Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6B109A252811F1A03F32F1DAE4EC9C.roa
File:                     FE6B109A252811F1A03F32F1DAE4EC9C.roa (raw, json)
Hash identifier:          63XxWzbCBNi8wpnTe4CLP9Mqcmm7J1JFh67kZyaOohM=
Subject key identifier:   A9:7B:FE:05:CB:23:43:2E:E8:BB:23:82:64:64:F9:0D:FE:21:F9:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A65E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6B109A252811F1A03F32F1DAE4EC9C.roa
Signing time:             Sat 21 Mar 2026 13:22:23 +0000
ROA not before:           Sat 21 Mar 2026 13:22:18 +0000
ROA not after:            Tue 28 Apr 2026 13:22:18 +0000
asID:                     48031
IP address blocks:        45.200.181.0/24 maxlen: 24
                          45.200.182.0/24 maxlen: 24
                          45.200.183.0/24 maxlen: 24
                          45.200.184.0/24 maxlen: 24
                          45.200.185.0/24 maxlen: 24
                          45.200.186.0/24 maxlen: 24
                          45.200.187.0/24 maxlen: 24
                          45.200.188.0/24 maxlen: 24
                          45.200.189.0/24 maxlen: 24
                          45.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108126 (0x1a65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 21 13:22:18 2026 GMT
            Not After : Apr 28 13:22:18 2026 GMT
        Subject: CN=69be9b8f-04e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:dd:4f:10:76:70:74:0c:cb:72:18:73:45:
                    4d:2c:ee:0a:5a:d8:3e:9c:a6:94:22:2f:5d:f9:38:
                    d0:be:88:53:d0:4b:8f:59:5d:08:1e:89:60:52:02:
                    7b:9b:e9:bd:35:ad:22:28:1c:40:ea:91:bc:82:20:
                    46:11:22:51:c2:45:91:aa:09:cd:8d:53:a6:f4:11:
                    17:62:dd:47:2f:23:f5:49:80:46:de:04:f1:7e:5b:
                    16:fe:5a:58:9e:92:c7:32:04:7d:a7:46:da:ed:0e:
                    1d:65:87:d1:02:88:ce:05:5b:ae:11:10:53:c8:28:
                    49:41:d0:bc:2d:97:86:2f:a5:60:9c:57:4e:f4:0a:
                    15:c7:be:86:8c:df:4c:9d:28:ba:e6:88:df:2a:1e:
                    51:83:69:a0:9c:74:74:09:55:29:31:8a:ec:38:8c:
                    89:81:90:a5:ee:45:a6:49:2c:7d:16:06:8d:01:3e:
                    ae:8b:05:d9:ff:6e:0e:d5:85:d9:0b:45:87:a9:b0:
                    f5:1a:40:71:b4:d4:d4:93:e1:55:8b:a3:2e:3b:dd:
                    e4:0f:53:95:f1:e4:19:ba:2f:8c:d0:bd:4a:c1:29:
                    93:8e:ac:8a:30:71:b5:ec:9d:ec:84:b1:39:ba:65:
                    71:22:98:14:77:1f:07:37:62:4d:9d:e2:57:c8:6e:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:FE:05:CB:23:43:2E:E8:BB:23:82:64:64:F9:0D:FE:21:F9:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6B109A252811F1A03F32F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.181.0-45.200.190.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:85:16:dc:a1:02:39:b3:12:7f:70:18:20:79:ad:98:28:
         f3:0a:3f:03:2f:e7:da:83:59:f7:78:b9:2c:71:a5:3b:52:d0:
         ae:67:69:9a:fe:f9:a0:1c:75:b0:9f:86:41:1b:97:00:dd:b3:
         fa:43:43:99:dc:4b:49:5f:17:cc:49:e7:17:ed:8b:78:87:e9:
         20:c9:0c:c1:b5:19:1e:52:34:0a:b9:4f:c7:74:bc:71:6a:7b:
         07:0e:ce:29:a2:b9:48:98:d3:f5:a6:ea:d9:b3:72:9d:ab:33:
         71:3f:c6:75:40:5b:69:28:b9:e6:67:e1:c2:65:6b:12:b5:fe:
         e3:cd:ca:13:7a:ef:84:da:49:d5:b6:fd:d5:d9:3f:c6:ba:73:
         d0:8b:e8:1b:b4:ee:50:3a:36:cf:f1:86:80:63:68:b3:3c:10:
         02:c6:08:3f:0a:d4:db:95:07:16:c6:29:12:50:fb:8e:05:b4:
         80:ed:2f:df:0b:24:9f:58:2c:84:7d:d0:2f:94:bd:dd:79:45:
         e5:c6:9b:2d:ba:1e:48:62:a9:af:79:c8:08:ad:79:f7:5f:4c:
         8e:c0:40:f5:21:c0:29:d4:0f:d5:72:b6:6c:a3:6f:ac:4b:c7:
         72:f9:e5:44:bd:be:12:ae:3e:7a:49:50:7a:a2:e9:9e:8a:a8:
         23:30:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:18 2026 by rpki-client