Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A5077F455D811F1B6E2B0ECCE1D38B0.roa
File:                     9A5077F455D811F1B6E2B0ECCE1D38B0.roa (raw, json)
Hash identifier:          1PfvzwO2Q6kUXdVsftO8qYc6DcMw3/9RH1NVHW2rrV0=
Subject key identifier:   15:43:6C:27:B9:7B:BA:C7:88:46:D6:A8:2C:A4:60:0C:F0:2B:AE:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B7F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A5077F455D811F1B6E2B0ECCE1D38B0.roa
Signing time:             Fri 22 May 2026 12:20:22 +0000
ROA not before:           Fri 22 May 2026 12:20:17 +0000
ROA not after:            Sat 08 Aug 2026 12:20:17 +0000
asID:                     149014
IP address blocks:        45.192.160.0/22 maxlen: 24
                          45.192.160.0/24 maxlen: 24
                          45.192.172.0/22 maxlen: 24
                          45.192.178.0/23 maxlen: 24
                          45.192.180.0/22 maxlen: 24
                          45.192.184.0/22 maxlen: 24
                          45.192.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112627 (0x1b7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 22 12:20:17 2026 GMT
            Not After : Aug  8 12:20:17 2026 GMT
        Subject: CN=6a104a06-e571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:81:1b:75:a7:03:29:9f:45:71:ce:fc:cf:
                    ee:fe:1b:51:8a:b8:99:2d:8a:a0:9c:e9:59:3f:5b:
                    be:d3:51:2d:d6:28:2a:5a:3b:ac:92:9b:e0:99:30:
                    9e:28:2e:e4:95:0b:14:25:f3:1c:c9:d7:12:42:b2:
                    1b:bf:48:47:f5:bf:c2:ad:68:41:33:a7:ae:8d:bc:
                    d3:bd:fb:5f:5a:33:80:09:88:7a:05:48:d8:00:b3:
                    ba:de:30:da:89:65:4c:32:12:31:16:b2:20:d4:fd:
                    15:e5:f1:9b:dd:1b:9e:58:25:34:32:c2:97:02:03:
                    ca:e2:5c:64:da:47:7e:a9:e6:3d:60:9f:c7:e4:ab:
                    dc:87:f9:4e:2c:da:d3:10:b0:9c:d3:cb:f1:24:81:
                    1a:50:9e:97:31:e6:ab:fb:ee:46:15:5d:c6:1b:00:
                    4d:67:84:7e:f5:e1:6b:ce:48:ef:bf:76:bc:d7:b6:
                    b3:59:b8:eb:e8:0a:d1:52:a7:8c:b0:93:03:ea:de:
                    10:6a:0e:e7:8f:83:ec:df:d8:28:f5:c4:a4:b5:d2:
                    62:4d:1d:c8:17:3a:12:f4:2a:ed:65:45:9c:62:52:
                    9c:4c:39:08:b9:72:9c:a7:54:59:ad:db:84:f6:ac:
                    94:3e:8d:ab:6f:de:d4:35:9e:8c:72:5a:f4:51:92:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:6C:27:B9:7B:BA:C7:88:46:D6:A8:2C:A4:60:0C:F0:2B:AE:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A5077F455D811F1B6E2B0ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/22
                  45.192.172.0/22
                  45.192.178.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         91:84:5f:4b:b0:39:05:ce:61:57:e6:96:6e:96:93:b0:df:d8:
         da:dd:25:d1:b6:a1:51:2f:82:47:87:39:31:a6:5b:06:c5:70:
         2c:cd:b2:4b:f9:61:56:d4:93:14:d6:a1:7d:09:e2:ca:4c:61:
         ec:9d:29:be:d5:2f:1a:72:7c:bc:24:ec:c4:a6:95:6d:4b:f4:
         a9:b4:47:24:31:20:22:0f:f1:17:8c:73:46:45:c9:be:6e:79:
         20:8d:14:4c:a4:96:86:d1:00:46:15:3a:4a:16:1c:da:41:3b:
         11:eb:fe:81:6d:1b:3e:cd:73:f2:4e:f7:1c:4c:aa:1e:57:f8:
         03:ab:bf:a2:c6:ef:da:c7:11:b8:92:70:b8:23:b1:54:89:29:
         74:02:98:eb:93:7e:78:1d:9c:28:12:04:91:89:5c:cc:9a:f0:
         64:ba:65:a2:53:de:ce:66:10:85:13:b2:16:c3:a9:a0:ec:59:
         2b:6b:7e:c2:68:69:9d:55:56:19:18:ea:0a:e1:57:0c:d9:e3:
         a1:49:a8:87:19:b3:80:6e:e4:3d:a4:a8:55:9b:a0:5c:01:bb:
         0a:73:74:95:38:12:b2:f6:ce:b3:7e:a0:31:4d:15:8a:89:57:
         55:d3:a0:d8:57:9f:94:e0:e7:28:62:c3:54:12:f8:4f:b0:4d:
         8b:ca:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client