Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F7478100B1111F184DDA898DAE4EC9C.roa
File:                     3F7478100B1111F184DDA898DAE4EC9C.roa (raw, json)
Hash identifier:          Yjj2ps8aslXAv9rucCeOP4rEVlAfFaToONrIDTHWrS8=
Subject key identifier:   77:A0:98:94:AD:3A:ED:8F:6F:C3:75:DF:7A:12:DF:CF:46:B9:80:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019E28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F7478100B1111F184DDA898DAE4EC9C.roa
Signing time:             Mon 16 Feb 2026 08:26:54 +0000
ROA not before:           Mon 16 Feb 2026 08:26:49 +0000
ROA not after:            Fri 20 Mar 2026 08:26:49 +0000
asID:                     397423
IP address blocks:        45.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106024 (0x19e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 08:26:49 2026 GMT
            Not After : Mar 20 08:26:49 2026 GMT
        Subject: CN=6992d4cd-a77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:65:74:cc:d1:50:c1:fe:14:24:7d:fd:2b:
                    d1:24:cf:00:05:ff:be:cc:10:d3:b5:54:2f:a3:9a:
                    b6:53:79:bc:e1:ca:6c:10:02:3a:51:24:c8:9b:f6:
                    be:a5:a0:da:8f:b3:c7:a6:a6:a4:1d:a8:f3:53:3a:
                    b7:bb:03:8b:9d:99:5f:b1:46:7a:1c:05:4a:03:a4:
                    65:24:ab:aa:fa:e3:d8:f7:4e:0d:2d:42:9d:fa:05:
                    5e:46:bc:f1:89:fa:f0:d8:74:53:af:ab:40:9b:7a:
                    c6:fe:5c:0a:87:1b:64:c9:40:38:1e:c5:9a:81:a9:
                    a6:64:d9:3d:f6:29:63:5d:6b:5c:ca:3b:2e:4e:01:
                    6c:38:2f:6c:41:f9:b5:a0:95:4b:85:66:f3:50:78:
                    46:f9:ec:dc:19:53:db:cc:2e:4e:47:63:04:a9:04:
                    37:86:4b:e5:d2:a6:55:5e:3a:24:27:16:a3:23:40:
                    5c:e0:86:6d:22:34:73:3f:99:72:90:c8:03:8e:bc:
                    f7:66:2b:ce:f7:2d:0d:3b:52:db:da:0b:bb:de:14:
                    d7:b0:50:ed:fd:ea:94:96:f8:eb:57:65:89:64:87:
                    55:e8:00:78:b6:e3:03:34:d2:60:e5:c8:c9:2e:81:
                    82:ed:52:5e:6b:da:17:61:2c:8b:2c:d6:f9:16:fb:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A0:98:94:AD:3A:ED:8F:6F:C3:75:DF:7A:12:DF:CF:46:B9:80:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F7478100B1111F184DDA898DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:90:1a:6f:92:14:bd:8a:e9:26:42:66:d8:fb:24:1a:a0:25:
         05:18:71:ad:9e:f2:0a:8c:be:8f:9e:0d:f7:1c:88:dd:c8:83:
         18:c5:17:68:91:19:3d:8b:da:f7:78:3a:50:93:68:4f:8c:0d:
         42:51:bd:7f:07:aa:52:a3:a3:44:aa:e7:aa:a4:a0:31:88:5a:
         18:e6:bd:7b:79:08:fa:da:47:ba:4c:3f:b6:8a:24:fa:ac:45:
         ec:28:3d:ef:e2:1e:6b:e8:27:57:7a:98:24:82:c9:6f:0a:49:
         85:1e:ad:b9:da:17:05:70:67:15:55:54:ec:70:c5:91:ca:1d:
         a4:10:fc:93:8e:d7:28:86:2c:3b:2c:74:28:b9:c1:67:a4:ce:
         b6:46:30:22:63:c7:d1:de:aa:ae:22:bc:ef:17:37:1b:5d:1e:
         ba:c5:00:be:78:27:07:0a:1a:df:ce:95:3e:27:e7:56:6f:b9:
         c5:d4:51:c8:ac:6f:f8:31:f6:ca:c0:e6:5c:bb:3f:93:02:51:
         cc:e0:f3:e5:57:c7:63:91:89:2b:7f:22:e0:c3:d1:1b:ad:02:
         8e:a6:08:7a:eb:5a:42:7f:5a:8e:47:f2:9a:44:e8:9f:b8:29:
         0c:6b:d0:a9:c8:f1:33:48:d1:c0:4c:57:ce:e2:03:4b:2f:aa:
         a8:80:aa:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ4oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE2MDgyNjQ5WhcNMjYwMzIwMDgyNjQ5WjAYMRYw
FAYDVQQDEw02OTkyZDRjZC1hNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2alldMzRUMH+FCR9/SvRJM8ABf++zBDTtVQvo5q2U3m84cpsEAI6USTI
m/a+paDaj7PHpqakHajzUzq3uwOLnZlfsUZ6HAVKA6RlJKuq+uPY904NLUKd+gVe
Rrzxifrw2HRTr6tAm3rG/lwKhxtkyUA4HsWagammZNk99iljXWtcyjsuTgFsOC9s
Qfm1oJVLhWbzUHhG+ezcGVPbzC5OR2MEqQQ3hkvl0qZVXjokJxajI0Bc4IZtIjRz
P5lykMgDjrz3ZivO9y0NO1Lb2gu73hTXsFDt/eqUlvjrV2WJZIdV6AB4tuMDNNJg
5cjJLoGC7VJea9oXYSyLLNb5FvtClwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHeg
mJStOu2Pb8N133oS389GuYBSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRjc0NzgxMDBCMTExMUYxODREREE4OThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcI2MA0GCSqGSIb3DQEBCwUA
A4IBAQACkBpvkhS9iukmQmbY+yQaoCUFGHGtnvIKjL6Png33HIjdyIMYxRdokRk9
i9r3eDpQk2hPjA1CUb1/B6pSo6NEqueqpKAxiFoY5r17eQj62ke6TD+2iiT6rEXs
KD3v4h5r6CdXepgkgslvCkmFHq252hcFcGcVVVTscMWRyh2kEPyTjtcohiw7LHQo
ucFnpM62RjAiY8fR3qquIrzvFzcbXR66xQC+eCcHChrfzpU+J+dWb7nF1FHIrG/4
MfbKwOZcuz+TAlHM4PPlV8djkYkrfyLgw9EbrQKOpgh661pCf1qOR/KaROifuCkM
a9CpyPEzSNHATFfO4gNLL6qogKpi
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:57:58 2026 by rpki-client