Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09055C873E011F1A354E0BECE1D38B0.roa
File:                     A09055C873E011F1A354E0BECE1D38B0.roa (raw, json)
Hash identifier:          gNS3YsIjevwwrNwOZNs9C5JCtXevGMky7rm/N3O/o/8=
Subject key identifier:   B0:43:DA:77:36:6C:E5:CC:06:68:FE:27:FF:4F:12:2E:EA:55:9B:20
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C18C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09055C873E011F1A354E0BECE1D38B0.roa
Signing time:             Mon 29 Jun 2026 17:33:23 +0000
ROA not before:           Mon 29 Jun 2026 17:33:19 +0000
ROA not after:            Sat 29 May 2027 17:33:19 +0000
asID:                     17976
IP address blocks:        45.201.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115084 (0x1c18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 29 17:33:19 2026 GMT
            Not After : May 29 17:33:19 2027 GMT
        Subject: CN=6a42ac63-a126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:34:73:5c:3a:66:fe:06:5c:5f:74:57:2f:
                    69:ce:4c:3d:fd:9e:06:ac:23:85:62:d1:6f:67:f9:
                    0e:10:be:dd:f7:25:4d:f5:40:5f:8c:68:2f:a7:40:
                    1e:32:af:63:ba:6c:fe:80:27:34:3c:89:7c:22:b9:
                    6b:55:5d:78:d0:b7:49:30:0d:26:0c:6d:ad:aa:f7:
                    ed:d4:d2:6c:8a:4e:7e:05:36:ab:2a:80:df:08:86:
                    a8:8d:81:83:81:25:22:70:df:f4:77:78:a2:f4:2e:
                    72:ea:41:2b:48:f7:9f:14:6d:1d:a2:d9:b3:07:9c:
                    36:c7:2c:e2:7b:a1:d0:84:cf:b5:75:db:69:a6:cb:
                    f6:99:01:44:34:8c:6b:22:7b:1b:4b:d0:c9:c9:b0:
                    d8:53:0b:69:66:b0:7b:2d:12:a9:34:ed:71:20:ce:
                    53:6e:b6:d5:b0:4b:b1:11:9f:47:e5:e8:10:d7:52:
                    88:23:19:0d:32:4b:74:78:a2:68:55:fd:2c:b7:7a:
                    fc:5d:23:5b:85:85:23:f0:8c:6b:5e:a5:bb:e9:93:
                    61:fe:6e:b3:5d:00:6e:9b:10:3e:99:c2:98:a9:2d:
                    5c:0d:6e:f8:8f:37:82:35:ef:9b:21:92:81:21:eb:
                    71:68:4a:06:83:82:8a:01:72:ea:c1:af:b3:38:be:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:DA:77:36:6C:E5:CC:06:68:FE:27:FF:4F:12:2E:EA:55:9B:20
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09055C873E011F1A354E0BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:eb:dc:c5:19:f1:a2:92:3f:fc:cd:01:b2:95:f6:ff:4b:
         65:4b:02:cf:38:20:8f:bc:e5:63:e9:00:ce:e3:24:f3:1e:1d:
         e0:d9:2d:f6:83:37:f1:5c:ba:f7:70:2d:d5:1f:e4:bf:9f:b7:
         a1:10:d3:cc:80:09:cc:48:f3:1b:e2:8c:83:a5:00:cd:a0:3b:
         e3:1c:e1:7d:e9:fe:63:59:f4:3c:f2:95:1f:11:52:12:e6:bb:
         a9:41:23:70:f1:4b:d7:3a:f4:be:fa:49:35:44:17:d5:bf:90:
         5e:ff:9e:bc:ef:82:4b:41:ee:4f:e1:d0:e9:33:6d:2c:e7:cd:
         fc:3e:1f:47:2f:a4:f7:a5:f2:5e:33:77:2f:0b:58:07:01:84:
         f9:54:4a:93:86:e3:3d:d5:94:31:4d:72:09:98:4e:65:c3:33:
         8f:3d:b7:67:76:c2:b0:8a:f0:8f:2e:6b:1d:ec:92:f9:f1:34:
         9a:cc:17:da:5d:1b:98:f1:70:4b:cf:67:cb:65:44:1d:60:24:
         54:d0:be:21:46:e0:79:45:f4:cb:09:f0:7a:2c:82:3a:29:15:
         7a:18:5f:9a:7e:8c:99:14:49:9d:6d:c9:16:6b:3b:86:77:f4:
         66:38:fc:8d:00:ff:f0:e9:06:0b:f1:bd:f7:ec:e6:d5:25:72:
         d1:5c:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client