Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6E64FC1911F0BBCB889DDAE4EC9C.roa
File:                     3DAB6E64FC1911F0BBCB889DDAE4EC9C.roa (raw, json)
Hash identifier:          Kz82Wl6n0EJXlw7Z+lDHOkXvZpM2lAL7KhQAsKwMgwQ=
Subject key identifier:   D6:04:16:4F:9B:13:84:EE:AF:57:22:54:CC:62:5E:61:30:03:D2:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019A32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6E64FC1911F0BBCB889DDAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 07:16:19 +0000
ROA not before:           Wed 28 Jan 2026 07:16:13 +0000
ROA not after:            Sun 01 Mar 2026 07:16:13 +0000
asID:                     273079
IP address blocks:        45.195.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105010 (0x19a32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 28 07:16:13 2026 GMT
            Not After : Mar  1 07:16:13 2026 GMT
        Subject: CN=6979b7c3-4e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:3a:5b:33:f6:3c:58:9c:d4:a0:57:aa:fd:
                    15:cc:ad:ba:72:e0:0f:87:bd:34:84:0a:25:1f:f1:
                    4b:aa:c2:8d:5f:45:24:11:7b:d5:48:17:ff:ad:d6:
                    32:b4:ae:c8:ab:44:bb:12:73:a6:45:df:13:56:7b:
                    a8:99:c9:4a:c1:d6:a9:21:f8:96:2a:3c:2a:a0:fa:
                    a6:b7:ba:88:ad:58:72:0b:99:2e:66:77:56:8f:d1:
                    f9:c7:59:b4:b9:cf:b0:f9:7b:b9:c6:e4:96:a2:2f:
                    c2:bc:ab:fb:c3:7c:99:7a:39:11:49:12:f8:32:ee:
                    49:85:7a:d9:32:09:46:5d:34:e8:0c:c3:cf:99:dc:
                    33:96:11:e2:0a:11:ae:f7:24:75:87:24:5b:45:c3:
                    53:1e:53:b6:29:bd:db:57:d6:35:8f:34:9a:e8:ec:
                    2e:a7:a2:20:87:f2:43:3f:4f:95:81:72:fd:f1:f7:
                    61:0e:2f:8f:a1:ff:5b:87:db:4a:6f:86:5b:29:af:
                    37:05:9c:5a:95:7b:e9:84:94:f5:c1:58:e4:40:0d:
                    0b:41:3f:e0:78:40:9e:77:15:3d:9e:24:49:fe:15:
                    64:0c:1a:21:60:a5:b5:10:08:e8:41:f9:23:77:b8:
                    13:17:5e:90:12:ac:df:a4:bd:64:a5:c9:55:69:25:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:04:16:4F:9B:13:84:EE:AF:57:22:54:CC:62:5E:61:30:03:D2:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6E64FC1911F0BBCB889DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:8d:fc:f6:5a:00:c2:29:24:c7:6d:10:6a:1c:ac:36:2a:95:
         c9:4a:f8:5e:68:0a:63:3b:fd:3c:98:bc:ae:54:83:82:c4:c7:
         be:c7:da:86:35:d8:ad:76:0a:c1:7d:06:d3:a7:b5:91:2a:09:
         28:b4:5a:82:65:67:74:4d:20:4f:43:07:b7:49:4c:49:a5:ff:
         da:07:18:44:65:0d:48:01:14:19:79:ff:4d:56:6f:6f:0f:f3:
         99:72:e1:f2:cd:98:06:4f:21:88:1f:eb:49:9f:81:aa:f0:cf:
         7d:37:3f:1e:68:0e:5f:81:57:46:27:22:68:88:f4:14:30:4c:
         d5:ab:61:a4:90:db:74:22:24:a6:13:ae:95:01:47:92:c9:3d:
         8b:41:1c:e5:4b:f0:cc:8c:0c:44:67:04:dc:e6:8b:9f:85:99:
         77:98:de:3d:54:2d:f1:af:eb:5c:ac:ee:8a:26:77:6d:66:42:
         bc:75:c5:ad:5f:fe:a5:7b:84:d0:f9:4d:23:c5:b4:01:ed:22:
         2f:4c:51:74:df:c9:58:94:b9:a6:8c:f3:39:49:de:d5:7f:fe:
         b0:58:51:b4:47:57:c0:c3:41:90:db:61:cd:72:13:8b:80:68:
         23:cb:62:0d:1c:7b:c9:64:64:04:81:cb:33:b3:35:73:74:98:
         cf:46:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:26 2026 by rpki-client