Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B217F6963EE511F18828F9C0CE1D38B0.roa
File:                     B217F6963EE511F18828F9C0CE1D38B0.roa (raw, json)
Hash identifier:          wWMcZY7ox4zA4B/XP14PU22sitvlpyPYDMZe8O34wbQ=
Subject key identifier:   DA:DF:0A:C5:4A:3E:0C:8D:C6:69:7B:98:E1:6C:65:B7:4B:1D:4A:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AE9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B217F6963EE511F18828F9C0CE1D38B0.roa
Signing time:             Thu 23 Apr 2026 07:26:08 +0000
ROA not before:           Thu 23 Apr 2026 07:26:04 +0000
ROA not after:            Fri 28 Aug 2026 07:26:04 +0000
asID:                     395839
IP address blocks:        45.202.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 04 May 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110235 (0x1ae9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 23 07:26:04 2026 GMT
            Not After : Aug 28 07:26:04 2026 GMT
        Subject: CN=69e9c990-171b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:ef:ba:ea:f6:a1:b1:cf:c1:46:2b:d9:04:
                    a7:53:dc:f6:a9:bc:ca:09:2c:25:bb:21:90:1a:83:
                    67:5a:bf:88:ca:57:11:c5:9b:ad:b9:18:88:33:a2:
                    0f:8d:e7:d2:b2:58:99:b4:d8:63:b0:d8:d8:35:d9:
                    f9:e0:6e:fe:84:97:95:6a:08:1e:d5:fa:f9:3c:32:
                    95:1c:d3:92:1d:12:cc:e0:8a:c7:2b:24:d3:6e:7e:
                    6b:05:2c:b7:68:73:15:65:98:ae:09:fc:10:06:fa:
                    33:db:ca:c3:60:be:68:96:8a:15:df:e5:c5:ce:c5:
                    5a:3c:f7:54:58:f9:02:7f:7c:fc:9a:1e:6d:2b:d6:
                    db:75:20:cc:0d:0b:c7:d7:0d:ad:b4:7a:16:f2:16:
                    27:4e:88:01:ec:01:b5:e3:29:e6:7b:26:0a:ed:bb:
                    92:f3:91:f2:3d:6d:30:2e:25:2e:89:09:59:41:81:
                    42:42:19:67:79:fd:2f:75:0d:e0:e7:2c:24:0e:a8:
                    7d:9c:a1:e8:7a:82:bb:88:db:a4:96:01:47:6c:a1:
                    bb:0d:1e:a2:1f:48:ed:c8:55:90:68:cf:7b:07:09:
                    d5:b2:27:a4:f3:84:16:86:f0:14:74:70:da:be:f2:
                    d0:40:5b:5b:74:5e:8e:b6:d1:30:95:f6:dd:39:de:
                    dd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:0A:C5:4A:3E:0C:8D:C6:69:7B:98:E1:6C:65:B7:4B:1D:4A:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B217F6963EE511F18828F9C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:df:ff:a5:7b:53:d2:02:95:2e:0c:99:e5:9b:79:68:61:16:
         95:34:68:e6:6f:18:17:8e:b0:e5:d1:e3:b6:ea:7c:71:dd:46:
         5c:3c:fe:c6:5f:20:ba:38:b3:c6:6f:58:2c:21:73:0c:d5:03:
         2d:61:d1:ea:14:b9:79:c0:31:2b:a1:2b:e6:75:cd:30:78:7a:
         58:c0:a4:50:cb:44:45:ed:cd:c2:57:87:61:fb:1e:19:ca:7f:
         9d:dc:70:63:a0:d5:f8:2d:6a:9c:c0:1e:f9:67:74:5b:1c:0a:
         ed:b1:6d:7a:71:c4:a3:80:a7:5a:45:8e:34:65:85:ce:94:b9:
         df:47:72:56:4c:5a:31:bd:87:46:f4:a2:ad:89:7e:70:a8:a3:
         15:c5:ca:96:21:fb:bf:ed:0c:0f:42:28:e4:f5:df:54:1e:5b:
         eb:91:7b:14:c0:95:35:3f:c6:f2:6c:70:50:4c:94:c9:39:30:
         2c:31:ff:67:6f:5c:c2:5a:cc:20:fe:e4:75:2d:21:76:57:4f:
         47:79:80:55:6d:0e:d9:63:db:20:ee:39:14:0b:06:ca:41:80:
         ae:7f:18:8f:4b:1d:d6:cd:19:08:33:d4:1f:45:4a:db:70:bd:
         bb:8c:42:1b:1a:d6:f5:60:4f:d7:85:f7:db:13:71:45:f5:e5:
         26:8b:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 01:04:14 2026 by rpki-client