Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2600346E962B11F181E1ACE4CE1D38B0.roa
File:                     2600346E962B11F181E1ACE4CE1D38B0.roa (raw, json)
Hash identifier:          AR4Ta51PpxfJspVFu8pF28A9GhT8xHQUFzOtVHaJ+jw=
Subject key identifier:   CB:36:95:88:76:4D:5C:08:5A:4D:6E:E9:42:C8:B9:CC:7D:0C:CF:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2600346E962B11F181E1ACE4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:52:29 +0000
ROA not before:           Wed 12 Aug 2026 08:52:25 +0000
ROA not after:            Sun 12 Aug 2029 08:52:25 +0000
asID:                     17561
IP address blocks:        45.196.243.0/24 maxlen: 24
                          45.196.248.0/24 maxlen: 24
                          45.196.249.0/24 maxlen: 24
                          45.200.133.0/24 maxlen: 24
                          45.200.134.0/24 maxlen: 24
                          45.200.135.0/24 maxlen: 24
                          45.200.140.0/24 maxlen: 24
                          45.200.141.0/24 maxlen: 24
                          45.200.142.0/24 maxlen: 24
                          45.200.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117725 (0x1cbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:52:25 2026 GMT
            Not After : Aug 12 08:52:25 2029 GMT
        Subject: CN=6a7c344d-e98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:bf:7a:c0:76:37:e3:23:0c:aa:c6:e7:7b:
                    3f:d7:c0:ca:5a:22:ac:32:f1:c3:a6:46:09:3d:43:
                    90:81:1d:28:d4:2a:a6:78:48:7e:fb:a8:dd:7d:ba:
                    92:e1:8b:c2:a2:f2:0f:d3:ba:ee:9c:28:07:88:75:
                    2d:de:ea:15:f5:7e:ed:6e:69:41:e3:0f:05:20:0c:
                    85:6d:c1:e7:6e:13:67:dd:d6:3d:ec:6e:1d:a7:e1:
                    2c:84:1a:cf:ca:53:c4:50:d9:df:42:72:eb:58:09:
                    d5:9b:53:6f:41:bb:c5:b0:e5:7e:1e:93:a2:22:57:
                    1f:2b:be:7c:34:df:b8:5d:3e:11:b1:5e:b6:07:7a:
                    e1:0b:5f:93:38:cb:23:06:45:52:f8:06:9a:2d:e1:
                    36:76:f7:8c:31:7d:80:97:38:dd:80:68:49:6f:ca:
                    8a:d7:b6:ad:d7:86:db:42:da:3e:fa:0b:a6:ff:46:
                    5d:5b:63:3c:c4:f7:53:9c:bc:af:48:00:f9:45:98:
                    52:37:5e:6a:1c:89:f4:f3:4d:df:9a:5f:e8:97:99:
                    75:ce:4a:b8:78:33:30:10:a5:fc:b9:24:bc:fa:b3:
                    2b:6c:f0:58:3a:65:e7:b1:04:de:15:ba:f8:ea:66:
                    7f:1f:f1:5c:38:18:b3:cd:c9:f9:57:df:41:7f:96:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:95:88:76:4D:5C:08:5A:4D:6E:E9:42:C8:B9:CC:7D:0C:CF:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2600346E962B11F181E1ACE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.243.0/24
                  45.196.248.0/23
                  45.200.133.0-45.200.135.255
                  45.200.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:84:a0:a9:f3:51:71:6c:3a:17:15:f8:53:12:da:49:95:
         c1:7d:38:d1:2a:91:d7:c1:3d:24:ff:05:2a:09:35:e1:cd:a0:
         fc:37:61:52:2e:19:0e:1e:d9:ed:bd:b7:b6:e1:89:ef:2e:94:
         ee:05:24:4e:91:6e:72:ae:c8:90:3f:ca:5d:bd:e4:c6:15:a5:
         70:05:24:11:08:5d:0f:8d:0c:68:0e:4c:82:c1:6a:a7:0c:0e:
         6c:81:46:ef:a1:27:d8:58:5c:15:ff:7d:69:15:cd:4e:a9:7e:
         27:65:fe:54:14:b0:a1:32:17:90:04:ac:d7:6b:ad:50:7d:e3:
         50:1c:4f:7d:49:68:5f:29:f9:51:59:e0:00:9b:79:56:18:83:
         8c:d3:82:ba:83:42:2b:0e:56:b7:90:b6:21:30:5c:7e:4b:bf:
         bf:44:59:88:68:60:2d:36:e4:1a:d6:ba:8f:45:2a:bb:18:ed:
         bc:ea:5d:42:a3:fb:b3:36:54:1f:92:bf:9b:ef:91:0a:be:42:
         a6:fc:90:a7:ad:54:f0:6d:b6:de:fd:7e:cf:07:da:7c:79:69:
         c7:c6:43:de:29:6e:d3:a4:b5:d0:53:b5:c5:52:c8:4e:58:e2:
         68:57:7e:19:5d:cd:45:33:e0:92:5c:85:62:3d:31:2f:4e:e0:
         68:f8:e4:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----