Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1D04E2160411F1AFCDC0DCDAE4EC9C.roa
File:                     7B1D04E2160411F1AFCDC0DCDAE4EC9C.roa (raw, json)
Hash identifier:          ietW+HPVOv+t5SlhQ9l/QRoGxkE1REWFZ7j7ILoBDpA=
Subject key identifier:   9F:DA:BC:31:36:AD:DF:EE:59:53:E7:BC:29:74:E5:A2:7F:90:25:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A1A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1D04E2160411F1AFCDC0DCDAE4EC9C.roa
Signing time:             Mon 02 Mar 2026 06:53:13 +0000
ROA not before:           Mon 02 Mar 2026 06:53:09 +0000
ROA not after:            Mon 08 Mar 2027 06:53:09 +0000
asID:                     138168
IP address blocks:        45.195.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Mar 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106915 (0x1a1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar  2 06:53:09 2026 GMT
            Not After : Mar  8 06:53:09 2027 GMT
        Subject: CN=69a533d9-d892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:10:08:3c:8e:dd:e6:5f:8c:9e:16:cb:e6:
                    83:16:d4:b2:ae:cf:f5:0b:fd:2b:84:68:de:a1:54:
                    a4:96:05:78:2d:fc:1d:de:65:dc:da:0c:1b:8d:ab:
                    a4:77:45:8c:83:b3:98:02:ee:f0:b9:dd:59:ff:aa:
                    63:4b:c5:0f:9c:d9:ef:93:76:e4:e3:7b:11:97:37:
                    dd:c4:f2:33:47:32:36:e4:ee:c3:50:a0:bf:08:ed:
                    3d:78:c4:18:5f:60:71:af:fa:5b:21:40:07:b0:19:
                    ee:5f:cf:fe:2f:86:db:3c:34:c7:59:61:8b:dc:28:
                    15:09:e9:ab:cb:05:8c:db:2b:42:c0:e7:1d:33:e2:
                    87:22:15:43:e3:24:fe:1b:e5:cc:58:97:89:f9:43:
                    ee:8e:9e:3d:99:52:71:9c:66:36:ca:e7:e4:92:e0:
                    e1:d7:8a:b9:02:fd:68:ea:3e:e2:2f:eb:3a:bc:c7:
                    ae:59:2a:af:8a:67:f5:b0:d0:00:17:b4:56:1c:e1:
                    2d:c7:ce:2c:a1:0a:8e:b1:9a:c6:97:84:b8:0c:25:
                    2c:8a:56:fd:9b:68:13:e6:21:58:71:1e:37:00:05:
                    e6:f1:ba:4f:b6:5c:af:88:6a:31:11:c4:86:4d:c6:
                    2f:83:4b:c2:31:dc:a4:01:4f:f2:46:46:ae:ab:39:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:BC:31:36:AD:DF:EE:59:53:E7:BC:29:74:E5:A2:7F:90:25:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1D04E2160411F1AFCDC0DCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:fc:c5:0a:df:ed:d9:af:b1:87:e7:67:69:3e:22:1e:c5:
         e1:c0:71:4f:f9:dd:86:15:f2:2b:94:f3:79:8e:0b:e7:22:71:
         b4:99:43:c5:6b:14:e2:98:5a:f3:8b:f9:6e:9a:1b:af:bb:b9:
         8d:28:3c:f9:61:84:29:27:e4:38:7a:da:2b:ef:db:f7:13:13:
         1f:d6:8a:6e:1c:b0:b4:94:0e:fa:47:98:73:a7:25:3e:60:2c:
         92:ea:d5:bb:33:69:c3:ba:18:70:b2:c6:29:e0:04:32:1d:57:
         53:2d:19:fd:27:d7:2a:5c:67:34:70:cc:8b:93:a2:21:72:70:
         17:2d:ed:3f:86:f6:3a:16:5b:6c:15:6e:70:16:b6:c6:11:f1:
         bc:22:60:b3:e7:ff:6f:0a:40:4b:dd:10:8b:e3:15:64:cc:a5:
         09:4a:70:42:9f:6b:00:1d:60:3f:af:d3:a3:d3:33:d8:2d:cf:
         68:59:77:cb:8c:2f:89:bf:84:a9:04:1c:76:c3:14:03:f6:11:
         08:36:7a:52:c9:a3:f1:c5:11:6a:2a:ef:74:17:60:05:fa:94:
         35:ba:ed:64:be:64:e1:71:84:3b:dc:f0:62:cb:aa:e7:36:26:
         d4:18:9e:b3:e3:55:a9:bf:49:90:ad:1e:13:4a:28:af:e7:ec:
         e8:47:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:30 2026 by rpki-client