Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C174962A7B6811F1A7B50CC8CE1D38B0.roa
File:                     C174962A7B6811F1A7B50CC8CE1D38B0.roa (raw, json)
Hash identifier:          iLoTNnJSIdCvWg9TfnmRU+6Qx4iz7GHcKeL5HVCOftU=
Subject key identifier:   56:25:52:2E:53:43:55:FB:EE:04:3C:DA:8B:99:81:E4:2A:02:69:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C3E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C174962A7B6811F1A7B50CC8CE1D38B0.roa
Signing time:             Thu 09 Jul 2026 07:35:28 +0000
ROA not before:           Thu 09 Jul 2026 07:35:23 +0000
ROA not after:            Mon 09 Jul 2029 07:35:23 +0000
asID:                     17561
IP address blocks:        45.194.218.0/24 maxlen: 24
                          45.194.219.0/24 maxlen: 24
                          45.194.220.0/24 maxlen: 24
                          45.194.221.0/24 maxlen: 24
                          45.194.222.0/24 maxlen: 24
                          45.194.223.0/24 maxlen: 24
                          45.194.224.0/24 maxlen: 24
                          45.194.225.0/24 maxlen: 24
                          45.194.226.0/24 maxlen: 24
                          45.194.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115683 (0x1c3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  9 07:35:23 2026 GMT
            Not After : Jul  9 07:35:23 2029 GMT
        Subject: CN=6a4f4f40-9f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:5c:b9:53:0d:cf:7a:6b:25:19:6f:cb:84:
                    2d:aa:1c:62:f6:a7:81:06:12:60:f4:c3:57:23:1f:
                    9c:d1:8a:f8:38:a8:81:6e:8f:b1:1b:00:36:e2:33:
                    31:ab:00:c1:80:c5:41:b1:bb:61:1a:06:84:4e:42:
                    fe:09:63:12:c8:cf:ce:d2:29:c0:fe:bc:2e:f9:db:
                    3d:38:c8:ac:d5:e2:df:2c:89:a3:c0:1b:c9:99:a9:
                    8a:b0:4a:87:0a:b2:86:a8:ed:b7:99:d5:6b:2b:33:
                    08:fc:dd:39:8c:20:f9:ec:23:03:fe:95:5b:2b:9d:
                    a8:fc:0c:95:0b:5d:cb:00:9c:ec:80:0a:0a:1b:8e:
                    01:b9:2e:76:aa:da:6b:12:67:a2:14:e3:39:12:c8:
                    fe:61:ea:62:9c:e4:0c:a0:d6:b3:f2:4f:6e:d8:a8:
                    07:17:62:bd:a5:36:aa:e4:b0:59:ee:40:d4:40:2d:
                    08:bd:23:69:63:60:92:9b:8a:08:0d:0a:bd:70:cf:
                    4a:4a:63:e8:06:06:24:28:48:29:92:22:d5:1e:87:
                    50:87:b3:87:3c:5c:14:b6:57:a7:1b:2f:29:c3:8c:
                    0d:6f:c8:b8:45:b7:01:4c:79:b1:c1:c4:bf:38:3b:
                    e9:c3:6e:26:ab:5b:61:c4:27:5d:98:83:31:cd:e6:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:52:2E:53:43:55:FB:EE:04:3C:DA:8B:99:81:E4:2A:02:69:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C174962A7B6811F1A7B50CC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.218.0-45.194.227.255

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:ae:7a:35:c7:66:50:36:4d:3a:b6:9b:11:15:6f:4f:a9:
         ea:cd:b2:4e:7e:7e:e1:bc:5e:b4:d4:c8:93:76:dd:0f:84:a3:
         fe:8d:b4:54:24:1a:4f:23:88:94:aa:e3:09:eb:34:5c:f7:7e:
         7e:27:aa:9d:5a:4b:c1:86:00:66:98:f7:ff:f2:0c:43:b9:e5:
         84:93:38:c1:e2:5f:0e:85:43:d5:28:0e:0d:04:f4:d5:a7:24:
         d1:51:0a:65:fd:0a:92:9a:90:a1:32:87:c6:b3:45:62:a8:fd:
         06:d5:79:7e:95:96:b5:d7:50:32:1e:7c:92:0d:7e:fb:27:66:
         b7:5a:4b:98:10:65:7d:50:9c:d3:47:db:27:e9:cf:63:13:d1:
         18:bc:f4:9b:c9:fa:6e:f6:be:d0:1a:b2:b8:c8:6a:f9:fa:7c:
         7b:2b:c3:c4:a9:08:24:4c:8b:70:58:e0:2b:68:16:b7:0f:d9:
         e6:64:65:96:c4:4c:33:e0:8b:be:f8:45:c2:7a:17:3d:e7:8a:
         fb:cd:87:f7:fc:41:71:21:a9:1f:aa:d8:26:c6:24:c8:e9:12:
         bd:0b:18:2b:11:d4:bc:35:a6:3b:f0:e7:d6:2d:86:c2:3f:35:
         9e:6e:13:f8:b8:ed:d8:f7:31:9a:17:2e:01:d3:ef:ba:4e:fb:
         e6:b9:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:09 2026 by rpki-client