Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADAE9D46EE511F19A2DEBFCCE1D38B0.roa
File:                     6ADAE9D46EE511F19A2DEBFCCE1D38B0.roa (raw, json)
Hash identifier:          ZaFYvuJuxhaOfTNkLWn/z2W8ZiWEi1oU16nVICn3leI=
Subject key identifier:   13:25:5C:F1:32:BF:EE:CA:04:3C:88:CF:7B:F0:EB:53:C4:0D:1A:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BFC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADAE9D46EE511F19A2DEBFCCE1D38B0.roa
Signing time:             Tue 23 Jun 2026 09:25:05 +0000
ROA not before:           Tue 23 Jun 2026 09:25:00 +0000
ROA not after:            Sun 09 Aug 2026 09:25:00 +0000
asID:                     395793
IP address blocks:        45.192.112.0/24 maxlen: 24
                          45.192.165.0/24 maxlen: 24
                          45.192.166.0/24 maxlen: 24
                          45.194.0.0/24 maxlen: 24
                          45.194.24.0/24 maxlen: 24
                          45.195.255.0/24 maxlen: 24
                          45.198.228.0/24 maxlen: 24
                          45.198.229.0/24 maxlen: 24
                          45.198.230.0/24 maxlen: 24
                          45.198.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114629 (0x1bfc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 23 09:25:00 2026 GMT
            Not After : Aug  9 09:25:00 2026 GMT
        Subject: CN=6a3a50f1-1e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:2d:f9:b0:e4:f7:00:75:2c:8a:51:6a:3b:
                    40:19:09:61:db:d9:09:5e:d6:17:cf:07:bf:5b:20:
                    f5:d6:8a:6c:5d:a4:29:a5:9e:94:96:1e:01:e3:a7:
                    67:73:34:ba:2d:1f:0c:8f:d0:56:ee:5b:3b:35:2c:
                    06:a5:d3:7e:81:a9:09:fb:bf:a6:01:ad:3a:be:d7:
                    9a:ae:4f:4c:47:a2:89:fe:d4:bf:6d:d2:4d:d8:f3:
                    50:99:e9:38:51:eb:5c:4c:75:1a:78:84:12:27:ec:
                    c9:46:98:e5:97:db:1a:96:86:b1:42:d6:59:54:18:
                    e6:a9:dc:72:3d:af:cb:6d:9a:95:6c:26:1d:ec:a8:
                    92:fb:df:58:62:01:c6:0f:43:0f:41:77:c3:31:59:
                    87:c3:94:0e:a4:20:ad:f0:b2:62:d6:c9:e2:91:6d:
                    5b:e2:21:db:1c:fc:54:99:7f:8b:19:87:2c:ed:21:
                    b3:c6:97:67:97:a0:94:9c:ae:c1:f3:89:88:39:68:
                    4e:df:49:d6:34:ca:1e:1d:4d:61:80:d9:2f:77:37:
                    88:fa:9f:a5:fa:d4:50:ef:af:a7:c7:21:2d:cb:68:
                    56:f8:7b:3d:ea:c2:21:60:13:36:29:50:53:35:e2:
                    be:c2:91:86:01:b5:90:78:71:28:36:b7:5a:8d:fb:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:5C:F1:32:BF:EE:CA:04:3C:88:CF:7B:F0:EB:53:C4:0D:1A:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADAE9D46EE511F19A2DEBFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.112.0/24
                  45.192.165.0-45.192.166.255
                  45.194.0.0/24
                  45.194.24.0/24
                  45.195.255.0/24
                  45.198.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:ce:93:bf:54:af:02:ae:36:30:9a:5f:aa:4e:ed:01:d5:
         69:6c:ee:35:a6:a7:a7:b6:b4:d2:af:90:24:04:16:ea:4b:1f:
         34:be:6c:d8:58:95:ae:ee:f6:be:44:ff:7e:8e:77:42:ae:e2:
         ef:0d:bf:7b:ab:66:2d:82:bb:7d:cd:9b:d0:55:d0:8c:e5:f2:
         2f:37:48:f8:b2:24:ee:11:97:f6:76:f7:38:7f:ea:51:23:a1:
         8f:25:a1:b1:4a:a0:5f:36:7f:1e:3b:50:ff:1f:c5:20:7e:d1:
         4b:51:7e:0a:13:4d:a5:a3:0f:2d:9a:17:98:2b:cb:64:e4:a7:
         a7:92:94:43:9a:b9:1c:e8:2a:4d:ab:a3:0f:f2:c3:10:ed:97:
         85:e9:0e:9e:86:e4:7a:b2:d8:81:0e:05:53:4d:02:42:2e:35:
         36:c3:79:1c:a8:59:5f:cb:b2:7a:ca:eb:63:bf:78:1d:39:9b:
         8e:80:9c:93:1f:16:5e:61:f8:0a:cd:73:d8:63:42:b3:67:fb:
         64:6e:c6:df:37:58:69:0b:ba:ab:6c:93:43:50:82:bf:62:f0:
         0b:39:7f:da:bd:5d:41:c3:cc:1e:17:04:2e:62:68:d7:4a:eb:
         a4:27:9e:51:05:c3:a2:a3:59:f3:70:5a:46:ee:ca:02:21:f7:
         56:5f:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:44 2026 by rpki-client