Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1D3030CA54FC11F19F242AADCE1D38B0.roa
File:                     1D3030CA54FC11F19F242AADCE1D38B0.roa (raw, json)
Hash identifier:          U+t41kW/PgL29PiI9WfidYFl0GljhpTC65WSHzRKtsI=
Subject key identifier:   8B:D8:23:A0:B0:59:5A:0E:0A:36:37:26:8A:D2:C5:3F:A1:CB:5C:7D
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       074D
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1D3030CA54FC11F19F242AADCE1D38B0.roa
Signing time:             Thu 21 May 2026 10:02:03 +0000
ROA not before:           Thu 21 May 2026 10:01:58 +0000
ROA not after:            Thu 20 May 2027 10:01:58 +0000
asID:                     208185
IP address blocks:        45.221.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: May 21 10:01:58 2026 GMT
            Not After : May 20 10:01:58 2027 GMT
        Subject: CN=6a0ed81a-08b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:37:6d:2b:d7:6a:0d:99:27:3b:8b:b6:29:
                    ec:3e:f1:34:f2:a7:c0:97:78:e8:e7:79:1d:0e:17:
                    e0:a0:0c:0f:d9:11:f3:6f:cc:96:43:e6:86:75:98:
                    53:0b:98:56:1b:61:6b:37:73:80:f4:29:a7:e7:22:
                    03:78:53:fa:f9:a0:21:22:e8:a5:0a:1c:ab:fb:93:
                    8e:1e:9e:f6:78:56:e9:c7:5b:af:57:99:87:1e:e5:
                    4d:b9:aa:ca:b4:80:74:b1:18:64:83:d5:71:05:a0:
                    28:bc:85:bd:38:78:bc:cd:69:36:b9:7b:d1:57:f8:
                    87:bb:5c:23:f0:20:d8:e2:7a:e6:70:32:33:4d:91:
                    43:50:2c:94:e7:39:23:1d:14:e8:e3:bb:9f:46:bd:
                    e6:89:68:00:cf:2d:48:04:cc:a1:26:9a:2e:00:e4:
                    b0:b6:b8:2f:b7:40:86:2f:af:ba:91:88:cd:f8:fd:
                    4d:cc:e0:1f:1d:b6:94:32:35:5a:80:24:5d:e7:85:
                    62:2f:a0:04:91:b2:a3:0b:8e:04:70:8c:be:a3:44:
                    5f:de:d5:0c:f4:d8:67:5d:16:41:6d:8a:93:c5:14:
                    cb:e0:f9:0e:18:c6:4e:2c:ec:bf:ff:f9:aa:8c:98:
                    cf:47:af:40:f0:25:20:87:2f:3a:6a:cf:ae:1c:b5:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:23:A0:B0:59:5A:0E:0A:36:37:26:8A:D2:C5:3F:A1:CB:5C:7D
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1D3030CA54FC11F19F242AADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:ea:ea:68:13:13:28:8a:38:b7:7d:30:40:be:f5:ea:83:90:
         4f:a0:a2:95:98:9b:98:95:3d:54:d0:58:ba:02:67:70:f4:97:
         79:3c:d0:28:7e:b2:5a:c0:4f:48:a4:53:fb:e0:8c:a3:ab:47:
         c3:f3:ad:4e:bd:6d:ec:aa:ac:c2:f1:72:75:dd:33:53:ce:fe:
         1e:0a:dc:2d:80:16:fa:87:d4:57:0f:75:2e:86:96:bc:e8:3c:
         80:10:da:69:05:f4:b0:d7:71:8e:d3:c4:27:38:34:ce:4c:ae:
         59:78:77:48:ae:12:f9:c0:95:a9:38:0a:c6:c8:5b:75:54:31:
         c8:18:c1:10:40:f3:a0:90:c0:c2:3f:06:e3:d7:d7:a0:65:38:
         05:09:ee:e1:e2:bd:5e:fc:93:d4:ad:69:18:0f:1d:b8:52:76:
         57:ce:bc:56:b0:7b:c2:ec:6b:80:bc:31:fd:9d:07:5b:c4:2c:
         24:f6:c9:f9:4d:5e:8d:cf:10:30:be:c3:11:b4:7f:a3:dd:55:
         6d:2c:66:02:3f:4f:3e:fc:07:a4:be:11:62:0a:e3:ea:cd:8d:
         1d:7f:67:95:0b:29:0a:1c:75:56:60:e0:7b:48:ba:d2:0c:e2:
         40:d7:a8:58:40:99:ef:db:ea:e7:79:c8:46:42:11:f1:4e:6b:
         56:a8:f5:b4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB00wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNjA1MjExMDAxNThaFw0yNzA1MjAxMDAxNThaMBgxFjAU
BgNVBAMTDTZhMGVkODFhLTA4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQQzdtK9dqDZknO4u2Kew+8TTyp8CXeOjneR0OF+CgDA/ZEfNvzJZD5oZ1
mFMLmFYbYWs3c4D0KafnIgN4U/r5oCEi6KUKHKv7k44envZ4VunHW69XmYce5U25
qsq0gHSxGGSD1XEFoCi8hb04eLzNaTa5e9FX+Ie7XCPwINjieuZwMjNNkUNQLJTn
OSMdFOjju59GveaJaADPLUgEzKEmmi4A5LC2uC+3QIYvr7qRiM34/U3M4B8dtpQy
NVqAJF3nhWIvoASRsqMLjgRwjL6jRF/e1Qz02GddFkFtipPFFMvg+Q4Yxk4s7L//
+aqMmM9Hr0DwJSCHLzpqz64ctbf/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUi9gj
oLBZWg4KNjcmitLFP6HLXH0wHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzFEMzAzMENBNTRGQzExRjE5RjI0MkFBRENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UcwDQYJKoZIhvcNAQELBQAD
ggEBAMvq6mgTEyiKOLd9MEC+9eqDkE+gopWYm5iVPVTQWLoCZ3D0l3k80Ch+slrA
T0ikU/vgjKOrR8PzrU69beyqrMLxcnXdM1PO/h4K3C2AFvqH1FcPdS6GlrzoPIAQ
2mkF9LDXcY7TxCc4NM5Mrll4d0iuEvnAlak4CsbIW3VUMcgYwRBA86CQwMI/BuPX
16BlOAUJ7uHivV78k9StaRgPHbhSdlfOvFawe8Lsa4C8Mf2dB1vELCT2yflNXo3P
EDC+wxG0f6PdVW0sZgI/Tz78B6S+EWIK4+rNjR1/Z5ULKQocdVZg4HtIutIM4kDX
qFhAme/b6ud5yEZCEfFOa1ao9bQ=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:27 2026 by rpki-client