Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2348F4BE8F2211F19B6AD2C7CE1D38B0.roa
File:                     2348F4BE8F2211F19B6AD2C7CE1D38B0.roa (raw, json)
Hash identifier:          lzdtXF2XsSvvMYZRIihHpudf2M0SpYE1sHiCphYc7ps=
Subject key identifier:   E7:E2:49:BF:BF:F5:CE:A2:D5:59:F0:6F:2C:84:21:DC:D6:73:D4:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C995
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2348F4BE8F2211F19B6AD2C7CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 10:00:21 +0000
ROA not before:           Mon 03 Aug 2026 10:00:17 +0000
ROA not after:            Thu 10 Sep 2026 10:00:17 +0000
asID:                     63139
IP address blocks:        45.197.64.0/24 maxlen: 24
                          45.197.65.0/24 maxlen: 24
                          45.197.100.0/24 maxlen: 24
                          45.197.101.0/24 maxlen: 24
                          45.197.102.0/24 maxlen: 24
                          45.197.113.0/24 maxlen: 24
                          45.197.114.0/24 maxlen: 24
                          45.197.115.0/24 maxlen: 24
                          45.197.116.0/24 maxlen: 24
                          45.197.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117141 (0x1c995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 10:00:17 2026 GMT
            Not After : Sep 10 10:00:17 2026 GMT
        Subject: CN=6a7066b5-077e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9d:44:65:79:88:f1:ea:a1:ad:98:f1:6a:c1:
                    19:49:ef:08:ba:3b:59:b4:59:a5:e1:f2:ba:6d:f8:
                    d5:30:ff:98:06:4d:4d:6d:52:9d:e5:8d:a3:91:e1:
                    30:cf:8c:8c:2a:b5:dc:0c:13:72:92:34:5f:3a:ea:
                    e4:70:e3:cd:6e:6e:29:0f:e9:6a:d4:66:dc:4d:80:
                    34:50:7a:2b:eb:e7:6a:5c:a6:5c:7a:b7:b2:85:31:
                    10:2b:74:94:76:56:88:86:b2:d9:fc:bb:df:29:4c:
                    12:b3:2f:1d:67:df:8c:6c:28:80:46:3c:ad:c9:99:
                    a2:00:5c:34:15:a1:5a:69:87:80:00:af:90:bd:87:
                    29:24:b0:7e:a6:95:24:04:12:a7:24:e2:2e:db:c7:
                    df:d2:c8:ae:13:7a:7d:ed:f6:9b:d5:46:09:93:71:
                    7b:d0:a2:68:43:4f:33:f3:80:fc:f0:d7:e0:ca:55:
                    64:49:ab:9e:0b:29:dc:52:e7:23:8d:c3:1c:05:45:
                    39:5b:d0:aa:be:ce:d4:de:6f:e8:5e:49:00:e2:7b:
                    32:4c:5a:b5:99:83:89:f9:84:72:b6:46:04:1b:5d:
                    a0:27:3b:f4:40:6a:17:be:e5:a6:33:02:00:f9:99:
                    35:b4:6f:bc:25:26:b3:fd:b5:9f:14:b4:fe:b2:df:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:49:BF:BF:F5:CE:A2:D5:59:F0:6F:2C:84:21:DC:D6:73:D4:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2348F4BE8F2211F19B6AD2C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.64.0/23
                  45.197.100.0-45.197.102.255
                  45.197.113.0-45.197.117.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:30:73:cf:44:9f:86:54:73:21:49:9f:4f:c4:20:9d:67:
         37:68:4a:f7:02:85:04:7c:fa:a6:28:6f:6b:ca:73:67:36:74:
         0d:3d:4f:16:a1:17:69:bb:4e:d9:ee:7b:8c:90:6d:c1:bc:2e:
         1a:51:cd:78:f6:f0:91:9e:c5:b4:90:74:a6:ec:00:c6:11:da:
         38:69:5d:3e:1b:74:50:9b:67:7d:cb:a1:ea:5d:6c:32:86:dc:
         ed:d5:d7:29:9d:15:fb:f4:bd:60:c5:82:87:35:84:77:ec:e3:
         69:35:67:a9:35:10:f0:39:64:46:aa:eb:84:a2:fc:5f:36:d5:
         3c:6a:14:6e:9f:27:f8:87:cc:8b:80:51:34:d0:e0:76:14:74:
         25:e7:c4:13:54:39:f3:8d:3e:2a:44:e2:10:69:bf:d8:b8:3e:
         20:53:d3:b4:ee:9b:bb:70:2a:b8:59:16:1a:a2:07:29:13:ad:
         71:03:6e:11:51:43:1f:72:3f:c1:2e:75:8c:40:76:d2:56:a4:
         07:87:4e:93:7e:7a:5e:2d:d4:b3:45:f0:9e:a0:11:86:61:b0:
         44:20:13:e5:a2:b5:35:96:fb:f1:78:b2:48:f0:6f:97:11:c8:
         34:be:cd:82:cd:56:6b:f8:e1:fa:09:29:2a:53:5b:3d:07:ed:
         1d:56:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----