Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548B32706E2111F1BBA33AD5CE1D38B0.roa
File:                     548B32706E2111F1BBA33AD5CE1D38B0.roa (raw, json)
Hash identifier:          mCj3GTyUWSkXlroG5mcTUOv0EKeXKd4BmzCluHyarng=
Subject key identifier:   16:DB:02:09:F7:F6:76:7C:78:5C:A3:69:32:09:D3:BE:BE:A3:FD:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548B32706E2111F1BBA33AD5CE1D38B0.roa
Signing time:             Mon 22 Jun 2026 10:01:26 +0000
ROA not before:           Mon 22 Jun 2026 10:01:21 +0000
ROA not after:            Tue 28 Jul 2026 10:01:21 +0000
asID:                     202656
IP address blocks:        45.192.59.0/24 maxlen: 24
                          45.192.63.0/24 maxlen: 24
                          45.195.161.0/24 maxlen: 24
                          45.195.162.0/24 maxlen: 24
                          45.195.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114556 (0x1bf7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 10:01:21 2026 GMT
            Not After : Jul 28 10:01:21 2026 GMT
        Subject: CN=6a3907f6-27e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:d3:a4:f0:b3:01:b5:78:6a:92:e4:8d:54:
                    4c:a5:58:87:fe:6f:ea:f5:e5:c4:3c:02:7c:ee:40:
                    e4:36:bf:df:87:c6:fd:81:dc:c8:20:ee:38:b0:23:
                    aa:49:f4:fd:07:fa:62:c0:62:86:ca:a6:3a:6f:65:
                    d3:cb:c4:73:65:b9:47:06:93:f8:f3:fc:de:17:ed:
                    c3:ee:d5:60:ec:3e:27:1b:ac:47:15:a5:d1:0a:e5:
                    2c:db:01:98:b4:8b:4d:46:07:b4:28:ac:76:4f:06:
                    02:55:05:c7:33:a0:2d:17:74:39:f9:38:bf:24:09:
                    a6:ea:ea:43:62:63:5b:50:66:ce:4a:7a:66:c0:db:
                    e9:b6:47:ec:74:e7:7e:54:8e:b6:1a:31:62:e8:25:
                    1f:75:36:cc:30:4c:58:8a:9e:40:b1:57:6a:3a:40:
                    fb:a0:f7:c0:0b:e4:7f:28:df:e8:83:ec:b1:f3:ae:
                    20:fd:cb:b5:c8:e3:6d:d4:ab:c5:7b:b3:9e:de:ad:
                    cc:a2:1d:95:75:19:06:69:7c:74:ea:67:e9:00:0e:
                    10:d2:98:33:b8:22:3d:5a:9c:f5:90:46:90:3c:8b:
                    e9:95:f5:30:e9:00:9c:3e:ad:7a:39:4d:ae:9d:62:
                    ab:dc:65:93:59:7f:ce:91:5b:63:ba:96:09:ad:6e:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:02:09:F7:F6:76:7C:78:5C:A3:69:32:09:D3:BE:BE:A3:FD:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548B32706E2111F1BBA33AD5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.59.0/24
                  45.192.63.0/24
                  45.195.161.0-45.195.162.255
                  45.195.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:60:27:6a:4d:e7:2e:cf:93:a7:8c:fd:b9:f4:c8:b1:e2:bc:
         47:d7:a4:e5:5d:35:32:48:fd:1c:aa:1f:3c:75:8d:70:dd:a4:
         5c:28:23:7e:89:fc:3a:58:e6:0b:9a:ad:68:d2:8d:1a:68:87:
         bf:31:b0:d1:24:1a:e2:b3:0f:33:f2:14:46:f3:3b:07:7c:43:
         a5:8b:93:a9:9e:6d:ae:9b:1e:e4:5e:c8:d1:e1:a0:9e:da:97:
         34:63:09:c7:48:a4:0e:a5:3b:62:ca:0f:4d:e8:c9:95:d7:d9:
         ec:02:15:b2:a1:74:5f:87:67:45:c7:45:ed:dc:9f:41:70:27:
         d6:5d:00:b1:b7:45:bd:20:6a:5d:f4:df:c6:96:f3:04:ae:dc:
         46:6a:ac:7b:2e:df:bb:58:77:55:73:3e:f5:9e:2b:73:13:58:
         8c:ff:ab:7c:b0:55:f0:97:ed:35:79:a2:ca:ff:8b:04:14:04:
         64:e3:84:de:7e:00:50:60:a4:13:1d:90:dc:f8:08:20:93:d9:
         32:18:ca:b6:43:48:41:28:bd:88:8f:13:13:2f:a2:fb:a4:a8:
         19:b7:d0:1c:a5:5a:48:37:59:4f:66:a0:5a:e8:b2:56:c4:18:
         af:a4:c4:82:48:4a:a4:8e:6a:ca:c6:f6:6b:5c:cf:dc:36:a5:
         a1:73:83:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:36 2026 by rpki-client