Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/678DF04A6EDC11F1891BFFC6CE1D38B0.roa
File:                     678DF04A6EDC11F1891BFFC6CE1D38B0.roa (raw, json)
Hash identifier:          4ofUHSoUz78Du2tUz2FDr9QN6EYpbBv5UeNl0l+6oPk=
Subject key identifier:   1A:D8:50:D1:9B:B1:0E:E1:6B:4E:E8:37:F2:E2:E5:B3:71:2D:CC:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BFBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/678DF04A6EDC11F1891BFFC6CE1D38B0.roa
Signing time:             Tue 23 Jun 2026 08:20:34 +0000
ROA not before:           Tue 23 Jun 2026 08:20:29 +0000
ROA not after:            Sat 01 Aug 2026 08:20:29 +0000
asID:                     202972
IP address blocks:        45.194.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114619 (0x1bfbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 23 08:20:29 2026 GMT
            Not After : Aug  1 08:20:29 2026 GMT
        Subject: CN=6a3a41d2-89ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:d5:1f:85:25:b9:92:bd:f0:77:9a:9b:de:
                    2e:73:52:c1:c0:21:46:17:d2:e1:6e:5c:24:59:01:
                    6c:64:bd:19:44:de:f1:10:96:5f:5a:fe:4e:10:22:
                    f8:e2:8c:a5:31:73:c9:2b:12:2b:f0:6a:26:ef:82:
                    42:0c:bc:32:f5:4e:34:17:30:cd:65:4d:f7:7a:16:
                    10:78:77:06:19:4c:7f:2e:5e:5c:08:96:1a:46:f8:
                    3f:84:69:ac:a5:6b:53:c4:81:53:3a:de:25:a4:08:
                    6a:ae:5f:f0:8d:6c:e9:8d:6e:ee:a1:f4:c3:38:cb:
                    7c:14:91:a9:e7:96:25:a9:18:0c:aa:e4:1b:62:f6:
                    ae:b6:87:4e:1b:70:8d:8a:30:53:b4:b8:d5:69:fb:
                    20:5d:f3:a3:09:3a:2f:46:cc:fc:0a:af:72:cf:25:
                    44:b1:87:66:c5:48:a3:0d:12:a4:57:e4:a8:40:ae:
                    61:69:31:6d:97:cc:bf:b0:5b:07:8d:4f:28:35:3b:
                    1a:e0:f9:01:3f:9b:61:8b:43:05:4c:25:b8:6a:6a:
                    1b:c1:83:33:56:52:cc:ac:71:f8:52:8d:33:08:33:
                    2f:dd:d3:0c:7c:97:c3:b3:0b:f4:f4:ee:5b:d6:d1:
                    d5:68:e8:c7:b4:90:b9:f4:8e:12:1b:a0:23:14:1e:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:50:D1:9B:B1:0E:E1:6B:4E:E8:37:F2:E2:E5:B3:71:2D:CC:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/678DF04A6EDC11F1891BFFC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:ae:4e:f8:42:4c:7a:b9:fb:8f:91:dd:eb:90:1e:fe:fd:
         1a:42:ef:65:08:a3:e0:85:a5:3a:54:58:bd:10:5d:ed:94:fc:
         38:5e:61:ee:3e:05:f0:f2:0a:f2:a7:5f:77:41:f8:09:22:21:
         5c:fc:d2:ad:36:f7:b3:9e:cb:70:66:68:cd:e8:c2:61:2d:1c:
         46:74:ed:5b:7a:e9:e7:11:7b:6c:1d:72:77:e2:94:16:55:8d:
         b2:5a:8e:55:a4:ef:35:f7:7d:aa:3c:e4:4f:dc:62:3c:69:c4:
         e0:40:d2:fd:00:16:eb:3e:19:78:b1:bb:9b:1c:4b:b2:61:2b:
         ab:41:c7:2d:b9:ea:cb:f1:7e:bc:06:3c:39:07:0a:3e:78:30:
         f6:c6:c3:a6:8d:90:bf:42:e2:6c:f9:50:d3:49:44:94:19:c4:
         0e:95:e8:d0:ef:1b:bf:c9:8b:05:6d:24:b8:16:2d:df:72:d2:
         3d:c9:39:de:eb:59:83:93:57:d9:a7:5e:75:79:8f:9e:79:67:
         f8:18:8c:98:86:77:fa:e4:18:8e:49:4b:8e:9c:c6:c9:2c:14:
         69:82:22:f3:71:e2:36:58:a4:45:e1:8c:03:8c:0d:64:8b:63:
         a4:0e:83:4a:16:2d:90:68:3d:88:b4:60:2e:0e:d8:d0:a9:41:
         45:f1:1d:9c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb+7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjIzMDgyMDI5WhcNMjYwODAxMDgyMDI5WjAYMRYw
FAYDVQQDEw02YTNhNDFkMi04OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwD7VH4UluZK98Heam94uc1LBwCFGF9LhblwkWQFsZL0ZRN7xEJZfWv5O
ECL44oylMXPJKxIr8Gom74JCDLwy9U40FzDNZU33ehYQeHcGGUx/Ll5cCJYaRvg/
hGmspWtTxIFTOt4lpAhqrl/wjWzpjW7uofTDOMt8FJGp55YlqRgMquQbYvautodO
G3CNijBTtLjVafsgXfOjCTovRsz8Cq9yzyVEsYdmxUijDRKkV+SoQK5haTFtl8y/
sFsHjU8oNTsa4PkBP5thi0MFTCW4amobwYMzVlLMrHH4Uo0zCDMv3dMMfJfDswv0
9O5b1tHVaOjHtJC59I4SG6AjFB6HOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBrY
UNGbsQ7ha07oN/Li5bNxLcxBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzhERjA0QTZFREMxMUYxODkxQkZGQzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ4MA0GCSqGSIb3DQEBCwUA
A4IBAQBlSq5O+EJMern7j5Hd65Ae/v0aQu9lCKPghaU6VFi9EF3tlPw4XmHuPgXw
8gryp193QfgJIiFc/NKtNveznstwZmjN6MJhLRxGdO1beunnEXtsHXJ34pQWVY2y
Wo5VpO81932qPORP3GI8acTgQNL9ABbrPhl4sbubHEuyYSurQcctuerL8X68Bjw5
Bwo+eDD2xsOmjZC/QuJs+VDTSUSUGcQOlejQ7xu/yYsFbSS4Fi3fctI9yTne61mD
k1fZp151eY+eeWf4GIyYhnf65BiOSUuOnMbJLBRpgiLzceI2WKRF4YwDjA1ki2Ok
DoNKFi2QaD2ItGAuDtjQqUFF8R2c
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:46 2026 by rpki-client