Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6815BE552411F183CFD71DCF1D38B0.roa
File:                     9D6815BE552411F183CFD71DCF1D38B0.roa (raw, json)
Hash identifier:          UELcRoSSQ0GFndJv5nPcvBlu4oHYr4TyLSgfwTb80Ng=
Subject key identifier:   D4:73:94:5D:2B:46:AA:53:84:44:3B:EF:DC:97:57:1F:9C:66:33:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6815BE552411F183CFD71DCF1D38B0.roa
Signing time:             Thu 21 May 2026 14:51:58 +0000
ROA not before:           Thu 21 May 2026 14:51:53 +0000
ROA not after:            Fri 10 Jul 2026 14:51:53 +0000
asID:                     202036
IP address blocks:        45.198.231.0/24 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.28.0/24 maxlen: 24
                          45.201.29.0/24 maxlen: 24
                          45.201.30.0/24 maxlen: 24
                          45.201.31.0/24 maxlen: 24
                          45.201.32.0/24 maxlen: 24
                          45.201.36.0/22 maxlen: 24
                          45.201.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112438 (0x1b736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 21 14:51:53 2026 GMT
            Not After : Jul 10 14:51:53 2026 GMT
        Subject: CN=6a0f1c0d-61c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:7d:d8:7b:a0:a4:fc:8b:b6:aa:7c:d0:8e:
                    50:6e:ab:0b:1f:b7:46:3b:0b:4d:7b:e7:9c:9c:3e:
                    49:17:76:ad:0f:26:b8:1d:10:f2:b0:19:72:26:40:
                    a1:ed:a7:4f:f2:2e:fd:7e:59:04:ec:ec:ab:23:22:
                    7d:58:e3:4f:ea:b2:d8:67:4c:62:b5:3f:ac:dc:af:
                    da:92:35:5f:fd:0c:2e:cc:04:4a:13:31:c7:cd:a4:
                    b9:b9:29:12:93:70:e7:5f:c7:2c:99:69:40:aa:f5:
                    c5:1b:ec:76:c8:fa:4c:2c:b9:d1:16:dd:7e:65:16:
                    2f:7b:b7:92:14:a1:8e:af:14:94:17:e0:f2:98:1d:
                    f6:02:ee:d3:0e:12:b6:d0:1a:4b:40:e8:31:f3:6a:
                    97:47:00:81:b7:a8:a8:24:7d:29:d4:cf:ab:1d:14:
                    d5:db:ed:a7:a3:ab:ab:77:7c:ca:d4:52:8f:ca:e1:
                    06:98:18:19:f9:82:0b:39:55:5b:28:b4:d9:fd:da:
                    62:4e:f6:f0:12:8a:de:f4:2f:78:3b:23:c2:0a:91:
                    d0:78:00:46:36:43:10:f9:82:4a:aa:2b:3a:31:6c:
                    3e:8d:fe:fb:08:30:4d:a2:0e:83:9e:ef:ff:31:f3:
                    f6:a4:02:86:64:ed:fd:39:db:98:c9:e3:d7:2c:61:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:94:5D:2B:46:AA:53:84:44:3B:EF:DC:97:57:1F:9C:66:33:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6815BE552411F183CFD71DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.231.0/24
                  45.201.24.0/23
                  45.201.28.0-45.201.32.255
                  45.201.36.0-45.201.40.255

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:7d:26:64:01:43:ce:bc:2e:b5:32:1e:40:0b:b8:b0:cf:
         9a:8a:3a:ca:c6:07:dd:59:29:c9:5f:27:cd:7c:c6:14:61:6b:
         bb:11:a7:cb:d1:6b:5b:70:35:bc:a3:4c:2a:c1:74:07:39:6c:
         59:17:f3:da:02:2f:33:5b:6e:88:39:21:61:4b:34:5b:40:1d:
         58:eb:0b:8d:0c:82:a9:51:89:2c:10:3f:9e:ea:a9:85:e6:70:
         da:fa:e3:3e:cd:bd:2b:cf:d2:ed:dd:95:65:01:ea:a8:8a:9b:
         e4:4f:55:4f:07:d4:57:2e:1c:87:18:16:51:4b:df:36:bf:7e:
         59:a5:9f:3e:e1:18:74:16:6b:17:03:9e:b8:90:2a:c3:07:f0:
         95:a3:d8:01:19:58:94:54:d2:fb:ee:e2:1c:49:a0:e6:70:d9:
         df:e4:39:92:dc:d6:dc:ea:20:d4:2f:2e:5c:4c:b4:e8:e8:d5:
         01:84:dc:fc:d3:8e:eb:9b:6b:a6:cb:41:cd:62:1f:cc:b9:98:
         7a:d0:e5:8a:90:46:76:9c:f0:e8:17:22:1a:4e:14:ea:b5:64:
         7b:55:09:9f:d2:38:f4:7a:3f:c6:bb:a3:45:88:c9:94:97:01:
         4b:b8:ff:03:1e:1b:2d:5d:91:6f:e3:74:7a:8d:d1:3b:67:0d:
         5a:7e:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:01 2026 by rpki-client