Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23726986E1F11F1B0EBF8CACE1D38B0.roa
File:                     A23726986E1F11F1B0EBF8CACE1D38B0.roa (raw, json)
Hash identifier:          q8cLl4+becT8x0sUIE4RO6l2Xu05M3G+2i7xxsnK1EI=
Subject key identifier:   08:62:ED:8B:D9:10:FA:9E:3A:B7:B1:BF:BB:F7:98:11:EF:B8:3E:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23726986E1F11F1B0EBF8CACE1D38B0.roa
Signing time:             Mon 22 Jun 2026 09:49:17 +0000
ROA not before:           Mon 22 Jun 2026 09:49:13 +0000
ROA not after:            Tue 28 Jul 2026 09:49:13 +0000
asID:                     202656
IP address blocks:        45.195.184.0/24 maxlen: 24
                          45.195.185.0/24 maxlen: 24
                          45.195.187.0/24 maxlen: 24
                          45.195.188.0/24 maxlen: 24
                          45.195.191.0/24 maxlen: 24
                          45.199.201.0/24 maxlen: 24
                          45.199.202.0/24 maxlen: 24
                          45.199.203.0/24 maxlen: 24
                          45.199.204.0/24 maxlen: 24
                          45.199.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114552 (0x1bf78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 09:49:13 2026 GMT
            Not After : Jul 28 09:49:13 2026 GMT
        Subject: CN=6a39051d-d64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:c4:d4:8c:f3:b9:bd:a1:a4:76:32:26:e8:
                    5a:67:97:e2:b4:29:7c:0f:0f:4e:95:b0:46:04:d5:
                    7f:e1:9a:30:93:87:eb:d8:b0:7a:b7:6b:ae:50:f0:
                    1f:39:5c:6c:01:b0:16:02:77:48:b6:f8:a2:1d:d3:
                    f5:3e:31:f9:f5:35:cc:bb:57:81:47:90:3f:99:62:
                    8a:85:4c:b9:48:cf:d6:da:7d:b1:fb:d0:af:25:04:
                    8e:4e:76:53:d0:76:4d:50:19:07:ed:ca:92:ba:ad:
                    70:42:b2:f6:1a:70:83:32:62:fc:60:58:3b:d7:8e:
                    8e:41:3a:ce:f9:ae:2f:5e:bf:ae:ac:fa:d1:c9:8c:
                    fc:e3:ab:34:37:c4:3a:cd:b6:75:3c:1c:88:a5:14:
                    23:1e:e3:f4:14:2f:68:14:26:d4:9e:d0:8c:23:85:
                    34:5e:cc:fc:72:ac:11:93:94:c7:28:34:6a:61:b7:
                    97:de:36:80:d9:be:e8:79:4a:c8:25:ec:a5:c3:0e:
                    09:b9:35:2d:2b:14:c9:59:08:08:5e:53:c0:13:69:
                    35:2a:f3:56:d0:77:1c:ba:cf:fb:ec:58:37:43:d7:
                    bc:34:36:b7:fe:89:79:52:fb:ff:cb:b8:4f:a2:64:
                    77:8f:2d:14:89:31:58:ff:db:70:4c:eb:42:08:bc:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:62:ED:8B:D9:10:FA:9E:3A:B7:B1:BF:BB:F7:98:11:EF:B8:3E:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23726986E1F11F1B0EBF8CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.184.0/23
                  45.195.187.0-45.195.188.255
                  45.195.191.0/24
                  45.199.201.0-45.199.205.255

    Signature Algorithm: sha256WithRSAEncryption
         72:de:9f:b5:09:bf:85:76:ad:33:b4:ce:0f:e1:13:21:12:11:
         75:db:1f:e1:66:0e:8d:2a:46:5e:2b:51:13:99:58:5b:a4:26:
         dc:6f:08:4b:ff:03:c7:0f:8d:01:54:0f:f0:37:23:2f:01:b2:
         75:77:93:b9:88:06:51:51:6f:9b:80:eb:61:c7:01:11:c6:3c:
         bc:04:05:42:b1:9d:03:0f:5d:7c:82:c1:8c:e7:f5:90:b4:03:
         1f:de:7b:5d:ad:b6:68:7d:4b:59:46:8e:ac:12:29:8c:f1:83:
         31:32:5d:92:ec:6a:4a:1e:47:e8:0c:07:b8:7a:a8:78:43:7d:
         7d:bb:73:c5:55:c2:80:15:ea:ef:a4:80:58:fb:d4:a4:b9:d5:
         a7:20:47:20:9c:03:9e:f5:73:83:5c:28:d8:48:c5:cf:ac:ca:
         f1:22:ae:e7:bb:9f:6c:59:62:9a:8c:87:c2:7a:9a:52:ec:17:
         83:ec:83:d8:47:f7:cb:f5:2e:30:fa:fe:bb:b3:b2:94:37:44:
         c1:f5:32:9d:80:f7:1e:58:0f:53:64:33:3b:04:65:1d:2e:d5:
         29:49:8c:57:42:68:16:89:75:a7:1e:ee:b2:d5:87:3b:9e:14:
         b8:f6:35:7a:8d:c1:d8:de:63:e1:03:f9:97:fd:65:5b:48:d3:
         ef:44:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client