Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7463749494A111F1A3F22A14CF1D38B0.roa
File:                     7463749494A111F1A3F22A14CF1D38B0.roa (raw, json)
Hash identifier:          /4CwXpfIm0zHukYz4xp2Gyk/YmojT6PkiVBjnei5k0g=
Subject key identifier:   A2:43:0F:46:D0:63:9E:81:65:68:5A:9F:6F:8C:67:4E:55:37:9B:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7463749494A111F1A3F22A14CF1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:54:19 +0000
ROA not before:           Mon 10 Aug 2026 09:54:15 +0000
ROA not after:            Thu 17 Sep 2026 09:54:15 +0000
asID:                     54801
IP address blocks:        45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
                          45.199.137.0/24 maxlen: 24
                          45.199.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117517 (0x1cb0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 09:54:15 2026 GMT
            Not After : Sep 17 09:54:15 2026 GMT
        Subject: CN=6a799fcb-0b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:d6:ce:8a:18:c6:d0:6f:a7:ba:5e:45:52:
                    40:ab:4b:60:02:a9:cd:f4:ed:ec:5c:5f:e4:af:17:
                    bf:bf:1e:3a:e0:2b:ca:56:65:3e:52:00:6b:0b:1b:
                    7a:a7:95:af:bd:5a:bc:15:9f:67:a8:1b:ae:3b:88:
                    99:b1:77:c5:e5:94:68:7a:42:0d:dc:ab:9a:f6:41:
                    54:b1:ac:e5:ab:ac:f3:22:f1:73:b1:7d:65:4d:0d:
                    ea:9d:01:ae:67:c3:20:03:3a:c0:e0:71:34:8a:7e:
                    21:23:da:4a:ab:14:8a:7a:6a:26:55:ec:dc:b2:3d:
                    8c:6e:4d:1c:e6:0d:51:25:d3:dc:c2:dd:54:2e:71:
                    85:20:16:7a:86:2b:69:50:b2:e4:ff:2c:0b:b7:8d:
                    53:8f:17:f6:6c:fc:c2:e8:12:35:d3:b2:8b:e9:e2:
                    dc:f3:79:f0:cd:cc:3f:89:c3:1b:59:1f:c9:ab:cc:
                    9f:7d:86:45:10:13:1d:3b:10:ae:43:d2:c8:0d:1d:
                    39:0e:84:f6:da:79:6a:63:82:83:d3:ad:ba:91:94:
                    4a:a4:51:e5:e2:a0:5f:1f:e1:53:07:9e:45:11:2f:
                    fc:5d:c4:7c:56:d3:f9:c0:ad:be:21:e8:70:48:fb:
                    5f:cf:26:61:e6:fc:9c:db:c3:4a:e9:cf:4e:21:4c:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:0F:46:D0:63:9E:81:65:68:5A:9F:6F:8C:67:4E:55:37:9B:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7463749494A111F1A3F22A14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23
                  45.199.137.0/24
                  45.199.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:24:4d:12:05:dc:e3:49:07:f4:2d:e8:cf:a7:2a:f0:03:
         65:6a:fd:7b:70:0d:1d:21:29:93:3c:23:0f:f9:71:7f:7a:49:
         38:c5:c6:70:72:11:ab:b7:63:b8:30:ed:aa:7e:d4:f1:68:c4:
         81:8f:71:ef:cb:e6:29:96:99:56:3f:bf:70:a8:9b:5f:09:84:
         fd:66:dc:e6:de:11:30:9c:5e:d2:e3:c0:67:ff:b7:a1:4f:62:
         9c:53:cc:e4:2c:26:89:11:90:2d:2a:52:47:56:64:8e:32:65:
         c7:43:03:5d:68:b4:bd:76:80:97:bd:ff:a0:f2:2a:38:c0:97:
         1a:c3:d4:21:92:9a:ea:66:00:f5:96:e5:19:a1:05:8c:af:b8:
         f5:47:56:38:5a:95:64:e2:91:be:ab:23:6a:dd:9f:47:f6:5a:
         c1:d9:e3:0f:12:01:bf:b3:9b:89:e7:d2:5e:e7:82:65:7c:ec:
         5c:bc:69:19:6b:b5:3e:c8:41:d6:9d:0d:06:a8:43:fe:1d:f2:
         6a:b2:af:b2:ce:da:ed:e4:f7:dd:64:8e:df:61:31:6c:4f:1c:
         8c:c7:fd:ff:63:9f:8c:5a:ac:32:92:f4:f2:88:5d:09:30:8d:
         c1:82:c4:56:24:36:5b:82:d5:30:b2:24:db:bf:59:00:f6:54:
         04:2a:a2:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:29 2026 by rpki-client