Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03EC713A630411F1A87E650BCF1D38B0.roa
File:                     03EC713A630411F1A87E650BCF1D38B0.roa (raw, json)
Hash identifier:          nc1IBfMrevTbpRhmPiCVCXSjb+ko+fPSJ5rHCdJEftk=
Subject key identifier:   F9:42:80:99:98:8B:D4:84:47:41:5C:14:71:12:9B:AB:8D:50:E6:33
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03EC713A630411F1A87E650BCF1D38B0.roa
Signing time:             Mon 08 Jun 2026 06:33:52 +0000
ROA not before:           Mon 08 Jun 2026 06:33:48 +0000
ROA not after:            Thu 16 Jul 2026 06:33:48 +0000
asID:                     51142
IP address blocks:        45.195.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 14:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113752 (0x1bc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  8 06:33:48 2026 GMT
            Not After : Jul 16 06:33:48 2026 GMT
        Subject: CN=6a266250-f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:92:2c:36:57:b6:9d:c9:ab:62:70:35:41:
                    53:b0:2e:41:41:06:20:fd:29:f2:dc:72:3e:43:ed:
                    7b:8c:cb:3e:13:10:fb:d1:6f:a7:21:ff:8d:93:14:
                    ec:3e:b8:c4:7b:3b:08:90:f6:1e:b6:ff:b7:93:da:
                    9b:ee:e3:ba:af:61:9d:40:0f:e3:34:b0:00:29:20:
                    eb:10:ab:bd:1c:dc:ef:fc:0b:42:53:c0:23:03:cd:
                    55:b1:7e:55:92:6a:c9:e4:ed:fa:0d:a2:bc:f0:4a:
                    f7:b9:1d:42:df:c7:25:91:87:15:d9:2b:40:2c:0b:
                    4e:13:28:fe:c2:2a:da:25:3f:51:f6:40:0c:83:47:
                    b2:e8:c8:d7:35:cf:38:f6:f4:19:b8:43:54:64:41:
                    4d:22:d5:50:95:ef:4d:a7:37:64:8b:45:40:68:48:
                    8c:f1:cf:e3:04:11:80:85:82:f8:1d:e1:ca:fe:2e:
                    c6:68:f7:f9:c8:d2:e4:4b:3e:1c:30:7b:30:ea:34:
                    b4:15:2c:e5:a2:eb:bd:b2:8a:9d:fc:ae:66:36:5f:
                    7e:b8:98:53:11:5e:52:85:b3:1a:62:30:e0:cc:11:
                    c2:59:e3:d8:d9:c4:16:a5:f8:e0:d4:aa:ba:bc:21:
                    e4:9d:4c:19:e5:42:16:78:3c:77:e9:15:d4:35:b4:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:80:99:98:8B:D4:84:47:41:5C:14:71:12:9B:AB:8D:50:E6:33
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03EC713A630411F1A87E650BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:54:7d:7f:52:e5:ce:20:56:1b:32:f0:5f:a4:f2:92:20:1c:
         41:46:5e:84:08:44:93:51:c6:4a:e9:27:02:36:cb:a0:e1:7d:
         22:0f:b6:4d:97:ed:dd:66:7f:e0:18:b8:db:fa:95:cd:da:af:
         cb:85:bf:77:47:4b:79:84:53:dc:9e:94:29:1e:72:a3:61:c5:
         dd:12:94:23:e1:ab:e1:42:19:4a:c7:16:19:b7:86:80:f5:a0:
         23:d6:e1:f3:a2:dd:c2:aa:aa:e5:1d:7e:cd:cf:07:04:b6:15:
         44:16:f1:da:fc:1e:b5:81:cc:c7:13:d5:00:10:0c:88:43:b1:
         5c:31:b6:a3:60:4a:61:73:e3:07:8c:93:7f:b1:ce:3c:58:09:
         c3:98:63:8e:09:de:68:56:5a:6b:b0:97:3c:3c:a2:42:d5:aa:
         92:7a:ac:65:9d:be:64:fe:1d:e3:89:dd:d4:32:ba:44:9b:61:
         07:64:47:ef:e3:5e:cc:b1:55:59:13:45:4e:28:8f:b2:ac:20:
         53:9a:77:a8:bf:6c:f1:c8:11:5f:d9:5e:91:0f:bb:42:9e:1f:
         8e:67:92:42:41:30:c5:ce:01:09:49:37:d4:e6:a4:b4:99:57:
         5a:28:fb:fc:73:d8:bd:b3:c3:70:c6:d0:a3:81:be:e0:ca:11:
         d0:e6:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:30 2026 by rpki-client