e:
                    68:f4:54:fe:aa:08:1e:55:c3:19:64:35:05:d4:ce:
                    24:e5:40:8d:bd:19:b6:74:c3:44:41:2a:5a:78:59:
                    15:26:e9:d5:d5:88:4b:7a:f2:b2:ba:b8:c1:a3:7c:
                    b8:fd:1e:5f:96:60:09:8f:6d:e7:57:69:c9:df:39:
                    6f:6e:5b:3f:e4:f4:b7:9f:a3:7f:35:39:5c:ba:f3:
                    b0:7d:fc:20:1b:4a:db:96:1e:c5:1c:c6:0e:6c:ef:
                    8c:ba:95:09:1f:2e:62:a3:17:6a:64:75:0b:75:b6:
                    0b:a7:c2:56:90:fe:4b:01:0d:ad:1c:4d:6a:9b:e0:
                    5c:d0:59:4e:eb:2e:21:14:d8:5e:86:dd:9e:33:94:
                    2c:79:fe:1f:3e:da:30:2b:30:7e:44:87:11:a6:35:
                    c7:4f:b9:d4:14:f5:09:5c:d1:e0:b4:ba:32:cc:4a:
                    83:60:bb:17:dc:13:eb:2b:ae:7b:5b:73:7d:cd:a0:
                    a0:ab:27:66:34:6b:0b:45:36:85:bc:20:11:79:32:
                    5d:e2:d8:7f:e6:3c:2e:64:b5:a8:e7:92:5d:82:a7:
                    a2:10:3a:7c:69:e1:d8:39:dc:ef:8f:9c:c8:7e:4d:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:7D:40:F4:3F:69:32:DE:AC:48:BB:20:DD:E6:48:63:7C:29:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9E9C15085F011F1B87EE2A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.239.0/24
                  45.192.244.0/24
                  45.201.21.0-45.201.26.255
                  45.201.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:73:ce:fc:67:11:38:ed:4b:8f:3d:98:d1:59:dc:02:54:
         47:9d:87:29:b9:98:70:ff:01:4d:a4:c6:ef:0c:ef:eb:e0:4d:
         5c:7c:f0:3f:98:af:aa:d2:1d:04:30:80:23:f9:f3:6c:1a:2c:
         a2:09:58:d6:0a:70:47:6e:b4:81:3f:21:8e:a6:4f:5e:7c:61:
         aa:58:51:fa:fd:23:2b:63:20:1c:be:53:d3:5c:ab:bf:85:cc:
         45:77:c7:d4:c9:1b:22:6a:48:e1:30:1e:36:ae:1d:8e:91:cf:
         f7:f2:a9:a7:be:1f:69:27:33:cd:55:c7:da:7b:6d:88:21:77:
         9b:90:3b:e8:d7:55:2c:b3:e5:b2:f0:35:49:6e:ff:6a:a9:0c:
         44:77:2b:f3:c5:d7:4e:d8:f2:a0:a6:56:75:13:ca:dd:01:31:
         80:89:f8:f5:a6:a3:f7:04:c4:47:5f:5e:1b:88:d3:40:89:4b:
         e6:80:2b:f4:79:2f:8a:a7:45:08:21:fe:2d:5d:53:2c:ff:9e:
         3c:ea:3f:21:f7:cb:8f:44:a8:c5:26:3e:2c:c1:1b:54:b6:cd:
         07:5d:ff:1b:8a:2f:a1:a4:18:da:84:dd:91:33:ef:33:5e:61:
         5b:67:e2:34:de:40:af:4c:96:93:73:8e:09:86:4a:78:8f:a1:
         c4:32:f9:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:04 2026 by rpki-client