Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CC36686E2211F195BC1EDBCE1D38B0.roa
File:                     39CC36686E2211F195BC1EDBCE1D38B0.roa (raw, json)
Hash identifier:          3YKVCAdX8SyutHRF+/chO4Z2VCXBw2WSFrO5tYoQVyk=
Subject key identifier:   50:79:62:BC:27:E1:C9:B2:27:D2:D3:17:57:4A:6D:BF:4E:93:13:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CC36686E2211F195BC1EDBCE1D38B0.roa
Signing time:             Mon 22 Jun 2026 10:07:51 +0000
ROA not before:           Mon 22 Jun 2026 10:07:46 +0000
ROA not after:            Tue 28 Jul 2026 10:07:46 +0000
asID:                     48031
IP address blocks:        45.200.181.0/24 maxlen: 24
                          45.200.182.0/24 maxlen: 24
                          45.200.183.0/24 maxlen: 24
                          45.200.184.0/24 maxlen: 24
                          45.200.185.0/24 maxlen: 24
                          45.200.186.0/24 maxlen: 24
                          45.200.187.0/24 maxlen: 24
                          45.200.188.0/24 maxlen: 24
                          45.200.189.0/24 maxlen: 24
                          45.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114558 (0x1bf7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 10:07:46 2026 GMT
            Not After : Jul 28 10:07:46 2026 GMT
        Subject: CN=6a390976-f058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:66:6f:f7:f9:da:7b:d4:a9:75:d2:3e:54:
                    78:58:99:9c:74:58:8c:51:ce:8c:5d:df:44:1b:6f:
                    3c:1b:58:89:4b:a3:a0:d7:3f:6d:1b:5b:06:5c:f8:
                    f2:40:a0:f0:2f:9e:6e:71:1d:28:19:29:70:e9:e3:
                    dd:94:38:3a:85:29:6e:ed:6e:4b:ef:4f:7c:3c:48:
                    9a:92:01:fe:42:73:9b:03:1b:ce:c4:1c:e3:fe:41:
                    cc:18:69:80:18:b1:99:d1:93:ad:e0:69:57:95:c1:
                    92:fa:f0:71:79:30:db:5e:e3:dd:96:f0:83:86:63:
                    2e:ae:08:ac:49:fe:d6:d8:fe:81:04:36:68:75:db:
                    53:d3:0f:3b:05:d2:5f:e7:8d:14:a7:ef:ee:b6:d1:
                    4a:ef:e5:1b:aa:eb:c2:70:c4:90:a5:01:f6:df:a7:
                    12:d6:f8:df:1f:2e:12:b9:bb:c3:5b:22:d1:2e:80:
                    14:e3:9e:1c:9d:4b:28:39:95:14:16:02:5f:09:9e:
                    1e:2f:cb:e1:45:03:82:63:f5:ef:97:f9:ea:20:8b:
                    e6:f6:04:60:9c:bd:5b:7c:0d:47:04:fb:bf:27:cd:
                    25:14:07:33:fc:41:50:20:8f:a4:ad:b4:6e:89:50:
                    f0:30:c0:94:01:a2:7f:8b:ce:82:ad:85:18:0d:82:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:62:BC:27:E1:C9:B2:27:D2:D3:17:57:4A:6D:BF:4E:93:13:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CC36686E2211F195BC1EDBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.181.0-45.200.190.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:b2:cc:d1:27:59:ce:3e:b4:34:e3:54:8e:a7:a0:7b:b6:38:
         d9:9d:52:a3:17:31:a5:5f:5a:db:39:ff:ad:87:65:83:6b:1b:
         f8:eb:a6:60:be:57:16:fd:17:8f:02:29:44:91:04:56:0e:86:
         fc:29:1b:f8:31:be:cd:92:8a:06:1f:0b:20:b4:78:94:60:ca:
         37:f9:3f:26:84:8e:3c:3a:8e:1d:9d:14:b8:fb:8d:14:7e:dd:
         5a:0a:93:b0:c0:a4:1c:e5:c4:f4:b2:a2:cc:dc:3a:8d:1c:6b:
         45:c3:20:4c:ed:88:3d:4c:e0:a1:ea:b7:41:24:c2:de:b3:d1:
         66:63:d0:db:c9:23:bd:d5:80:3a:b9:34:c1:6c:7c:62:c6:0a:
         4a:3e:e0:71:99:1f:05:15:d5:cd:81:6d:87:0d:b8:6e:2f:a7:
         eb:50:3d:a5:50:65:49:82:8c:74:bd:0c:a1:ed:1a:ef:0c:11:
         59:45:17:49:92:a4:63:3e:54:c9:ab:9a:39:80:26:14:55:30:
         bc:46:61:b0:57:e9:eb:3f:25:4b:df:39:76:56:8a:ba:c4:bd:
         89:49:4f:71:9d:2f:5d:77:06:ff:ce:94:7a:28:ff:2d:12:53:
         76:30:5e:b7:39:a8:ac:92:4d:36:d0:31:d1:18:62:d3:98:27:
         84:66:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client