Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D71E268B2F11F193E58BB9CE1D38B0.roa
File:                     D6D71E268B2F11F193E58BB9CE1D38B0.roa (raw, json)
Hash identifier:          E/yBNqNaXXrFBYWN7wphUUtnGZHDOmCj2QCmAVfgbSc=
Subject key identifier:   14:D8:24:56:C0:ED:AE:88:E8:34:F1:A0:11:61:E9:3F:C7:8E:F7:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C8A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D71E268B2F11F193E58BB9CE1D38B0.roa
Signing time:             Wed 29 Jul 2026 09:28:21 +0000
ROA not before:           Wed 29 Jul 2026 09:28:17 +0000
ROA not after:            Thu 10 Sep 2026 09:28:17 +0000
asID:                     215691
IP address blocks:        45.198.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 19 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116897 (0x1c8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 09:28:17 2026 GMT
            Not After : Sep 10 09:28:17 2026 GMT
        Subject: CN=6a69c7b5-ac68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:6c:62:ef:58:59:69:7b:6f:6b:fc:27:fe:
                    f2:a5:02:6f:99:38:a4:32:50:51:91:e3:5a:90:8d:
                    aa:a6:7f:5a:04:3e:9b:00:b4:11:73:bf:dc:bd:93:
                    6b:87:23:83:56:5f:15:2a:93:9d:a0:d2:6d:64:d3:
                    4f:fc:4e:8d:17:6b:12:9c:60:0b:e9:45:e6:c9:66:
                    dc:60:ae:37:ce:be:46:c5:bc:38:11:12:a2:6c:44:
                    d4:97:64:da:18:b4:fd:82:e4:5f:8b:48:cc:c3:68:
                    d0:ba:ad:c5:1e:0b:f0:01:8c:e2:c5:b2:13:fc:63:
                    24:86:af:85:cb:d0:f6:c2:fd:2c:73:db:f5:3c:c1:
                    10:e4:63:f1:15:3f:4b:37:49:d5:92:1d:b3:3a:b5:
                    4a:2f:e8:b2:76:82:ce:43:8a:8c:28:c8:f9:14:76:
                    83:28:60:32:99:eb:75:1d:3b:76:d2:be:ae:99:a1:
                    bb:cb:1f:91:60:8e:82:58:12:84:55:4a:44:82:aa:
                    f9:59:60:55:11:23:63:6c:c0:61:5c:24:a9:71:e1:
                    70:e8:b4:fe:96:b7:21:57:8a:1c:d8:84:9d:e4:dd:
                    c1:65:11:db:39:d2:b1:91:8c:63:0b:46:13:11:c9:
                    01:fe:a4:b5:5d:78:48:47:94:f9:6a:e3:29:33:5b:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:24:56:C0:ED:AE:88:E8:34:F1:A0:11:61:E9:3F:C7:8E:F7:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D71E268B2F11F193E58BB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:df:92:b1:d9:29:02:e4:fe:fa:5f:35:37:77:d5:63:40:
         b2:14:f8:06:95:ee:07:69:55:d9:64:e7:7a:02:16:2a:5e:a7:
         3d:4b:f0:42:32:0d:ee:40:b5:91:ad:a2:66:76:0b:66:7f:86:
         dd:d1:30:25:7f:5f:cb:19:2e:e2:ff:b2:f9:3b:96:bc:9d:2e:
         86:f5:b1:88:4e:c4:ef:73:ef:0c:6f:27:7f:20:98:a4:f9:cd:
         4e:e2:af:bd:d5:62:ee:36:8f:ba:c5:29:54:fa:09:5a:b0:c1:
         42:b8:75:2d:fa:32:74:20:bb:c9:ff:fc:4d:de:55:31:e4:5c:
         db:72:a9:91:ed:a3:d6:30:cd:5b:2d:00:b5:18:59:08:71:97:
         9c:d4:82:b9:10:cf:bb:fb:7e:de:ae:0f:4e:d6:0f:f5:11:6a:
         5c:2d:18:35:9c:de:95:5a:ef:35:ed:30:b9:d0:cb:d8:b0:4d:
         1c:0f:62:d1:1e:cd:f1:78:48:4c:10:84:92:c3:37:50:14:f9:
         bc:31:2f:b7:6f:70:ab:65:2c:b0:f2:70:b0:79:44:b1:fa:c0:
         4c:1a:9c:35:ae:a1:fb:24:d5:4b:a4:9d:af:cf:56:08:bd:bc:
         3d:9e:79:16:14:d2:0a:7c:9e:1e:00:a9:86:9b:19:da:94:41:
         4d:4a:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:09:59 2026 by rpki-client