Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28482E273F211F18DDF0EAACE1D38B0.roa
File:                     B28482E273F211F18DDF0EAACE1D38B0.roa (raw, json)
Hash identifier:          D9vIF2h8jh0rQbV35W9bMBlT3wnqRJf7R3NfmsOO6nw=
Subject key identifier:   26:CB:18:B9:C5:35:D4:F7:62:90:87:33:11:07:55:9E:EE:D3:DC:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C1AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28482E273F211F18DDF0EAACE1D38B0.roa
Signing time:             Mon 29 Jun 2026 19:42:44 +0000
ROA not before:           Mon 29 Jun 2026 19:42:39 +0000
ROA not after:            Sat 01 Aug 2026 19:42:39 +0000
asID:                     215925
IP address blocks:        45.198.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115116 (0x1c1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 29 19:42:39 2026 GMT
            Not After : Aug  1 19:42:39 2026 GMT
        Subject: CN=6a42cab4-45e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:73:d0:b9:86:f1:25:bf:ea:c5:75:f6:84:
                    8e:fe:6e:3d:a0:dc:32:3a:f8:2e:55:5a:ad:2b:c3:
                    f1:3b:31:47:5e:81:c5:45:a9:ac:c0:af:5d:87:9c:
                    d8:e7:d8:5e:67:9f:17:b2:d6:0e:56:fc:42:13:a8:
                    54:5f:57:f0:53:2e:3d:bf:0e:95:6e:ad:b7:9c:08:
                    65:0b:f8:7c:49:21:1f:65:b2:2c:b3:6e:3a:3f:78:
                    b1:82:6b:93:77:f2:a5:5d:7e:75:f6:a1:2c:cd:8a:
                    58:2a:73:32:9b:ef:cd:00:f4:b3:9a:be:b1:ef:40:
                    1e:28:87:b3:7f:93:97:2c:99:48:68:7f:02:87:73:
                    f0:7c:6a:7c:5c:e5:40:e5:4a:be:3f:c6:3b:e7:c2:
                    74:82:b1:f1:4d:e2:b5:77:69:d0:34:a1:55:51:56:
                    a7:84:04:a9:df:b8:86:eb:57:6c:42:f2:1e:de:9b:
                    61:98:d5:2f:78:cb:50:6a:3d:42:ab:a2:b0:33:5d:
                    2f:8f:3a:13:79:61:86:49:a3:9e:f5:a2:93:b8:68:
                    be:dc:43:ec:2d:4f:1a:de:be:26:37:17:e4:fb:38:
                    bf:d4:6f:72:da:1a:98:85:21:9a:2c:2a:bc:48:0f:
                    75:b1:bc:be:b4:5c:0a:0c:13:a6:d9:70:be:5a:be:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:18:B9:C5:35:D4:F7:62:90:87:33:11:07:55:9E:EE:D3:DC:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28482E273F211F18DDF0EAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:51:39:e0:67:ce:a8:42:60:d9:62:37:75:5f:fc:85:62:1d:
         4f:16:47:c4:0a:ec:3c:32:30:d0:a8:61:f1:b1:14:72:09:a2:
         70:10:e4:6d:4c:5d:b2:43:a9:26:93:cb:32:23:98:2d:ef:07:
         71:b4:37:1e:1a:9e:0d:22:92:29:f0:bd:96:82:e0:3f:6c:86:
         2d:ab:b5:29:25:27:c1:f1:67:e6:17:0c:5c:ea:23:2b:fb:cb:
         eb:63:f8:69:9a:12:f6:b2:32:68:6d:b8:9c:e6:8b:be:66:ac:
         cd:14:82:8a:f8:53:cf:33:b8:0a:a4:35:73:7e:ab:74:f5:a2:
         ee:da:69:3d:41:95:17:62:ce:6e:ac:6a:c0:9c:56:d8:b8:02:
         33:1e:09:11:4e:6a:f9:8e:77:79:33:4f:44:09:bb:9c:b5:59:
         52:1e:fc:96:12:d6:1e:39:6e:2e:45:00:b5:51:2d:df:d2:89:
         fb:f6:a1:ac:68:26:15:d6:c6:1a:07:c4:40:28:4f:e7:91:af:
         18:08:9a:fa:4a:fb:81:b6:6c:64:2c:a8:fc:38:48:f0:28:69:
         bf:20:6a:e6:99:fc:29:ca:66:90:62:63:0e:85:36:89:49:ef:
         ed:b2:63:66:b1:ce:4f:32:38:e0:f3:8c:17:41:77:3a:cf:dd:
         41:42:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:37 2026 by rpki-client