Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A4D55C75E811F1A45251A6CE1D38B0.roa
File:                     E6A4D55C75E811F1A45251A6CE1D38B0.roa (raw, json)
Hash identifier:          dqhhGwo5ORAUAjfcYubQtuWzJ3LoUBXq/SMDJBVVUXg=
Subject key identifier:   92:F4:99:0E:B7:A8:D7:27:65:34:FC:EF:1C:B2:9F:10:D4:DC:15:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C24A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A4D55C75E811F1A45251A6CE1D38B0.roa
Signing time:             Thu 02 Jul 2026 07:37:39 +0000
ROA not before:           Thu 02 Jul 2026 07:37:34 +0000
ROA not after:            Mon 10 Aug 2026 07:37:34 +0000
asID:                     274273
IP address blocks:        45.194.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115274 (0x1c24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  2 07:37:34 2026 GMT
            Not After : Aug 10 07:37:34 2026 GMT
        Subject: CN=6a461543-d5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:89:80:f4:d1:77:46:c5:50:e3:b3:5f:5c:
                    7b:75:b7:0a:05:4e:ad:3b:c3:93:7d:31:b4:2f:37:
                    7f:10:1d:b5:b9:3b:a0:9e:db:ed:11:26:0a:ec:ce:
                    69:5b:69:11:f3:e9:ff:d9:bd:0c:d3:aa:8f:60:5d:
                    23:d2:20:0c:ab:11:60:1e:ef:39:08:45:5a:e9:7f:
                    00:36:19:f7:1b:4b:ae:86:e0:40:6a:65:00:c5:ae:
                    ba:52:db:4f:39:f0:3c:04:19:20:63:db:00:be:46:
                    46:be:8f:b6:23:8d:58:89:24:d8:ad:77:74:88:34:
                    d0:04:6e:d7:ea:88:f1:6d:e4:f5:05:1b:5d:0f:24:
                    33:14:8a:5c:e4:32:c9:51:ac:9a:ee:77:1a:3c:fc:
                    3b:94:c1:30:fc:00:09:98:f1:ad:0a:38:ec:8d:49:
                    b4:80:b1:fb:fe:c9:66:25:ac:d9:46:9f:c0:5b:4a:
                    bb:73:8e:b5:b7:2a:b8:c2:d8:10:10:d8:e2:ba:c2:
                    fd:81:3f:26:77:d9:d8:67:20:5d:f3:58:02:5e:ac:
                    53:5f:23:d9:ae:29:64:08:d6:ed:32:4f:39:5f:57:
                    b2:b0:36:46:c4:19:2a:ec:0b:03:ea:cd:8b:a5:8c:
                    dd:d8:6e:f4:9e:f5:12:d8:e1:27:d0:88:ac:7b:18:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:99:0E:B7:A8:D7:27:65:34:FC:EF:1C:B2:9F:10:D4:DC:15:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A4D55C75E811F1A45251A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:77:75:ef:d6:41:16:d9:e5:3f:98:5e:e1:3e:65:6e:1a:
         aa:6c:9a:14:60:e8:dd:2b:1e:71:24:65:aa:80:89:c3:b6:33:
         6c:68:b7:b0:96:0f:52:2d:6f:30:34:5c:07:f7:d7:58:b2:eb:
         aa:06:e1:80:06:5d:de:df:c0:a9:d4:82:d7:51:76:71:62:b3:
         2c:b5:d2:10:c2:68:cc:cb:2b:f7:7a:74:74:ab:57:a9:9b:e7:
         88:54:a7:ca:8f:3f:97:7e:c0:7e:29:9e:bd:c0:fd:31:b9:ad:
         42:42:96:76:ff:0d:55:f5:f8:ef:e0:e3:f3:6a:6c:2f:7a:5d:
         c1:e3:4b:a9:72:19:bc:12:ff:b4:e0:a6:19:c1:01:19:4a:de:
         bf:38:fb:fc:f4:cc:c6:27:4b:61:a4:14:20:0e:5b:c5:b9:f4:
         34:ed:49:0c:64:3b:f4:8d:e9:a5:a9:65:71:8d:d2:7d:53:09:
         af:e1:5e:c3:27:78:a9:3b:c9:34:4b:dd:38:77:76:65:ee:5f:
         5d:23:a6:17:41:9b:39:80:d3:2a:61:cf:47:86:18:e0:e5:ee:
         b1:6f:5b:37:60:2f:b3:1d:10:3c:ad:5b:5a:1d:90:84:ae:be:
         fd:14:5d:62:39:b2:53:7b:3a:2a:61:e8:1e:00:28:c9:a0:bf:
         70:ad:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:35 2026 by rpki-client