Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F5F6CE86FC911F1B050EDDFCE1D38B0.roa
File:                     1F5F6CE86FC911F1B050EDDFCE1D38B0.roa (raw, json)
Hash identifier:          pcREN1hDslFsFz/1/uMe3QMyFRAqSeL3jg+XDRlKfyo=
Subject key identifier:   AC:DE:C6:8A:C3:BE:C5:6D:26:9C:D4:55:E4:1F:DF:48:9B:B5:F5:16
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C02E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F5F6CE86FC911F1B050EDDFCE1D38B0.roa
Signing time:             Wed 24 Jun 2026 12:35:03 +0000
ROA not before:           Wed 24 Jun 2026 12:34:58 +0000
ROA not after:            Thu 30 Jul 2026 12:34:58 +0000
asID:                     328608
IP address blocks:        45.196.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114734 (0x1c02e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 24 12:34:58 2026 GMT
            Not After : Jul 30 12:34:58 2026 GMT
        Subject: CN=6a3bcef7-187b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:c4:35:45:30:7b:38:60:f7:4c:66:3e:ca:
                    67:7b:6a:69:6a:0d:0f:f6:75:9c:7e:b3:23:bf:ef:
                    31:f4:a7:8d:f6:0d:7d:83:90:59:77:ba:39:3a:9b:
                    c6:fb:0d:8b:b4:36:40:78:61:98:15:11:7e:4e:e1:
                    74:ef:9f:5f:a4:e1:f0:d6:67:ba:9c:86:7e:d4:35:
                    50:81:52:f9:48:a1:87:bb:55:d2:44:d2:f3:2e:12:
                    21:67:2a:4b:8f:f0:3b:e4:a7:39:50:66:8b:39:1b:
                    01:20:f1:7c:fe:fd:dc:15:8d:a7:99:83:6d:61:51:
                    bf:b2:73:c4:49:2e:8a:61:e6:67:7a:2f:02:52:89:
                    1c:6d:99:e0:8f:a1:23:52:e0:ac:82:70:51:17:e4:
                    09:07:98:3c:7e:13:46:0b:07:1e:1d:a1:3a:96:88:
                    df:5f:a0:0f:b4:f3:3f:d7:0a:57:17:74:0c:af:a8:
                    54:0c:06:f4:0f:4f:41:9f:3b:9f:77:73:37:26:d1:
                    fb:9d:03:dc:b9:ad:17:ef:16:ca:e9:cd:3b:5b:94:
                    a6:f1:c6:76:08:48:3a:1a:e1:28:25:71:50:10:52:
                    b3:93:e5:c1:90:d1:4a:b8:59:b0:e2:e2:f8:59:09:
                    63:51:df:64:b1:3b:62:bf:57:0b:98:7c:69:4c:b9:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DE:C6:8A:C3:BE:C5:6D:26:9C:D4:55:E4:1F:DF:48:9B:B5:F5:16
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F5F6CE86FC911F1B050EDDFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:ed:7b:f9:e5:ea:66:76:70:61:56:ec:26:1a:9a:2d:80:
         1a:eb:c5:3a:fd:06:29:fe:04:4b:60:93:95:5e:e4:f9:36:6a:
         22:b4:16:17:52:c8:24:88:66:8b:55:05:8c:d8:f2:e4:58:aa:
         4d:09:10:ad:17:fe:76:c3:bd:17:62:21:6d:39:12:5f:70:0d:
         69:9f:52:1c:2e:2b:5c:ea:ec:fb:57:20:eb:cb:c1:34:0f:ae:
         f4:31:5d:ce:0c:0a:67:c3:e2:83:79:dc:7c:a0:ac:f0:0d:d8:
         5c:34:6b:85:dc:ac:d9:3a:e1:ef:08:9b:82:34:f0:71:15:ee:
         c5:8b:b4:e2:39:6a:a0:90:90:d1:00:89:d5:e0:99:03:dc:ce:
         f4:28:ca:3d:df:f8:3b:de:4f:c6:0e:2f:3b:24:d3:43:81:f9:
         f5:ba:d5:ef:53:6d:2b:55:e9:dd:7b:67:38:8c:12:61:05:30:
         e0:af:35:47:5c:d7:c0:2a:a3:b3:1c:9f:63:1a:1d:93:f5:42:
         b7:1b:e7:d9:34:4c:9e:b0:66:89:c5:dd:65:52:e3:3f:aa:d4:
         ae:a0:56:33:39:ab:3c:15:26:06:3d:ae:9f:12:cb:b7:46:35:
         92:28:8d:90:66:9c:d2:d6:3a:54:53:70:a0:56:02:df:11:e8:
         50:8e:8c:d9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcAuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI0MTIzNDU4WhcNMjYwNzMwMTIzNDU4WjAYMRYw
FAYDVQQDEw02YTNiY2VmNy0xODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqBPENUUwezhg90xmPspne2ppag0P9nWcfrMjv+8x9KeN9g19g5BZd7o5
OpvG+w2LtDZAeGGYFRF+TuF0759fpOHw1me6nIZ+1DVQgVL5SKGHu1XSRNLzLhIh
ZypLj/A75Kc5UGaLORsBIPF8/v3cFY2nmYNtYVG/snPESS6KYeZnei8CUokcbZng
j6EjUuCsgnBRF+QJB5g8fhNGCwceHaE6lojfX6APtPM/1wpXF3QMr6hUDAb0D09B
nzufd3M3JtH7nQPcua0X7xbK6c07W5Sm8cZ2CEg6GuEoJXFQEFKzk+XBkNFKuFmw
4uL4WQljUd9ksTtiv1cLmHxpTLmnNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKze
xorDvsVtJpzUVeQf30ibtfUWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRjVGNkNFODZGQzkxMUYxQjA1MEVEREZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQeMA0GCSqGSIb3DQEBCwUA
A4IBAQCEWu17+eXqZnZwYVbsJhqaLYAa68U6/QYp/gRLYJOVXuT5NmoitBYXUsgk
iGaLVQWM2PLkWKpNCRCtF/52w70XYiFtORJfcA1pn1IcLitc6uz7VyDry8E0D670
MV3ODApnw+KDedx8oKzwDdhcNGuF3KzZOuHvCJuCNPBxFe7Fi7TiOWqgkJDRAInV
4JkD3M70KMo93/g73k/GDi87JNNDgfn1utXvU20rVende2c4jBJhBTDgrzVHXNfA
KqOzHJ9jGh2T9UK3G+fZNEyesGaJxd1lUuM/qtSuoFYzOas8FSYGPa6fEsu3RjWS
KI2QZpzS1jpUU3CgVgLfEehQjozZ
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:48 2026 by rpki-client