Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F279DBC8964C11F1AD7EE3B1CE1D38B0.roa
File:                     F279DBC8964C11F1AD7EE3B1CE1D38B0.roa (raw, json)
Hash identifier:          9XYMpoz07r3jjLQwfSzZWM5xA5QmU024clxgEah1AXI=
Subject key identifier:   1D:DA:70:19:3C:9B:27:8B:66:C7:B6:3A:09:0C:98:B8:38:DA:6D:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F279DBC8964C11F1AD7EE3B1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:54:26 +0000
ROA not before:           Wed 12 Aug 2026 12:54:22 +0000
ROA not after:            Sat 12 Sep 2026 12:54:22 +0000
asID:                     212513
IP address blocks:        45.196.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 14 Aug 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117772 (0x1cc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:54:22 2026 GMT
            Not After : Sep 12 12:54:22 2026 GMT
        Subject: CN=6a7c6d02-24ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:59:41:bd:ab:6a:3b:d4:0e:4e:a3:c3:68:
                    a3:99:17:ce:6c:4d:99:72:ab:06:c2:fc:51:53:b0:
                    6c:40:fa:63:49:1e:6e:82:b2:4e:d6:e4:53:f8:4c:
                    33:2d:06:15:bd:44:65:52:fb:45:f0:bf:45:8d:a0:
                    11:a4:62:7e:05:60:d4:7f:f9:a6:ea:5a:9a:90:b2:
                    97:a5:88:f8:c7:7f:a0:85:71:c7:43:00:d8:55:27:
                    d1:29:18:2a:eb:21:7c:74:c5:5f:47:16:e5:52:88:
                    da:43:a3:64:8b:bd:d7:00:09:4c:18:d2:18:71:b2:
                    89:8d:db:6d:1c:58:a1:5f:04:f5:53:e1:35:6e:8c:
                    2c:46:98:86:4b:99:90:c7:7a:bf:64:ff:2a:f7:0e:
                    06:6b:32:80:0e:48:e5:4f:68:5d:38:df:eb:d7:60:
                    c6:95:e6:10:01:bc:4b:ef:03:31:bb:3b:26:fc:1d:
                    4a:0a:c8:06:a1:0f:28:29:39:64:34:0d:4f:f8:10:
                    0d:5d:4a:7f:cb:1e:e2:45:0a:1b:6d:b4:83:d0:1c:
                    29:15:b9:f9:a0:4b:40:6c:a3:ef:67:62:fb:14:7c:
                    65:f3:57:d8:bd:c0:c3:e6:01:a7:42:a7:86:92:07:
                    49:d9:2d:14:ca:b0:51:77:72:b5:52:ab:2f:c8:d4:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:70:19:3C:9B:27:8B:66:C7:B6:3A:09:0C:98:B8:38:DA:6D:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F279DBC8964C11F1AD7EE3B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:6f:48:9a:57:99:92:0e:d1:b9:02:e0:76:66:d4:83:df:
         78:c3:20:f1:8d:9f:68:08:13:e8:24:d0:4f:c0:7a:25:47:5f:
         a9:02:48:fd:96:0a:57:cb:26:5f:62:42:10:66:a1:1a:44:73:
         dd:c1:93:29:35:52:eb:f2:39:37:46:22:9f:f3:44:d4:b1:2c:
         12:9d:ad:99:78:b9:a3:5e:21:90:e7:fc:d4:ca:fa:ab:c0:c8:
         cc:3e:b8:7d:89:b7:ce:6a:87:d0:5f:4a:4c:c8:55:9f:09:29:
         43:43:88:bc:7c:ee:85:38:e1:d1:78:a5:01:d0:7e:4b:d9:0e:
         ba:2e:20:81:a2:6c:95:7a:57:3c:6e:d9:dd:f6:16:cd:6d:4d:
         68:a9:4b:7a:35:a5:6a:8b:e2:7a:53:db:cf:3f:11:91:a0:9a:
         8f:c1:e8:90:a2:14:60:a3:ca:d7:b2:6a:16:65:b6:3a:60:ab:
         e8:23:5b:51:79:f2:cf:41:37:86:75:ac:95:62:13:c2:86:94:
         88:a8:1e:e0:57:4e:47:ca:e1:5c:c4:b2:91:96:74:c0:a4:a4:
         12:21:e0:60:d1:16:c5:97:d8:70:71:dd:8f:27:72:2e:55:be:
         96:49:2b:0a:e3:a0:d4:97:23:2b:2e:cb:f6:ba:a2:7f:e8:b4:
         43:76:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:05:13 2026 by rpki-client