Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129962980F2011F1B8A8C98CDAE4EC9C.roa
File:                     129962980F2011F1B8A8C98CDAE4EC9C.roa (raw, json)
Hash identifier:          nShp2Nv0cbuhoEKLNHztK81/qKnbrk+DxyO85Fbhi28=
Subject key identifier:   D1:9D:25:08:C6:04:8A:BB:60:7B:9A:97:95:AF:50:C2:8A:FF:CE:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019F75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129962980F2011F1B8A8C98CDAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 12:23:05 +0000
ROA not before:           Sat 21 Feb 2026 12:23:00 +0000
ROA not after:            Sat 28 Mar 2026 12:23:00 +0000
asID:                     48031
IP address blocks:        45.200.181.0/24 maxlen: 24
                          45.200.182.0/24 maxlen: 24
                          45.200.183.0/24 maxlen: 24
                          45.200.184.0/24 maxlen: 24
                          45.200.185.0/24 maxlen: 24
                          45.200.186.0/24 maxlen: 24
                          45.200.187.0/24 maxlen: 24
                          45.200.188.0/24 maxlen: 24
                          45.200.189.0/24 maxlen: 24
                          45.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106357 (0x19f75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 21 12:23:00 2026 GMT
            Not After : Mar 28 12:23:00 2026 GMT
        Subject: CN=6999a3a9-c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:c6:54:30:d1:ab:3a:4d:56:41:16:e6:75:
                    ba:2e:0b:0c:46:e5:15:4c:ee:b8:b0:42:8d:fb:51:
                    5d:cb:d9:d6:f7:ad:f3:e5:ab:be:88:5a:f4:a8:a0:
                    58:60:b2:5b:aa:88:ec:0e:74:55:4a:c2:fb:c4:df:
                    62:09:8e:01:c9:f9:cc:09:d9:90:78:2d:b8:af:40:
                    08:65:e7:e7:f7:03:9e:a5:9a:aa:00:63:b3:4b:84:
                    73:10:64:ba:a4:40:db:71:4d:7e:8d:0d:88:8c:b2:
                    36:0f:b4:21:9c:21:46:77:9a:b5:a5:9d:ee:75:2f:
                    53:75:4e:30:4d:58:0f:7e:3e:15:e6:19:3a:13:73:
                    2f:27:5c:07:6c:6a:1f:39:91:64:20:db:f6:9a:24:
                    b0:b8:5e:3e:5a:45:8c:69:6c:92:3d:87:d3:32:b7:
                    22:94:1f:ca:28:a6:c6:6d:05:55:83:cb:f2:fc:6a:
                    f1:27:2c:31:f1:36:f7:38:19:ef:65:48:c9:69:a4:
                    60:e0:3f:d4:06:b6:68:fb:23:fd:ad:c7:1d:fd:84:
                    65:d1:a4:c5:f5:d8:0c:76:ce:21:03:9c:1a:ff:0a:
                    5e:f7:78:69:4a:8c:d8:4a:bb:4b:ae:4d:a3:db:6d:
                    40:1b:5c:d8:a5:84:9e:74:0e:80:a3:c0:76:6d:25:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:25:08:C6:04:8A:BB:60:7B:9A:97:95:AF:50:C2:8A:FF:CE:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129962980F2011F1B8A8C98CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.181.0-45.200.190.255

    Signature Algorithm: sha256WithRSAEncryption
         19:44:97:78:58:c4:ff:46:08:65:1d:a6:ba:5c:6a:e0:26:c1:
         31:aa:3a:e2:04:72:60:46:99:89:c0:89:aa:70:38:90:da:da:
         f7:ff:ce:fe:65:81:45:4b:f8:82:f4:2f:45:31:d2:39:e8:89:
         06:84:6e:28:8f:d3:33:96:51:47:fd:b7:1f:66:c5:ce:dc:9b:
         0a:ce:a1:0a:ee:ea:e6:5b:e8:a8:3e:99:29:08:52:0f:77:6a:
         ab:aa:25:03:d0:ed:31:01:0f:c2:9f:63:9f:6e:69:65:4f:81:
         f9:c9:7b:e0:c3:0b:09:bb:3e:6d:ba:f2:40:6b:e3:aa:6a:dc:
         8f:0a:8b:68:cb:74:c2:8d:2d:1c:a8:99:31:c5:87:2d:c8:b6:
         52:67:92:52:ba:20:c8:49:98:02:14:82:95:c1:f4:e2:cb:1b:
         1b:50:7b:3b:bc:80:c1:9c:62:f2:1d:11:81:5a:b6:5c:31:3d:
         3a:f4:91:4f:54:b6:78:27:bd:29:e8:6a:57:ba:36:26:0e:70:
         3b:99:25:2d:ab:60:43:44:f6:41:e7:4e:a4:0f:b2:db:30:4e:
         29:57:9b:01:3b:ca:3f:60:7e:7d:e5:a1:59:56:f7:2c:7e:63:
         3f:f2:e7:fc:60:b6:32:7e:40:c0:d5:09:0c:86:e2:90:fd:9a:
         ec:82:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:23 2026 by rpki-client