Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1222463C873811F186C9A2FCCE1D38B0.roa
File:                     1222463C873811F186C9A2FCCE1D38B0.roa (raw, json)
Hash identifier:          xcyeFAL5mktJXz6vaRbceDujvbsd55HTRexPBTQdbhI=
Subject key identifier:   0E:B7:48:98:16:02:37:AB:7A:0D:E6:2D:C2:97:AE:39:3A:74:88:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C7DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1222463C873811F186C9A2FCCE1D38B0.roa
Signing time:             Fri 24 Jul 2026 08:17:12 +0000
ROA not before:           Fri 24 Jul 2026 08:17:08 +0000
ROA not after:            Tue 01 Sep 2026 08:17:08 +0000
asID:                     11427
IP address blocks:        45.207.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116700 (0x1c7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 24 08:17:08 2026 GMT
            Not After : Sep  1 08:17:08 2026 GMT
        Subject: CN=6a631f88-73f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:de:c7:74:07:76:2d:5c:01:9c:ea:7d:b6:
                    56:e6:85:5f:e1:40:32:07:bf:a4:72:41:0c:8f:f7:
                    9a:39:37:c1:53:f5:c4:78:da:23:8e:33:b8:b4:d9:
                    67:93:90:09:e3:a0:de:c1:73:6d:11:16:7c:36:9b:
                    4b:83:c6:97:5a:c3:11:b6:55:23:6e:35:68:63:48:
                    1c:c8:e0:cd:f2:38:88:53:a9:34:73:8a:cb:85:1f:
                    26:88:3a:ce:f9:54:b8:9d:79:f2:42:24:ff:47:03:
                    46:62:f6:c1:b5:5f:5e:65:bd:bf:6e:45:91:59:fc:
                    86:1e:f2:7b:18:9e:82:f4:fb:71:aa:71:2b:56:20:
                    f3:ef:85:a7:20:b0:7f:c3:c3:21:70:ae:aa:ff:28:
                    4b:2d:69:30:33:47:6b:a8:00:72:fc:71:cd:03:92:
                    0f:c8:f9:5e:bd:1a:08:d0:02:b0:ec:ce:fc:1b:aa:
                    4c:e9:98:aa:23:b8:25:fd:52:5d:75:fe:d8:0a:ac:
                    af:f3:8c:f5:a1:aa:dd:da:b5:f7:f5:11:dc:5f:fc:
                    4b:c7:f1:13:89:2b:80:18:2e:19:32:fe:e6:a4:ce:
                    b1:b8:30:3f:f3:f1:f2:95:35:90:2d:97:d8:71:43:
                    83:d0:30:6d:51:55:6c:f2:49:85:e1:dd:50:e6:b1:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:48:98:16:02:37:AB:7A:0D:E6:2D:C2:97:AE:39:3A:74:88:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1222463C873811F186C9A2FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:35:4a:49:30:68:f7:b1:a3:1c:39:b7:5e:e3:f4:c5:02:22:
         1f:e3:cf:84:6b:b1:55:d1:72:08:2c:21:b0:bf:14:78:8f:c8:
         4c:c2:6b:74:6b:bd:3a:85:40:4b:fd:c1:ba:99:a7:e4:2e:96:
         93:e4:a7:fe:df:78:36:02:45:a8:35:22:e0:f9:48:ec:90:09:
         dd:c8:c4:c1:81:86:75:c6:4a:40:65:7f:ad:85:d9:f7:f3:4e:
         4b:a2:33:37:c8:3a:ee:a2:cb:74:07:b9:e2:6f:8f:4e:09:45:
         f4:29:36:73:8b:16:0f:40:42:98:13:bc:e1:c6:01:e5:b6:0e:
         d2:76:fd:ed:2d:17:da:38:97:5d:89:f3:77:be:ff:ec:43:eb:
         bf:bc:be:8c:00:52:43:d8:4b:24:f9:be:c8:5f:a3:73:db:95:
         88:93:4b:31:f5:4b:74:42:d9:50:74:af:e8:40:ac:fb:9f:53:
         d7:d7:b3:a7:a9:8c:fb:73:94:70:4e:36:0d:45:09:6e:2d:bc:
         ca:55:57:6c:36:49:28:1a:5e:f3:b2:ff:0b:83:7e:06:a0:6c:
         b5:f4:a6:66:08:9b:af:08:cd:c9:96:db:24:c3:f8:e5:42:42:
         7f:44:e7:6e:86:f1:6a:b5:21:b6:f9:5f:e1:60:b3:6a:eb:0a:
         87:e5:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:33 2026 by rpki-client