Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F769D233F111F1A5EB3CCDCE1D38B0.roa
File:                     A4F769D233F111F1A5EB3CCDCE1D38B0.roa (raw, json)
Hash identifier:          IldDRQp2sCqS1tcmsp/4VfNx+RXZD49+aAZGZh2YFXs=
Subject key identifier:   10:DC:B5:D5:36:94:70:08:C3:03:7D:29:C9:A5:0E:AD:ED:97:71:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F769D233F111F1A5EB3CCDCE1D38B0.roa
Signing time:             Thu 09 Apr 2026 08:53:57 +0000
ROA not before:           Thu 09 Apr 2026 08:53:53 +0000
ROA not after:            Sat 16 May 2026 08:53:53 +0000
asID:                     43260
IP address blocks:        45.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 Apr 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109356 (0x1ab2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 08:53:53 2026 GMT
            Not After : May 16 08:53:53 2026 GMT
        Subject: CN=69d76925-8516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b0:96:df:6b:f0:e5:3e:1c:bd:a5:46:ac:
                    79:49:45:35:93:04:5f:a3:13:e5:9c:3d:25:32:8d:
                    5e:5c:9a:08:ce:af:4b:25:eb:ac:e9:bc:fd:c1:e5:
                    81:4c:60:0b:b9:4b:ac:85:7a:c2:53:1b:eb:89:92:
                    14:1c:8d:ab:fe:df:ca:c1:87:b9:dd:e3:60:70:86:
                    2e:b1:ee:ac:2e:2e:07:ca:c4:62:8b:89:c3:73:a5:
                    3a:7a:95:4f:7f:af:28:91:b1:2b:44:70:43:15:04:
                    f0:0d:6c:2d:0a:20:96:ab:7a:c3:f4:ec:55:72:7f:
                    49:8c:14:4e:39:16:c6:b0:d1:27:d9:58:a0:69:b7:
                    53:ac:be:a8:c5:5b:ca:da:7d:59:ac:a5:4a:bf:2f:
                    6d:7b:3e:d2:67:cf:0d:ae:48:80:82:21:3f:17:db:
                    97:6e:d0:41:4a:4c:a0:38:ba:82:6c:4d:93:11:16:
                    14:be:32:9f:4e:60:26:2f:27:42:e4:79:e2:35:2b:
                    ed:b1:32:51:c4:8e:33:9f:86:3f:2f:04:42:8b:2b:
                    1c:3e:09:59:e8:82:a3:21:00:fa:3c:5b:0a:04:9f:
                    be:66:ba:4c:23:5f:df:74:e6:41:a2:8d:c9:e8:1f:
                    47:2d:63:52:6a:e0:fb:db:94:cc:83:32:2f:09:22:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:B5:D5:36:94:70:08:C3:03:7D:29:C9:A5:0E:AD:ED:97:71:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F769D233F111F1A5EB3CCDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:17:ac:24:12:31:50:d1:fa:bb:71:2a:43:58:23:a8:a0:
         80:f4:60:2e:e2:cc:87:d8:d9:4e:d5:22:04:3e:20:b3:fe:01:
         bb:33:ae:62:93:9f:ca:27:33:67:95:55:33:93:8e:49:5b:0b:
         8b:3e:3d:b0:4c:8a:34:c4:9d:f8:3a:90:89:97:d2:3c:7c:06:
         bc:58:e1:f0:db:0e:1f:bf:9e:8a:b2:ae:fa:b8:f3:45:4c:af:
         b2:5e:88:3f:5e:4a:60:56:36:2b:61:92:3c:6a:7a:e0:ab:1e:
         e2:eb:17:0a:d2:cc:05:de:f0:72:79:2a:4c:8e:5c:8e:d4:3f:
         8c:57:7e:6d:58:79:ef:17:cc:49:0e:0a:f0:84:6d:f3:f4:e7:
         1f:a5:67:b5:78:fc:b5:ae:80:1b:af:d4:78:24:25:33:26:6b:
         9e:b0:e9:e6:66:0c:7a:38:45:1a:77:2c:94:ea:fd:4f:53:a7:
         4d:4b:8e:39:2c:6b:67:1d:e4:c4:e2:9e:03:e7:93:8b:e2:71:
         df:7b:46:e0:2b:aa:e6:31:72:89:af:97:f6:d1:be:71:ad:fa:
         4b:33:27:02:dc:a9:27:e1:14:f8:93:2e:70:2e:69:84:b9:c0:
         2d:52:1e:5f:93:9d:85:9b:d6:3a:44:ce:4b:1e:b5:93:bb:23:
         72:7f:5c:dd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAassMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA5MDg1MzUzWhcNMjYwNTE2MDg1MzUzWjAYMRYw
FAYDVQQDEw02OWQ3NjkyNS04NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0yOwlt9r8OU+HL2lRqx5SUU1kwRfoxPlnD0lMo1eXJoIzq9LJeus6bz9
weWBTGALuUushXrCUxvriZIUHI2r/t/KwYe53eNgcIYuse6sLi4HysRii4nDc6U6
epVPf68okbErRHBDFQTwDWwtCiCWq3rD9OxVcn9JjBROORbGsNEn2VigabdTrL6o
xVvK2n1ZrKVKvy9tez7SZ88NrkiAgiE/F9uXbtBBSkygOLqCbE2TERYUvjKfTmAm
LydC5HniNSvtsTJRxI4zn4Y/LwRCiyscPglZ6IKjIQD6PFsKBJ++ZrpMI1/fdOZB
oo3J6B9HLWNSauD725TMgzIvCSJuzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBDc
tdU2lHAIwwN9KcmlDq3tl3GeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNEY3NjlEMjMzRjExMUYxQTVFQjNDQ0RDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNLMA0GCSqGSIb3DQEBCwUA
A4IBAQA7DhesJBIxUNH6u3EqQ1gjqKCA9GAu4syH2NlO1SIEPiCz/gG7M65ik5/K
JzNnlVUzk45JWwuLPj2wTIo0xJ34OpCJl9I8fAa8WOHw2w4fv56Ksq76uPNFTK+y
Xog/XkpgVjYrYZI8anrgqx7i6xcK0swF3vByeSpMjlyO1D+MV35tWHnvF8xJDgrw
hG3z9OcfpWe1ePy1roAbr9R4JCUzJmuesOnmZgx6OEUadyyU6v1PU6dNS445LGtn
HeTE4p4D55OL4nHfe0bgK6rmMXKJr5f20b5xrfpLMycC3Kkn4RT4ky5wLmmEucAt
Uh5fk52Fm9Y6RM5LHrWTuyNyf1zd
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:43 2026 by rpki-client