Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE184752552011F19386E808CF1D38B0.roa
File:                     AE184752552011F19386E808CF1D38B0.roa (raw, json)
Hash identifier:          x+HaiGWTuUaBskFpMdRh3Xrf6grPA0NyjT5gt5mQTRc=
Subject key identifier:   80:F0:F2:2E:35:7E:0F:B8:4D:8F:C1:99:6E:D3:FC:59:6C:71:BA:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B727
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE184752552011F19386E808CF1D38B0.roa
Signing time:             Thu 21 May 2026 14:23:48 +0000
ROA not before:           Thu 21 May 2026 14:23:43 +0000
ROA not after:            Sun 28 Jun 2026 14:23:43 +0000
asID:                     198474
IP address blocks:        45.202.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112423 (0x1b727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 21 14:23:43 2026 GMT
            Not After : Jun 28 14:23:43 2026 GMT
        Subject: CN=6a0f1573-9947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:b5:75:ba:5d:8c:75:18:35:53:5e:de:e7:
                    32:e5:6b:b9:50:59:f2:4c:41:ad:b1:6a:4d:95:5f:
                    ae:a1:37:4b:ec:42:2f:69:dd:17:63:bc:f4:24:04:
                    f3:7c:2d:77:18:56:c1:41:79:3e:5d:fe:8f:8b:e5:
                    8c:d2:6d:7b:da:95:8d:43:ed:aa:13:5e:61:3b:9a:
                    d7:a7:46:7f:d2:08:59:af:84:ed:eb:67:ee:43:ea:
                    ce:ac:46:ec:18:53:91:d1:bd:06:07:b6:48:62:f3:
                    ea:6c:c3:a4:46:c0:2f:15:61:89:50:bc:0b:0d:71:
                    c8:42:d5:2e:05:f3:90:c0:0c:f5:23:75:57:77:76:
                    2c:84:6b:7d:b6:65:60:01:bc:3f:cd:e9:c8:07:38:
                    41:86:00:23:11:78:16:41:c7:3c:c9:a0:0c:af:42:
                    ab:69:ee:05:52:8a:70:13:9c:bd:82:e3:5f:ee:3d:
                    e2:13:e5:a1:8c:37:b3:66:5f:ab:dc:94:99:99:45:
                    43:66:c5:59:83:33:47:30:20:92:6e:bf:36:f7:af:
                    77:41:5b:95:05:40:3b:79:26:4c:d1:38:39:61:90:
                    f0:b0:cc:81:6f:1b:c7:af:38:0a:bb:35:c2:e0:4a:
                    f4:b2:78:8e:18:82:aa:c3:8d:ce:2f:d5:50:e3:2e:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:F2:2E:35:7E:0F:B8:4D:8F:C1:99:6E:D3:FC:59:6C:71:BA:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE184752552011F19386E808CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:26:1a:66:40:26:3b:5a:d4:70:80:49:4e:3d:73:ce:e5:57:
         e8:21:5a:c6:27:b4:43:da:41:ff:2a:62:ff:39:0f:19:5e:e3:
         71:de:c2:a4:e7:dd:a6:81:2a:58:11:19:f2:f4:33:cd:70:46:
         4d:3c:79:f8:e1:1c:53:98:09:63:88:97:05:bf:ba:30:eb:a9:
         79:3f:7c:73:91:02:5d:b0:86:fc:a8:96:db:ee:f3:0f:1b:53:
         a9:45:a3:65:59:ef:3c:4a:5d:b5:19:1b:74:30:0d:bb:b5:c6:
         ea:df:20:01:59:d2:33:88:d6:fb:a9:4f:1f:bb:23:07:6d:95:
         19:25:b5:81:ca:28:2a:38:2e:3c:87:de:2e:08:cc:ac:e0:94:
         2c:4e:f3:54:0f:a5:3a:ac:48:2e:58:7b:0d:05:1d:a3:e5:e9:
         61:cd:b6:61:58:ec:44:fb:d9:bd:93:36:6b:ac:a9:dc:e8:88:
         5e:67:4e:63:70:0b:3f:b3:6c:7b:e5:50:9e:24:77:ca:50:5f:
         e0:f3:9d:10:63:e4:b6:3b:96:06:57:0b:b1:1a:3a:69:5a:fc:
         81:93:dd:14:db:b8:52:dd:1e:5a:a1:55:a2:1e:d5:91:e1:4e:
         fd:0f:cf:cc:9d:bb:cd:1d:6b:ea:9e:8c:28:1b:7e:9e:c6:05:
         27:15:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:57 2026 by rpki-client