Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53174BAE543611F18E050BF1CE1D38B0.roa
File:                     53174BAE543611F18E050BF1CE1D38B0.roa (raw, json)
Hash identifier:          qccP3PoqFSqkHZCvZFL+eEN16c9EJSnZUKApd4tiyEs=
Subject key identifier:   30:A0:C4:90:A4:44:5A:84:34:0E:7C:7D:E0:68:37:CD:50:E8:B6:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53174BAE543611F18E050BF1CE1D38B0.roa
Signing time:             Wed 20 May 2026 10:26:13 +0000
ROA not before:           Wed 20 May 2026 10:26:08 +0000
ROA not after:            Fri 10 Jul 2026 10:26:08 +0000
asID:                     202036
IP address blocks:        45.192.112.0/24 maxlen: 24
                          45.192.115.0/24 maxlen: 24
                          45.201.16.0/24 maxlen: 24
                          45.201.17.0/24 maxlen: 24
                          45.201.18.0/24 maxlen: 24
                          45.201.19.0/24 maxlen: 24
                          45.201.20.0/24 maxlen: 24
                          45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112168 (0x1b628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 20 10:26:08 2026 GMT
            Not After : Jul 10 10:26:08 2026 GMT
        Subject: CN=6a0d8c45-a1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:51:fb:2a:b3:e7:ba:49:ba:bb:56:9e:6e:
                    47:87:43:f4:d7:1a:20:3b:cd:2e:53:bb:18:71:b7:
                    d4:51:0f:8f:22:75:e3:1d:aa:41:87:72:77:09:60:
                    dc:fd:49:06:aa:c6:70:7d:ee:71:97:e5:8f:c4:20:
                    5e:96:59:ae:7e:7e:19:47:14:05:a8:e3:16:52:55:
                    6c:83:21:2b:a6:65:dd:29:3f:b0:66:96:65:ec:99:
                    42:0d:ed:60:5c:c0:5a:77:2a:e7:4b:95:e4:39:1e:
                    56:e7:18:84:7e:e9:69:99:22:1e:10:24:04:b4:87:
                    90:2b:52:56:73:eb:0e:7c:72:ee:1d:28:bd:6c:92:
                    e8:0b:78:49:d8:d8:79:90:fc:3a:6c:c7:fc:18:9b:
                    48:22:2f:60:d8:12:8c:c2:f3:e7:59:21:15:b0:29:
                    fa:f3:74:c4:29:e6:bf:86:af:77:11:35:13:7c:d7:
                    bb:35:92:41:94:6e:6d:b9:40:13:97:de:57:ed:73:
                    f8:00:05:94:af:b9:2f:c7:7b:9e:7a:0a:ca:cd:09:
                    d1:68:20:e8:c5:52:f9:64:d6:17:0d:fa:5d:63:1c:
                    a5:03:7c:bc:fb:05:7e:b6:be:ae:df:fc:38:9f:28:
                    09:e6:8c:1e:d3:dd:d3:af:29:b1:43:f3:b4:ba:14:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A0:C4:90:A4:44:5A:84:34:0E:7C:7D:E0:68:37:CD:50:E8:B6:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53174BAE543611F18E050BF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.112.0/24
                  45.192.115.0/24
                  45.201.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:39:48:69:33:8a:cc:30:20:0b:0d:a4:0b:67:68:7e:fa:28:
         dd:7b:57:17:fe:3b:f5:3c:b3:b6:61:a1:90:73:af:ac:eb:2d:
         08:2c:25:9b:32:9e:3b:ff:97:34:45:00:ad:ab:f3:b3:83:2b:
         00:e6:71:5a:b8:72:95:4a:a2:2c:e7:a7:cf:3d:02:b0:23:db:
         48:11:aa:c8:b4:cb:d9:cc:fe:6b:37:48:aa:de:f8:15:80:e0:
         f3:a4:b7:00:50:85:f4:fb:4c:a9:70:2b:cd:f1:ac:8b:98:d4:
         be:3e:06:2d:83:b8:5b:2a:b7:83:45:7d:d2:69:2f:a7:dd:33:
         3b:00:1e:03:72:4e:2e:3c:e7:b5:cd:c4:be:9b:8b:9f:ac:28:
         17:47:52:37:e8:68:ad:b7:2a:9e:3a:7f:8f:00:2e:21:eb:89:
         6e:c3:26:c6:43:82:64:cc:46:89:ba:f3:34:74:80:6c:e8:a4:
         d4:d3:79:f8:61:51:e9:0e:c3:a3:7d:3d:9e:4e:82:4d:3f:c0:
         21:f0:97:6e:bb:bb:65:58:87:fc:1e:72:e2:87:7d:f5:26:c0:
         3b:ef:da:1f:71:44:ba:7b:01:d2:f0:18:5c:6e:30:06:f0:75:
         fe:6b:48:67:64:7e:6a:5e:e6:95:6e:3a:0d:3f:ed:42:68:2b:
         75:26:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:27 2026 by rpki-client