Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/371611BA454A11F18592C9B1CE1D38B0.roa
File:                     371611BA454A11F18592C9B1CE1D38B0.roa (raw, json)
Hash identifier:          O+6Tbw2xcOmeuTz4gzpmt7VEJJDyxGsGTRo0aQ7QV/g=
Subject key identifier:   C1:04:15:5B:22:CB:F6:21:1B:0D:53:99:69:5A:C7:15:ED:63:94:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B065
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/371611BA454A11F18592C9B1CE1D38B0.roa
Signing time:             Fri 01 May 2026 10:40:48 +0000
ROA not before:           Fri 01 May 2026 10:40:44 +0000
ROA not after:            Thu 25 Feb 2027 10:40:44 +0000
asID:                     154616
IP address blocks:        45.198.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 05 May 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110693 (0x1b065)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  1 10:40:44 2026 GMT
            Not After : Feb 25 10:40:44 2027 GMT
        Subject: CN=69f48330-b80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:0d:e8:e4:a9:3d:29:da:e3:34:53:b5:24:
                    9d:57:d6:a5:bd:96:7e:79:ed:3c:fa:b7:30:0e:ae:
                    45:12:31:6b:06:e8:60:b5:5d:05:7d:ed:15:eb:c8:
                    78:dd:a3:4c:ba:36:5a:1b:d3:31:a6:6b:0e:87:03:
                    76:5d:86:dd:d0:f3:3b:95:e7:04:ab:3a:94:e4:4a:
                    90:cc:43:42:3f:2c:15:b0:4c:9c:6b:37:36:8d:67:
                    e3:bd:ae:19:9e:89:c8:d6:6a:20:a8:a9:34:99:bd:
                    03:a9:6f:56:9f:93:ac:f4:08:bb:2f:c2:c7:a8:35:
                    d4:a6:bb:2d:74:0d:fc:ca:ba:67:0d:64:8a:6e:f3:
                    0b:f2:57:84:1e:b0:b8:85:41:ac:13:4a:d3:56:ed:
                    1b:13:2b:ab:08:31:8b:b4:cc:a5:a0:c4:01:f4:af:
                    80:c5:98:5d:4f:6a:d4:c7:86:50:e6:ef:bc:8d:6b:
                    a4:2f:89:0a:f5:56:ab:31:d3:4e:df:26:f9:91:51:
                    88:12:77:41:cd:39:fc:13:73:4e:5d:c2:eb:d5:d8:
                    cc:55:3a:50:da:1e:05:82:0a:a4:70:7a:b9:73:af:
                    e4:3f:1a:7f:89:bd:c2:cc:c0:8e:55:ca:cb:a1:f6:
                    1e:7f:71:32:eb:79:0d:65:89:97:6c:55:5a:fe:24:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:15:5B:22:CB:F6:21:1B:0D:53:99:69:5A:C7:15:ED:63:94:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/371611BA454A11F18592C9B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:3f:9e:ad:1d:22:f3:64:82:a1:a5:49:0e:ee:51:f3:46:
         13:be:6d:b1:7c:c5:76:7b:e2:7d:23:45:9c:65:ec:78:c1:db:
         61:b8:0c:83:79:42:df:42:54:07:87:bb:86:53:fe:58:0f:90:
         be:92:dd:b2:8b:dd:47:03:45:be:e7:34:62:87:1e:26:4c:b2:
         c5:b8:ed:de:b7:0b:1f:4b:4f:16:12:c7:85:f7:d3:af:a9:96:
         ce:07:cf:6a:d8:af:47:82:94:2b:1f:64:9c:f5:73:d2:75:05:
         dc:bc:77:b5:7f:dc:d2:2b:ff:6d:06:53:1e:47:f4:77:75:5b:
         4e:89:47:dc:e2:f1:5c:75:60:eb:0d:30:8d:47:a9:4d:ed:88:
         6d:24:b8:7d:53:7a:91:82:ea:ef:d1:5c:9f:7c:56:81:47:e2:
         38:64:b4:24:66:99:a9:06:e3:cd:9a:92:26:b5:8e:3b:ee:29:
         b3:74:d9:cb:fa:76:be:1c:f1:03:c7:15:42:ad:2f:ac:a6:3b:
         5c:fc:3a:9e:bb:9d:ec:2d:0a:be:95:89:e0:3c:6b:a5:8c:6d:
         01:aa:1d:ea:54:cf:54:62:63:f7:0e:38:5d:0a:32:d7:b6:ad:
         41:91:67:e1:9f:55:de:f7:69:30:91:f4:17:a4:ca:86:c9:ef:
         8a:3b:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 02:36:47 2026 by rpki-client