Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7191A67C5E11F1988CE01ACF1D38B0.roa
File:                     5B7191A67C5E11F1988CE01ACF1D38B0.roa (raw, json)
Hash identifier:          sUa3B9nppXt7UzBwQUxw6hRjrufMenSF+38/kQUEaEU=
Subject key identifier:   6E:53:66:DB:BD:CE:24:5D:03:2D:1B:39:DB:70:79:1A:FF:8E:12:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C476
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7191A67C5E11F1988CE01ACF1D38B0.roa
Signing time:             Fri 10 Jul 2026 12:53:33 +0000
ROA not before:           Fri 10 Jul 2026 12:53:28 +0000
ROA not after:            Mon 10 Aug 2026 12:53:28 +0000
asID:                     54801
IP address blocks:        45.200.14.0/23 maxlen: 24
                          45.200.16.0/23 maxlen: 24
                          45.200.18.0/23 maxlen: 24
                          45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.200.49.0/24 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
                          45.207.224.0/19 maxlen: 24
                          45.207.224.0/20 maxlen: 24
                          45.207.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115830 (0x1c476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 10 12:53:28 2026 GMT
            Not After : Aug 10 12:53:28 2026 GMT
        Subject: CN=6a50eb4d-5fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:33:25:e0:ca:92:8d:ac:49:a8:fc:5f:92:
                    d5:9e:88:f3:c8:90:ba:94:5a:d8:64:a5:80:2c:28:
                    90:c5:57:ce:48:f8:15:97:71:94:3c:04:3b:a5:94:
                    33:99:a0:3f:3e:a9:86:ab:d9:78:be:15:36:87:ea:
                    69:db:b3:48:5c:b1:ec:76:97:09:b9:e7:f4:00:54:
                    bc:98:37:c4:69:45:51:ad:5b:b7:fc:2e:f2:26:b3:
                    34:dd:d8:27:94:34:29:ca:d1:dd:f0:72:1c:84:9b:
                    5b:ae:cc:45:c6:96:45:d6:a4:04:ed:47:ec:65:07:
                    54:32:20:b3:80:b2:81:55:74:ce:6e:1b:8a:c1:1e:
                    f3:72:c0:d8:e4:48:68:9e:91:40:e3:ca:86:89:96:
                    6d:11:3b:0a:11:ac:e0:98:0f:d8:82:3c:e1:47:3b:
                    5d:cc:df:fb:58:7d:18:6e:44:46:ca:ff:e6:b9:6f:
                    0d:c4:41:37:44:7f:aa:4b:b6:21:5f:ee:98:fd:d5:
                    df:a1:24:46:a0:a5:6f:94:9c:76:ed:a3:44:02:53:
                    24:d7:02:13:28:c7:f4:76:73:9c:21:6e:b9:cf:9d:
                    b4:b9:db:c5:3f:58:04:8f:50:b6:54:dc:43:de:79:
                    59:ed:cc:c6:ce:28:0b:0c:ae:b2:29:76:ef:31:35:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:66:DB:BD:CE:24:5D:03:2D:1B:39:DB:70:79:1A:FF:8E:12:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7191A67C5E11F1988CE01ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.14.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:2d:6d:ca:6c:bb:ba:af:5c:86:9c:a5:14:f8:fe:56:a4:
         13:ee:a2:ff:2f:ec:57:6e:56:cf:74:de:a0:09:9f:6c:7a:f6:
         7e:54:df:a5:c3:5d:56:5b:43:91:62:0e:bb:5b:4d:f3:f6:61:
         0e:07:64:8a:42:6a:96:f3:32:fd:37:66:f1:94:10:cb:62:ef:
         7b:49:54:af:56:fb:a3:bb:0e:35:23:9c:40:73:7f:cc:fb:0f:
         4a:f8:16:71:bf:13:53:f7:1b:b4:6d:84:fb:9b:63:23:5b:d3:
         50:cb:89:9e:b5:7f:ba:ec:f2:3a:8d:92:63:2d:29:58:be:6d:
         c8:e5:ea:e6:5a:20:b9:16:f6:93:ea:0f:4a:63:e8:d7:29:11:
         6c:0a:b2:f2:55:e3:95:85:18:62:a2:dc:17:15:54:97:5f:19:
         71:0d:18:19:e0:68:32:55:21:d9:f4:b8:74:2d:78:bd:c1:40:
         86:ba:78:39:01:5b:62:3b:e4:19:55:0d:e1:51:f6:69:a6:2a:
         6d:d2:78:16:9b:1d:86:bf:3f:4e:bd:d7:b7:39:8b:32:89:68:
         08:17:49:c5:2a:a2:11:bf:e5:37:32:37:d3:f0:d9:bb:f7:73:
         7d:91:b5:10:6e:8a:4b:06:b9:14:c2:d6:76:ee:20:71:38:e5:
         7d:60:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:39 2026 by rpki-client