Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B999141E720611F1AF721804CF1D38B0.roa
File:                     B999141E720611F1AF721804CF1D38B0.roa (raw, json)
Hash identifier:          Db6AKf38nZcT+pp10Db2UWxwcoVK38pmXWZOX7DlPFA=
Subject key identifier:   B5:A6:DB:4F:6C:7C:A8:D1:A1:C1:3D:62:C7:94:47:44:DC:50:70:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C0DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B999141E720611F1AF721804CF1D38B0.roa
Signing time:             Sat 27 Jun 2026 09:01:04 +0000
ROA not before:           Sat 27 Jun 2026 09:00:54 +0000
ROA not after:            Sat 01 Aug 2026 09:00:54 +0000
asID:                     17561
IP address blocks:        45.198.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114906 (0x1c0da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 27 09:00:54 2026 GMT
            Not After : Aug  1 09:00:54 2026 GMT
        Subject: CN=6a3f9150-1c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:17:7b:d7:8d:30:cd:9a:35:20:29:6f:8c:
                    55:e4:c6:bc:d4:e2:9f:d5:0e:fd:32:a1:91:70:ef:
                    53:18:60:eb:1c:f2:36:b7:63:49:99:6a:6e:12:cc:
                    b4:52:fa:a8:24:83:b9:8f:c1:44:fe:55:13:61:cd:
                    ed:b2:7f:1d:5e:2b:b8:fa:09:0e:e3:41:b9:a8:fb:
                    6e:bd:87:61:b8:d7:59:55:f0:0a:03:8d:61:7e:5c:
                    b0:32:40:04:12:40:42:29:0f:fe:ae:e8:a6:48:d5:
                    7f:e5:56:a8:93:9f:e1:06:51:45:69:22:e8:ed:b5:
                    a4:f3:2e:14:da:d8:73:b6:8a:a0:f7:d0:05:9d:16:
                    d1:02:03:4c:d6:0f:01:73:03:0d:c6:21:9b:2a:df:
                    23:df:ab:ce:9e:99:8a:1f:a4:dd:8d:64:8c:cf:a4:
                    9c:b5:79:1e:e3:98:26:45:99:b7:42:9d:d8:5e:4f:
                    20:66:38:9b:96:80:cc:cd:f9:7b:be:58:c3:e3:b8:
                    29:04:94:af:32:cc:52:75:7f:9c:67:04:66:a7:ea:
                    f2:7e:f9:dd:52:4c:dd:80:40:fd:9d:ca:1f:0d:db:
                    2d:33:53:50:e7:4f:58:dd:f4:46:8d:df:e3:c0:76:
                    df:0b:07:fb:ab:62:0d:e6:ea:8b:5e:8e:25:22:ab:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:DB:4F:6C:7C:A8:D1:A1:C1:3D:62:C7:94:47:44:DC:50:70:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B999141E720611F1AF721804CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:48:30:a6:42:1a:bf:5f:26:2f:a9:ba:4a:bc:9e:41:ec:
         17:e9:9c:ac:e6:69:19:17:24:89:ac:4d:7b:fd:f1:3b:01:c8:
         72:a8:18:ab:d2:50:5e:dd:e8:06:c4:8c:19:17:99:e2:1e:81:
         01:98:f4:60:96:78:7d:88:55:40:07:ea:3a:c1:1e:65:89:f3:
         14:3c:a1:a1:92:2d:be:9f:cd:89:2c:02:95:bf:61:f6:21:91:
         88:b0:7f:b4:c2:86:f3:fe:c0:42:c9:c4:20:09:a8:00:85:95:
         e3:36:21:c0:34:5d:04:bb:1b:96:57:e3:be:05:e7:d7:ec:57:
         e6:1a:83:b5:05:f5:ea:cd:df:81:85:cb:86:e2:14:fd:d7:55:
         e2:3b:89:83:b1:1c:31:95:a0:16:4e:71:fe:f5:fd:b5:3d:7d:
         2d:d8:c2:1d:73:72:62:3f:39:15:50:f2:0f:a5:02:3e:16:b5:
         65:b6:39:40:18:49:47:05:f6:7e:04:f7:a3:f0:a0:73:87:a1:
         00:87:ed:11:86:56:7e:e0:1c:e3:30:a5:21:d7:2a:b4:89:04:
         84:c1:35:f6:16:8a:cb:b3:c8:18:2e:f6:a1:21:be:ad:42:f9:
         0d:8f:dc:19:82:55:6d:c7:55:6f:5e:71:f6:51:3f:f6:5d:f6:
         0e:e9:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:21 2026 by rpki-client