Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
File:                     14FC363634B511F1BAE2DED5CE1D38B0.roa (raw, json)
Hash identifier:          +2MA3jCYdtuYftaCcTYWx2xW4dadb7vHmisD+YzLqvU=
Subject key identifier:   0B:6E:DE:32:43:93:DA:46:2C:B0:64:C5:45:B5:02:DB:0E:72:50:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01ABA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
Signing time:             Fri 10 Apr 2026 08:12:57 +0000
ROA not before:           Fri 10 Apr 2026 08:12:53 +0000
ROA not after:            Sun 17 May 2026 08:12:53 +0000
asID:                     54801
IP address blocks:        45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
                          45.199.137.0/24 maxlen: 24
                          45.199.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109472 (0x1aba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 10 08:12:53 2026 GMT
            Not After : May 17 08:12:53 2026 GMT
        Subject: CN=69d8b109-54c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:35:60:36:99:f4:19:eb:06:5a:d8:18:2d:
                    09:68:aa:70:c5:cb:99:3d:66:6e:93:84:11:04:35:
                    9e:45:fa:1e:90:ba:77:ba:13:3e:35:2e:c2:d0:f3:
                    69:9c:8d:4b:ea:9d:03:29:96:1f:8e:e4:11:20:c2:
                    00:4d:20:09:bd:2d:d0:b0:91:10:dc:10:6d:48:5d:
                    6c:7e:f6:c4:e9:cb:52:60:3f:d8:6c:b7:3e:5f:a0:
                    c8:b3:48:f2:7a:21:ac:6d:36:47:12:3e:6d:da:14:
                    68:fb:50:8d:8d:75:db:38:4f:7a:aa:19:49:6a:6a:
                    12:ba:99:9d:1b:fe:c1:d4:86:07:6a:6e:24:32:e3:
                    c1:6c:a1:68:00:5a:ab:94:24:70:17:de:4b:d4:52:
                    67:ec:4e:70:fd:14:c4:b2:fa:6a:cd:3b:1a:46:e5:
                    78:b4:21:46:79:5f:2c:97:78:d6:f5:e0:1d:d7:fb:
                    d8:87:df:b9:29:1f:77:06:92:e1:24:de:04:d5:df:
                    23:f6:45:5f:14:94:47:29:7f:c7:5b:87:5a:4f:4f:
                    75:24:fd:30:33:dd:af:9d:1c:4f:37:c8:31:3a:0d:
                    4b:7e:6e:68:56:e4:b4:ed:77:ff:6f:4c:90:75:b2:
                    7e:08:48:9b:a7:f1:e9:b7:aa:2c:de:7a:af:26:8e:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:DE:32:43:93:DA:46:2C:B0:64:C5:45:B5:02:DB:0E:72:50:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23
                  45.199.137.0/24
                  45.199.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:34:d4:6c:35:95:c8:c7:2d:a9:1f:84:21:f8:ec:ae:8c:99:
         45:ac:1e:fe:6e:6c:47:89:41:64:18:f4:2d:87:98:c8:11:9d:
         ed:c7:4e:ae:a9:49:6f:ec:1d:14:e4:61:3f:44:b1:9b:a6:63:
         86:ed:e0:c7:96:bf:af:65:20:f1:00:8d:9f:60:fc:08:39:44:
         cd:67:f4:51:65:6f:fc:23:d3:7c:9c:c0:12:af:16:f1:fb:98:
         ba:8e:5d:6e:70:96:39:7e:93:6b:97:0d:34:26:b8:90:f8:70:
         d7:b9:3e:98:dc:7c:97:97:1f:d5:3d:60:fc:41:24:aa:34:97:
         1d:95:6c:39:19:ad:ca:0c:ad:24:48:40:c5:57:ea:17:31:4a:
         a7:16:1c:99:8a:94:12:7b:f7:fa:4c:ee:b9:49:20:0a:d5:5c:
         bf:97:39:dc:56:3b:66:70:56:df:31:c9:a3:52:87:91:d6:ec:
         30:1f:b7:5b:2e:5c:fe:75:ce:c6:95:1b:07:9d:58:37:88:2c:
         65:a3:4d:ea:d6:fe:94:d5:57:05:26:f4:cd:99:71:34:8a:f7:
         51:9a:1a:dd:fd:b0:b1:e1:2d:d1:87:56:33:fc:f6:f0:a9:95:
         71:e7:75:8a:53:ed:64:3e:ee:da:d4:be:13:71:5c:1b:aa:93:
         b5:e0:81:60
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAaugMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEwMDgxMjUzWhcNMjYwNTE3MDgxMjUzWjAYMRYw
FAYDVQQDEw02OWQ4YjEwOS01NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuYo1YDaZ9BnrBlrYGC0JaKpwxcuZPWZuk4QRBDWeRfoekLp3uhM+NS7C
0PNpnI1L6p0DKZYfjuQRIMIATSAJvS3QsJEQ3BBtSF1sfvbE6ctSYD/YbLc+X6DI
s0jyeiGsbTZHEj5t2hRo+1CNjXXbOE96qhlJamoSupmdG/7B1IYHam4kMuPBbKFo
AFqrlCRwF95L1FJn7E5w/RTEsvpqzTsaRuV4tCFGeV8sl3jW9eAd1/vYh9+5KR93
BpLhJN4E1d8j9kVfFJRHKX/HW4daT091JP0wM92vnRxPN8gxOg1Lfm5oVuS07Xf/
b0yQdbJ+CEibp/Hpt6os3nqvJo4J6QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFAtu
3jJDk9pGLLBkxUW1AtsOclAjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEZDMzYzNjM0QjUxMUYxQkFFMkRFRDVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtxQEDBAAtxQIDBAEtxQQD
BAAtx4kDBAAtx78wDQYJKoZIhvcNAQELBQADggEBAJA01Gw1lcjHLakfhCH47K6M
mUWsHv5ubEeJQWQY9C2HmMgRne3HTq6pSW/sHRTkYT9EsZumY4bt4MeWv69lIPEA
jZ9g/Ag5RM1n9FFlb/wj03ycwBKvFvH7mLqOXW5wljl+k2uXDTQmuJD4cNe5Ppjc
fJeXH9U9YPxBJKo0lx2VbDkZrcoMrSRIQMVX6hcxSqcWHJmKlBJ79/pM7rlJIArV
XL+XOdxWO2ZwVt8xyaNSh5HW7DAft1suXP51zsaVGwedWDeILGWjTerW/pTVVwUm
9M2ZcTSK91GaGt39sLHhLdGHVjP89vCplXHndYpT7WQ+7trUvhNxXBuqk7XggWA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:36 2026 by rpki-client