Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51A057A07FB711F188740FF0CE1D38B0.roa
File:                     51A057A07FB711F188740FF0CE1D38B0.roa (raw, json)
Hash identifier:          K54X4rTiPzQr71H+Myw87Iunkbsb5NhLK9yAkG+Sk98=
Subject key identifier:   E5:92:3B:88:99:E0:FC:1E:11:9F:9B:00:3F:AF:33:3C:E7:9F:0B:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C523
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51A057A07FB711F188740FF0CE1D38B0.roa
Signing time:             Tue 14 Jul 2026 19:07:55 +0000
ROA not before:           Tue 14 Jul 2026 19:07:50 +0000
ROA not after:            Fri 21 Aug 2026 19:07:50 +0000
asID:                     214143
IP address blocks:        45.195.3.0/24 maxlen: 24
                          45.195.157.0/24 maxlen: 24
                          45.195.158.0/24 maxlen: 24
                          45.197.135.0/24 maxlen: 24
                          45.198.69.0/24 maxlen: 24
                          45.198.75.0/24 maxlen: 24
                          45.198.81.0/24 maxlen: 24
                          45.198.84.0/24 maxlen: 24
                          45.198.86.0/24 maxlen: 24
                          45.198.89.0/24 maxlen: 24
                          45.198.90.0/24 maxlen: 24
                          45.198.97.0/24 maxlen: 24
                          45.198.104.0/24 maxlen: 24
                          45.198.109.0/24 maxlen: 24
                          45.198.112.0/24 maxlen: 24
                          45.198.138.0/24 maxlen: 24
                          45.198.163.0/24 maxlen: 24
                          45.198.168.0/24 maxlen: 24
                          45.198.181.0/24 maxlen: 24
                          45.206.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116003 (0x1c523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 14 19:07:50 2026 GMT
            Not After : Aug 21 19:07:50 2026 GMT
        Subject: CN=6a56890b-fb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f3:50:4b:55:d0:46:ce:2b:8d:58:db:37:38:
                    a8:c2:1f:32:19:e4:ae:36:99:ce:58:f8:a3:40:1e:
                    73:23:34:c1:5d:40:87:ac:e2:4f:bf:88:a7:d8:15:
                    f2:9e:6d:4b:dc:87:3f:e2:1a:06:80:ab:e4:04:ab:
                    a5:77:86:77:f0:6b:dd:9a:38:b7:30:37:22:fd:21:
                    7f:68:bf:83:fa:a2:2d:b0:9b:8c:17:65:1c:ed:94:
                    da:cb:4e:ea:9b:a8:45:14:b4:0b:d3:d1:2a:fa:7b:
                    c8:92:1c:d4:93:69:0d:76:94:b6:23:20:dc:7c:d0:
                    58:62:02:17:3c:14:54:19:9b:a6:29:7d:f9:cb:ee:
                    60:32:07:9d:32:20:21:47:70:e4:cf:e4:4b:f7:1c:
                    16:dd:ce:60:7b:03:a8:e8:e4:8e:0b:05:21:1f:11:
                    c2:fc:1b:6b:6c:ba:f9:1e:90:ce:52:7c:4e:a4:6e:
                    ba:91:92:7d:9d:ad:c5:b8:0e:de:39:62:09:08:99:
                    b0:5b:2d:11:a2:c5:d7:3c:21:24:96:e5:56:18:db:
                    e8:78:a4:2f:a4:b4:70:38:18:9a:2c:98:a0:49:e1:
                    2d:be:a0:4f:d0:d2:01:ce:cf:72:43:db:03:f1:a8:
                    f9:b8:4d:a7:36:fa:d8:8f:0b:70:f1:95:a9:b7:94:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:3B:88:99:E0:FC:1E:11:9F:9B:00:3F:AF:33:3C:E7:9F:0B:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51A057A07FB711F188740FF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.3.0/24
                  45.195.157.0-45.195.158.255
                  45.197.135.0/24
                  45.198.69.0/24
                  45.198.75.0/24
                  45.198.81.0/24
                  45.198.84.0/24
                  45.198.86.0/24
                  45.198.89.0-45.198.90.255
                  45.198.97.0/24
                  45.198.104.0/24
                  45.198.109.0/24
                  45.198.112.0/24
                  45.198.138.0/24
                  45.198.163.0/24
                  45.198.168.0/24
                  45.198.181.0/24
                  45.206.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:6c:4f:8c:fb:59:f8:a8:5b:ad:0c:49:a0:b5:4c:37:cb:
         e3:88:11:c4:c1:6e:10:3b:d0:8a:78:a3:8f:d0:34:d5:4d:32:
         56:88:37:7b:77:4a:c1:e8:c8:e5:95:05:e9:d2:82:88:23:69:
         52:ea:48:2b:2c:82:17:d6:3c:d3:d7:cd:5f:b5:08:91:66:7e:
         44:ce:bf:46:19:6d:fb:0b:9b:55:9f:4c:3c:98:aa:e2:3c:c6:
         ff:49:05:bb:47:bc:9a:5d:5d:d0:b0:fb:8c:9b:25:98:78:58:
         d8:3f:e6:76:23:8f:21:4c:7f:d9:29:26:05:e9:f8:64:b4:01:
         1f:06:8c:a5:df:36:d3:b9:8c:a1:a2:aa:c7:ca:f4:79:7a:e8:
         9c:36:13:bb:a0:c1:8b:6c:95:da:67:cd:34:e5:44:8b:97:e2:
         36:e4:3a:8e:45:d5:4b:a1:55:af:2d:a4:61:7b:c3:bc:ac:d7:
         6c:85:ef:dc:94:bd:c2:d1:46:5a:bd:6d:fd:8f:a1:36:1b:92:
         37:76:7d:4f:b8:dd:4f:89:e2:d0:d9:e9:41:e5:a8:92:2f:b3:
         86:6d:b6:71:07:f4:8b:d6:25:ab:24:67:8c:13:c4:9d:52:02:
         27:02:fe:0c:dd:03:0e:2a:86:4f:f1:b0:0a:bd:f3:b8:ab:4d:
         7a:bd:e0:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:34 2026 by rpki-client