Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1A1994A7D6D11F1A8021205CF1D38B0.roa
File:                     F1A1994A7D6D11F1A8021205CF1D38B0.roa (raw, json)
Hash identifier:          WSPmkN15FAELxwE9TslCduCdE9bP24kVyIhq40cGsqo=
Subject key identifier:   EC:20:29:35:6D:73:A7:E6:20:94:77:3F:B5:13:91:FC:7B:15:98:0C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C497
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1A1994A7D6D11F1A8021205CF1D38B0.roa
Signing time:             Sat 11 Jul 2026 21:17:39 +0000
ROA not before:           Sat 11 Jul 2026 21:17:33 +0000
ROA not after:            Sat 10 Jul 2027 21:17:33 +0000
asID:                     328608
IP address blocks:        45.205.52.0/24 maxlen: 24
                          45.205.53.0/24 maxlen: 24
                          45.205.54.0/24 maxlen: 24
                          45.205.55.0/24 maxlen: 24
                          45.205.56.0/24 maxlen: 24
                          45.205.57.0/24 maxlen: 24
                          45.205.58.0/24 maxlen: 24
                          45.205.59.0/24 maxlen: 24
                          45.205.60.0/24 maxlen: 24
                          45.205.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115863 (0x1c497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 11 21:17:33 2026 GMT
            Not After : Jul 10 21:17:33 2027 GMT
        Subject: CN=6a52b2f3-c2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:6a:51:48:aa:72:de:7f:61:4f:49:68:c7:
                    4a:42:16:05:78:30:2b:fb:a1:49:fe:ea:04:02:b1:
                    c2:37:da:90:ab:89:7a:14:4e:89:39:ac:cf:ec:01:
                    61:cc:68:23:ff:c9:2e:bf:7a:64:d7:f6:d5:3f:c0:
                    6b:3b:67:e4:a5:91:17:68:7d:09:86:79:02:33:c5:
                    88:2c:38:5f:2d:1e:92:04:37:46:8c:a1:8b:7f:d5:
                    f1:9c:d1:95:b6:0b:49:bc:7e:85:4c:4e:ff:5a:0a:
                    98:3b:42:c7:e9:72:c3:ca:bc:b0:1d:e0:89:5b:5e:
                    4e:dd:88:e3:cf:4f:73:c2:63:27:58:3f:b0:80:d0:
                    03:eb:e3:97:46:ad:cb:2e:43:b1:7f:0e:c4:be:b3:
                    cd:ae:61:b6:cb:a9:8b:3a:1a:df:3d:e6:ec:7c:1d:
                    8b:c2:1b:86:7c:3f:eb:ba:ef:80:14:10:7c:6f:f7:
                    fa:95:5f:c0:eb:af:c6:7f:60:d8:28:65:6e:62:3d:
                    b2:dd:5b:93:f7:0b:5b:2a:2e:3a:05:a7:59:d6:1c:
                    4d:24:4e:2c:29:4d:8a:75:37:15:e9:c1:44:0f:fe:
                    f9:e4:81:67:f8:a3:36:aa:80:1c:20:e5:e1:9d:b6:
                    5a:61:e2:51:6d:f4:73:69:7f:cb:e7:25:b9:41:f3:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:29:35:6D:73:A7:E6:20:94:77:3F:B5:13:91:FC:7B:15:98:0C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1A1994A7D6D11F1A8021205CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.52.0-45.205.61.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:f6:6f:45:7b:7d:4f:76:1a:f5:b3:b0:ea:46:5d:2a:f3:
         9c:f6:b8:54:79:1d:a3:0f:5c:59:81:7f:22:39:a6:83:e3:67:
         df:02:72:35:3b:7a:32:7d:33:0e:ce:28:fc:64:37:43:f8:e3:
         12:cc:cf:2b:ad:1b:31:ca:88:d9:bd:5a:c2:44:7c:01:9f:1c:
         5a:21:92:57:c5:f5:9e:d0:82:c0:0a:f5:3f:31:f2:c3:21:84:
         26:89:d1:b6:11:8a:61:6e:4f:92:66:cc:91:8d:89:67:31:5c:
         99:79:e3:d5:71:ca:63:02:b2:8e:08:da:cd:3d:6f:a5:b6:e0:
         75:c1:3e:d6:7c:ad:05:58:7a:f2:da:16:41:14:4e:ad:7e:02:
         66:be:03:04:e3:c3:25:7b:6c:8c:27:99:13:3b:dd:75:20:8a:
         66:87:b8:c7:06:df:70:7e:51:9f:4b:6f:8f:ed:d1:0c:13:8f:
         50:ad:a4:a9:bc:33:a9:c2:58:13:2b:92:58:98:54:b9:de:02:
         77:8c:3f:07:68:31:b7:0b:76:a5:95:10:aa:df:3f:66:15:de:
         60:ef:0c:58:41:0d:06:da:0e:d1:22:3c:39:42:d3:95:fb:c8:
         81:4f:5c:e2:06:89:34:e5:63:a3:21:e9:dd:54:26:05:b8:6f:
         44:43:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:39 2026 by rpki-client