Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A93D510757811F189143CECCE1D38B0.roa
File:                     5A93D510757811F189143CECCE1D38B0.roa (raw, json)
Hash identifier:          /T5k7ozFyKAEEAE90goZcWaDxzjKCNqV51brG103cro=
Subject key identifier:   71:34:5B:B4:01:17:80:79:14:CF:F5:75:37:0E:31:EC:6C:BD:93:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C22C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A93D510757811F189143CECCE1D38B0.roa
Signing time:             Wed 01 Jul 2026 18:12:00 +0000
ROA not before:           Wed 01 Jul 2026 18:11:56 +0000
ROA not after:            Sat 01 Aug 2026 18:11:56 +0000
asID:                     32043
IP address blocks:        45.201.11.0/24 maxlen: 24
                          45.201.110.0/24 maxlen: 24
                          45.201.111.0/24 maxlen: 24
                          45.201.112.0/24 maxlen: 24
                          45.201.113.0/24 maxlen: 24
                          45.201.120.0/24 maxlen: 24
                          45.201.121.0/24 maxlen: 24
                          45.201.122.0/24 maxlen: 24
                          45.201.123.0/24 maxlen: 24
                          45.201.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115244 (0x1c22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  1 18:11:56 2026 GMT
            Not After : Aug  1 18:11:56 2026 GMT
        Subject: CN=6a455870-b334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:c9:9e:29:5c:0b:c5:d5:23:d1:12:9a:3e:
                    e2:e9:d2:cd:5e:c0:c1:99:a1:b8:5e:49:e7:a8:23:
                    b9:f2:2b:ee:0d:1f:33:f0:09:f8:72:e9:4c:ee:7d:
                    8e:1d:7c:24:40:79:21:14:58:e3:b0:82:61:e6:2b:
                    9b:73:30:14:7d:05:27:38:45:e3:63:92:5a:bd:95:
                    bc:e4:69:80:e5:d8:0f:d9:e7:c2:c2:1e:69:a8:e5:
                    b5:dc:71:5b:62:3f:c2:da:01:c8:49:2b:a6:04:e6:
                    32:bf:fc:92:2d:69:ef:46:a3:dd:ad:1d:d2:4d:16:
                    ed:7e:eb:37:ce:3b:5c:07:21:50:6d:de:4a:13:a7:
                    d4:d1:6a:93:0a:60:2b:94:2d:19:1e:be:3c:2d:b3:
                    aa:17:02:e2:2e:40:b9:c9:ec:a4:e2:f1:85:23:95:
                    0e:7b:6e:95:ee:e0:81:bf:3f:6c:d0:4e:e2:e7:c9:
                    a0:d5:69:e1:9b:81:34:ca:cd:42:30:42:da:cb:2e:
                    35:11:1d:4f:e0:da:7c:27:f5:d7:30:fd:f2:17:24:
                    27:26:d0:c2:5b:ec:9d:35:06:90:9b:57:69:d2:6f:
                    de:96:39:b8:66:ad:b6:56:bf:5f:45:18:72:80:6a:
                    c3:83:76:b9:98:46:8f:bd:03:74:ac:fe:79:c6:42:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:5B:B4:01:17:80:79:14:CF:F5:75:37:0E:31:EC:6C:BD:93:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A93D510757811F189143CECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.11.0/24
                  45.201.110.0-45.201.113.255
                  45.201.120.0-45.201.124.255

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:4c:7c:8c:91:50:77:eb:16:55:02:e3:13:e7:7b:b3:60:
         9b:c3:1e:5e:71:13:09:d5:01:e9:73:39:a8:56:e8:89:9f:a9:
         ab:5b:74:16:44:7f:75:7b:c4:08:7f:80:e0:e5:d2:cd:fc:2e:
         90:38:4a:ea:0a:4f:c5:2a:30:cf:c2:2c:02:98:bb:b2:71:53:
         d1:94:1d:66:3b:96:fa:23:a2:1d:47:ae:53:64:82:f7:cc:03:
         83:13:97:a8:c5:a2:12:fa:32:b4:fc:87:3c:67:7f:0a:23:20:
         2e:66:6d:ad:27:ea:90:7d:7d:34:2c:3d:5d:25:21:21:a1:3f:
         7a:dc:46:d6:ff:3b:cc:80:77:98:a2:c7:9a:3e:be:7f:7c:cc:
         fb:27:ed:a9:6c:87:e9:d4:11:a5:6d:d1:0d:e6:ab:a5:9c:f1:
         b5:ee:19:6f:83:45:7b:90:82:f7:a6:fa:67:97:ad:20:8d:f0:
         f6:c3:2a:8c:be:ad:2c:e1:ae:b9:52:8d:8a:17:7c:e0:52:0c:
         af:50:02:2e:5a:8c:20:78:41:50:46:32:3f:e9:db:d9:88:ae:
         7d:3b:59:1e:4c:32:d6:7d:36:c9:73:44:32:f5:71:ba:30:6d:
         97:8e:7e:09:ba:10:95:42:34:98:a4:65:3e:ad:18:a1:c7:b1:
         fc:8d:40:c2
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAcIsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAxMTgxMTU2WhcNMjYwODAxMTgxMTU2WjAYMRYw
FAYDVQQDEw02YTQ1NTg3MC1iMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyZ7JnilcC8XVI9ESmj7i6dLNXsDBmaG4XknnqCO58ivuDR8z8An4culM
7n2OHXwkQHkhFFjjsIJh5iubczAUfQUnOEXjY5JavZW85GmA5dgP2efCwh5pqOW1
3HFbYj/C2gHISSumBOYyv/ySLWnvRqPdrR3STRbtfus3zjtcByFQbd5KE6fU0WqT
CmArlC0ZHr48LbOqFwLiLkC5yeyk4vGFI5UOe26V7uCBvz9s0E7i58mg1Wnhm4E0
ys1CMELayy41ER1P4Np8J/XXMP3yFyQnJtDCW+ydNQaQm1dp0m/eljm4Zq22Vr9f
RRhygGrDg3a5mEaPvQN0rP55xkIzIwIDAQABo4ICvjCCArowHQYDVR0OBBYEFHE0
W7QBF4B5FM/1dTcOMexsvZMeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QTkzRDUxMDc1NzgxMUYxODkxNDNDRUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQALckLMAwDBAEtyW4DBAEtyXAw
DAMEAy3JeAMEAC3JfDANBgkqhkiG9w0BAQsFAAOCAQEACFtMfIyRUHfrFlUC4xPn
e7Ngm8MeXnETCdUB6XM5qFboiZ+pq1t0FkR/dXvECH+A4OXSzfwukDhK6gpPxSow
z8IsApi7snFT0ZQdZjuW+iOiHUeuU2SC98wDgxOXqMWiEvoytPyHPGd/CiMgLmZt
rSfqkH19NCw9XSUhIaE/etxG1v87zIB3mKLHmj6+f3zM+yftqWyH6dQRpW3RDear
pZzxte4Zb4NFe5CC96b6Z5etII3w9sMqjL6tLOGuuVKNihd84FIMr1ACLlqMIHhB
UEYyP+nb2YiufTtZHkwy1n02yXNEMvVxujBtl45+CboQlUI0mKRlPq0Yocex/I1A
wg==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:17 2026 by rpki-client