Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07582708794111F1B314CFEACE1D38B0.roa
File:                     07582708794111F1B314CFEACE1D38B0.roa (raw, json)
Hash identifier:          jM6DTMwQHShj8cvj7xE+fP+tUrPjzXtgjabGWUIQSxU=
Subject key identifier:   D5:4A:8E:D3:2D:0C:1F:79:71:C0:10:6D:E8:A6:F4:C8:BD:38:AE:E8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C33F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07582708794111F1B314CFEACE1D38B0.roa
Signing time:             Mon 06 Jul 2026 13:46:03 +0000
ROA not before:           Mon 06 Jul 2026 13:45:57 +0000
ROA not after:            Sat 01 Aug 2026 13:45:57 +0000
asID:                     9304
IP address blocks:        45.198.5.0/24 maxlen: 24
                          45.198.16.0/24 maxlen: 24
                          45.198.17.0/24 maxlen: 24
                          45.198.18.0/24 maxlen: 24
                          45.201.35.0/24 maxlen: 24
                          45.201.41.0/24 maxlen: 24
                          45.201.42.0/24 maxlen: 24
                          45.201.48.0/24 maxlen: 24
                          45.201.61.0/24 maxlen: 24
                          45.204.48.0/24 maxlen: 24
                          45.204.49.0/24 maxlen: 24
                          45.204.50.0/24 maxlen: 24
                          45.204.51.0/24 maxlen: 24
                          45.204.52.0/24 maxlen: 24
                          45.204.53.0/24 maxlen: 24
                          45.204.132.0/24 maxlen: 24
                          45.204.154.0/24 maxlen: 24
                          45.204.181.0/24 maxlen: 24
                          45.204.248.0/24 maxlen: 24
                          45.204.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115519 (0x1c33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  6 13:45:57 2026 GMT
            Not After : Aug  1 13:45:57 2026 GMT
        Subject: CN=6a4bb19b-ac2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:71:0d:8e:8e:ef:49:1c:f0:16:27:4e:87:a1:
                    06:47:ab:4f:f8:bc:da:ee:c2:40:1e:0a:7d:d5:8b:
                    a8:42:0a:97:93:cc:ce:6e:be:18:6c:b0:53:44:2e:
                    65:7f:5f:47:63:92:49:ce:e5:16:28:d8:2b:2b:79:
                    c9:33:1b:4b:04:ca:4d:0b:42:b0:2c:7e:bb:08:cc:
                    93:9f:8e:cc:eb:0d:a5:43:af:5a:6d:c3:39:4e:96:
                    34:4f:f7:94:bc:e7:4b:25:1d:05:cc:a5:58:01:84:
                    9a:50:b6:2e:75:4e:a4:a8:2e:d7:a1:8e:d0:b2:e5:
                    f4:08:f9:18:9b:a5:5c:6f:26:98:1a:8b:ce:30:81:
                    35:bf:69:64:86:8c:a1:7b:f0:73:a8:cd:7a:83:c3:
                    12:c4:47:dd:f3:1b:38:0f:2c:47:ac:6a:bc:b5:40:
                    a8:0e:06:e6:ae:8c:b1:fe:2c:d7:49:fa:5b:f3:80:
                    b0:48:22:a2:1d:0e:00:d5:c4:20:14:33:7b:e6:79:
                    9e:d5:26:64:09:21:8e:81:f9:3c:f2:0d:42:80:ad:
                    b9:31:b7:96:3e:ec:8e:c3:78:25:05:7d:e7:a1:6d:
                    e9:c6:21:8c:83:4e:70:53:0e:2c:76:87:ea:d7:f0:
                    3c:67:a9:fe:7f:36:7b:03:79:00:ce:6b:1e:8b:f6:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:8E:D3:2D:0C:1F:79:71:C0:10:6D:E8:A6:F4:C8:BD:38:AE:E8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07582708794111F1B314CFEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.5.0/24
                  45.198.16.0-45.198.18.255
                  45.201.35.0/24
                  45.201.41.0-45.201.42.255
                  45.201.48.0/24
                  45.201.61.0/24
                  45.204.48.0-45.204.53.255
                  45.204.132.0/24
                  45.204.154.0/24
                  45.204.181.0/24
                  45.204.248.0/24
                  45.204.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:19:9e:75:27:94:fd:56:87:6a:fe:76:c8:d8:c4:e7:c8:3b:
         6f:4b:79:04:2f:77:b5:cd:19:e4:39:28:3b:1f:51:2f:64:eb:
         7c:0a:4c:cd:90:05:35:f0:47:a4:68:a5:86:f6:2b:fd:10:3a:
         33:66:d2:6a:2c:54:08:7f:83:76:bc:5b:fd:1b:75:b5:7b:fe:
         72:4a:18:a8:1e:7e:3e:52:8a:d3:d6:ce:4f:dc:a6:c8:ae:39:
         a6:be:b5:b6:bf:f7:97:30:f4:86:0f:a9:9c:69:03:d6:c5:76:
         43:9d:81:93:36:ff:c7:ef:b3:99:47:a2:39:38:cf:b4:74:e8:
         2b:ba:3a:25:df:69:c6:20:5e:90:2f:d6:bd:30:90:06:db:b5:
         36:cf:7b:f3:66:38:dc:32:b0:bb:98:59:31:bd:78:21:6e:f6:
         8d:84:df:ec:75:07:ee:81:90:0e:14:a8:55:e0:39:19:48:34:
         07:80:b6:88:c7:a1:9a:a5:c6:9e:91:56:50:30:34:3c:d1:ec:
         ed:09:58:bf:77:cb:e8:67:89:80:97:68:4d:e6:66:0f:3c:8c:
         0b:46:31:76:38:13:8e:e3:85:c4:61:70:a5:21:c8:f1:01:36:
         8c:08:2f:5b:26:49:e2:c7:37:f6:6c:a6:16:17:a0:a7:49:f4:
         fa:08:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:39 2026 by rpki-client