Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/762EC80C755A11F1BD0BB8BACE1D38B0.roa
File:                     762EC80C755A11F1BD0BB8BACE1D38B0.roa (raw, json)
Hash identifier:          hAIyPWp9nBzjVvT5r+8NYzc4qnysCwST8ga5WYDrHys=
Subject key identifier:   2E:D8:69:EA:37:E8:F1:40:74:1F:43:92:DD:3B:CB:0B:7B:1B:00:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C1FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/762EC80C755A11F1BD0BB8BACE1D38B0.roa
Signing time:             Wed 01 Jul 2026 14:38:02 +0000
ROA not before:           Wed 01 Jul 2026 14:37:57 +0000
ROA not after:            Sat 08 Aug 2026 14:37:57 +0000
asID:                     215691
IP address blocks:        45.198.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 Jul 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115198 (0x1c1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  1 14:37:57 2026 GMT
            Not After : Aug  8 14:37:57 2026 GMT
        Subject: CN=6a45264a-d188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:8a:07:91:ba:78:02:c8:91:30:c3:a3:0e:
                    7e:be:35:78:e8:4c:fd:88:63:ed:2d:31:92:48:dc:
                    fe:10:0b:7a:49:94:20:18:99:ee:4c:44:30:2c:53:
                    b1:6b:ac:a0:a1:f4:63:1b:38:4a:aa:75:0d:b6:02:
                    e4:d4:ba:4b:a0:59:0a:10:c7:b2:73:e8:1c:46:9b:
                    ac:a8:6e:65:74:4f:75:62:ce:5f:60:21:ed:83:0f:
                    81:c1:47:cb:e1:47:68:ae:98:19:c7:19:40:92:5b:
                    5a:61:30:c0:61:db:cc:10:68:83:fb:b6:c5:a5:19:
                    6b:1c:34:19:11:9a:9c:3e:82:03:4a:49:aa:0a:89:
                    16:00:15:7d:d7:df:de:fe:7c:20:4e:0c:d7:04:bb:
                    38:e6:bc:00:82:5f:2b:c3:b4:b6:b1:31:58:b5:bd:
                    17:46:66:ec:07:8f:a9:80:f1:05:28:4c:5c:88:0e:
                    45:4a:7e:af:e3:ee:aa:66:22:79:8c:f5:60:86:1d:
                    c2:7a:5c:9b:3b:53:fd:1b:18:9f:29:25:d2:a6:0d:
                    77:ba:93:21:25:91:18:48:dd:65:43:95:aa:ca:fd:
                    c0:9c:56:19:93:40:90:b3:fe:07:03:22:a4:ca:21:
                    8d:01:23:e5:b4:3d:ab:ba:84:cb:82:11:75:96:0f:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D8:69:EA:37:E8:F1:40:74:1F:43:92:DD:3B:CB:0B:7B:1B:00:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/762EC80C755A11F1BD0BB8BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:03:ed:29:76:4a:f6:58:67:0d:ed:32:98:43:94:09:ee:53:
         d3:d9:da:91:dc:ff:b8:47:53:a8:35:93:d6:7b:7c:ee:73:de:
         cd:e1:44:c0:46:a5:25:5c:7b:11:84:b1:d4:18:bf:22:53:00:
         79:9e:f8:5f:b7:0d:19:f8:27:9f:f9:39:c5:10:62:03:44:62:
         88:58:90:66:d6:d2:3f:11:4b:a6:cb:ee:63:69:07:65:74:08:
         da:f1:ff:28:83:5e:79:b5:44:f2:bf:e9:f6:58:d3:40:b4:b0:
         e1:64:35:4a:88:d9:86:97:c3:ca:29:6c:13:fa:26:44:b5:f9:
         16:d6:b2:84:de:cb:4a:e5:40:6c:38:89:92:4a:79:b4:ab:af:
         34:66:4e:70:43:e1:7a:9b:8f:27:94:0f:4a:35:f7:50:fb:98:
         3e:b4:d3:d9:5c:44:86:b1:74:4c:2f:a3:2b:e9:d0:80:2a:5e:
         a4:b8:15:81:d7:41:51:53:bb:a1:87:29:f6:80:e1:57:76:84:
         ac:ab:e7:62:ed:46:e6:fb:ab:c7:9e:db:85:e1:44:78:64:78:
         95:9c:e4:ea:50:54:1a:6c:7b:23:e1:5d:5a:c6:df:75:d2:91:
         c5:ae:ca:a6:3c:ba:8e:75:97:10:e9:64:04:0b:88:f5:8c:ed:
         c0:4d:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 16:52:38 2026 by rpki-client