Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3277EE24462D11F185873616CF1D38B0.roa
File:                     3277EE24462D11F185873616CF1D38B0.roa (raw, json)
Hash identifier:          IMqs+0kpO0HZrINOmbJjRmuwHJJV/JJnUkRIDOKGU6k=
Subject key identifier:   A9:DB:EC:DA:AD:19:70:C4:3A:73:88:28:10:8D:14:A7:62:7B:26:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B14F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3277EE24462D11F185873616CF1D38B0.roa
Signing time:             Sat 02 May 2026 13:45:36 +0000
ROA not before:           Sat 02 May 2026 13:45:30 +0000
ROA not after:            Mon 11 May 2026 13:45:30 +0000
asID:                     200283
IP address blocks:        45.195.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110927 (0x1b14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  2 13:45:30 2026 GMT
            Not After : May 11 13:45:30 2026 GMT
        Subject: CN=69f60000-5e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:b1:5a:8c:c4:cf:92:73:ee:aa:50:18:ae:
                    01:a0:cd:77:e4:3c:de:15:22:2d:9f:68:a1:de:ba:
                    0e:da:05:36:1d:18:58:08:f9:27:9b:74:2a:e6:6f:
                    70:a9:66:0a:b5:0e:24:59:09:49:bb:f7:64:05:c2:
                    4a:66:b1:c2:d8:86:f5:a1:ff:25:22:8d:e1:e4:18:
                    ae:a9:7e:b6:57:13:12:6d:69:00:30:40:4a:66:6a:
                    8d:b3:58:70:14:fd:8b:76:92:3c:31:f6:12:d0:46:
                    e0:f6:33:d5:e8:ed:46:f2:02:ab:b5:ff:81:e1:ca:
                    eb:f6:68:8a:e2:8c:ac:9c:4f:da:52:50:12:91:01:
                    e3:17:5c:7f:af:2f:01:c1:9b:1c:54:ee:65:04:74:
                    1a:fd:75:af:55:38:e2:9a:74:c0:de:63:47:73:71:
                    8f:04:79:fa:ac:8a:68:98:cb:94:5d:1b:13:52:e2:
                    72:ac:95:d7:3f:07:36:3a:f1:4c:d4:ac:f2:c3:eb:
                    fa:b7:e8:1a:5c:e7:46:61:e1:23:d2:8f:e9:22:66:
                    d3:fa:6a:07:8d:ac:3b:9f:a1:44:7e:45:50:1e:69:
                    93:01:51:07:a9:65:bc:c0:19:b8:67:62:77:5b:c4:
                    41:22:34:6a:3a:a4:3f:44:a3:8a:e7:16:f8:d7:2b:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:EC:DA:AD:19:70:C4:3A:73:88:28:10:8D:14:A7:62:7B:26:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3277EE24462D11F185873616CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:01:12:56:15:4b:3e:22:05:08:e6:e2:6c:d7:23:0c:cf:
         de:00:e3:77:ff:a0:4a:0e:c5:53:db:d1:cb:2d:9a:c2:4e:2e:
         98:6e:ea:a1:8e:e0:6d:75:2d:92:d3:e1:84:73:56:f9:1e:83:
         f2:ca:10:42:5f:dd:85:64:fb:1f:9e:32:60:91:48:fe:7a:54:
         b1:7c:79:51:f3:2b:8d:97:34:5e:13:80:97:0a:9b:4a:fb:2d:
         99:3e:3f:70:3b:d9:84:3f:9b:d8:ac:6b:0b:66:57:19:91:21:
         fe:8b:ad:73:01:f7:fd:54:a4:83:6a:04:6f:fb:59:ac:d3:47:
         16:db:a2:08:de:c0:03:1d:41:8a:ca:12:9c:37:5f:ce:a5:58:
         1d:cc:a3:16:2c:26:15:eb:eb:a7:c1:2d:cd:6e:7e:c5:e7:ad:
         54:9f:1d:ef:6e:34:ab:bb:71:a1:c6:20:1d:4f:ad:e5:b7:26:
         78:88:79:68:b5:31:36:be:7a:c2:ad:d9:57:04:fe:a2:75:9f:
         73:83:ba:a1:71:97:32:ad:f6:aa:81:77:e9:4c:b9:71:c2:3e:
         53:01:3a:e3:f8:33:d7:88:db:88:f1:cb:c9:47:f6:ea:b5:6c:
         34:6f:de:d2:80:e1:c1:6b:d0:53:d3:4f:f0:a8:c5:22:9e:08:
         f2:67:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:47 2026 by rpki-client