Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6625541494A711F19E25A5B8CE1D38B0.roa
File:                     6625541494A711F19E25A5B8CE1D38B0.roa (raw, json)
Hash identifier:          LWK36YWK/uME6bFHiDv4z8V+HgS5oLkUJtsnjAYsUYE=
Subject key identifier:   58:11:35:B6:B3:B4:57:59:0A:04:A9:A2:82:42:A3:14:C5:34:C1:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6625541494A711F19E25A5B8CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 10:36:52 +0000
ROA not before:           Mon 10 Aug 2026 10:36:48 +0000
ROA not after:            Thu 17 Sep 2026 10:36:48 +0000
asID:                     22773
IP address blocks:        45.202.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117540 (0x1cb24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 10:36:48 2026 GMT
            Not After : Sep 17 10:36:48 2026 GMT
        Subject: CN=6a79a9c4-1ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:83:88:2f:79:7c:ec:d3:46:17:54:25:b6:
                    5b:d8:e4:c3:f5:1b:1b:7d:7f:8a:70:cb:1e:5c:90:
                    b1:8f:cd:29:b3:31:3d:3f:72:d3:bd:4a:18:ff:ea:
                    f8:ce:99:f7:3b:df:c5:eb:2f:ce:e6:c9:f7:8d:72:
                    8f:0b:2e:fe:d3:ee:01:5b:00:2f:66:1d:a4:98:b4:
                    37:77:11:9d:1b:56:df:f3:be:d1:ab:3f:a3:40:19:
                    fe:14:d8:21:8a:27:8c:00:50:89:fa:c4:ee:f2:43:
                    b4:f2:37:26:4c:ef:00:d5:58:c3:be:6f:3d:92:42:
                    c8:d6:ef:72:a4:4e:15:42:fb:c4:66:e6:05:ef:9c:
                    5a:16:2c:98:ec:b3:09:e3:e9:d0:4f:12:8b:81:c4:
                    ed:fe:19:c8:1c:e1:08:50:83:7d:25:f0:7d:98:76:
                    ac:3a:d7:b5:f7:09:6e:59:d9:0f:cd:d0:8a:30:e0:
                    b1:ef:eb:25:9c:25:a5:d6:a4:06:82:7d:1b:96:16:
                    6c:48:52:38:37:0d:ef:92:00:1e:6b:67:6e:03:20:
                    7e:3b:c4:b5:31:ac:4a:90:f7:af:2d:6b:d3:19:43:
                    04:e8:ae:5a:80:34:f3:03:f4:64:c0:16:50:04:80:
                    78:d3:b4:85:3a:24:c6:43:58:1b:24:6e:be:38:42:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:35:B6:B3:B4:57:59:0A:04:A9:A2:82:42:A3:14:C5:34:C1:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6625541494A711F19E25A5B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:53:25:31:fb:89:85:de:ec:1b:72:fb:f5:27:d9:2c:58:1f:
         c5:46:e2:d3:d4:0c:8b:f4:bb:4c:3b:a5:bf:57:86:32:78:ea:
         87:a0:5b:fc:37:9a:38:c2:5c:1a:f5:e0:7b:20:59:d2:e0:46:
         89:5a:59:cb:40:f3:a8:c9:53:58:21:56:11:f9:35:13:db:04:
         18:f5:9e:b7:65:48:24:08:0e:a4:f4:0b:75:de:44:af:5a:6d:
         6f:e0:4a:1b:7b:31:8f:27:df:32:82:03:d5:cb:8c:21:c5:ca:
         f0:11:3a:39:2d:8d:94:e8:00:02:a9:80:61:81:91:88:7b:14:
         e2:13:4e:ac:fe:df:61:45:02:b2:d2:c9:45:b3:49:e5:36:3b:
         ab:c7:7d:22:3f:39:f6:e9:7f:b0:d5:33:f0:3d:ba:af:c3:ac:
         87:e3:f8:b8:97:3a:5b:67:9f:a1:ab:fb:fe:a9:50:2c:fc:4b:
         2f:6a:4a:06:d5:c5:e7:c8:d2:ac:70:4b:3a:a7:e2:a2:7d:b2:
         81:8e:bb:56:c0:e5:fd:53:e3:3a:34:7f:2a:1a:fe:a4:7c:8f:
         f1:07:6a:6f:e8:ce:d4:f3:de:6d:fd:40:59:74:1e:c7:c3:24:
         f0:14:e2:84:1e:d0:fd:ac:f7:c0:9f:ed:eb:3f:35:5a:9c:32:
         a0:f7:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:35 2026 by rpki-client