Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290F8A485FED11F1A062EABDCE1D38B0.roa
File:                     290F8A485FED11F1A062EABDCE1D38B0.roa (raw, json)
Hash identifier:          wXZVj8NL1miw4grBvJvsK+MAEydo0qYRzSPF7i+x/Yw=
Subject key identifier:   0D:8C:A0:32:75:07:B0:FB:6D:69:45:BE:55:1F:77:11:28:A0:7F:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290F8A485FED11F1A062EABDCE1D38B0.roa
Signing time:             Thu 04 Jun 2026 08:12:43 +0000
ROA not before:           Thu 04 Jun 2026 08:12:38 +0000
ROA not after:            Fri 10 Jul 2026 08:12:38 +0000
asID:                     63139
IP address blocks:        45.197.93.0/24 maxlen: 24
                          45.197.94.0/24 maxlen: 24
                          45.197.105.0/24 maxlen: 24
                          45.197.106.0/24 maxlen: 24
                          45.197.107.0/24 maxlen: 24
                          45.197.108.0/24 maxlen: 24
                          45.197.109.0/24 maxlen: 24
                          45.197.110.0/24 maxlen: 24
                          45.197.111.0/24 maxlen: 24
                          45.197.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113586 (0x1bbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 08:12:38 2026 GMT
            Not After : Jul 10 08:12:38 2026 GMT
        Subject: CN=6a21337b-f039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:77:f4:8f:8f:a4:e1:ed:d2:73:83:de:4c:
                    ef:38:d7:1a:2a:9c:16:15:51:3f:4b:c3:e8:c9:36:
                    15:58:9e:ea:03:a2:d9:f0:a6:9f:ce:9f:89:e7:65:
                    13:29:31:24:e5:3a:20:ad:1d:b6:96:97:69:47:50:
                    03:c3:9d:e1:9e:e7:39:41:0f:27:4a:7d:14:e4:21:
                    5d:8b:ed:93:51:57:4a:90:18:60:79:8c:ed:87:5b:
                    43:be:d8:64:bc:56:fa:7c:6a:14:dd:c5:4d:fe:ed:
                    e6:93:cb:57:76:bf:84:91:d5:db:52:14:79:c8:52:
                    04:89:17:73:3d:dd:7b:2b:00:88:1c:d9:b6:f6:90:
                    db:bb:71:0e:16:91:d7:85:f7:13:13:72:a0:b8:52:
                    c3:35:f9:00:16:78:ad:54:53:59:1a:86:62:db:5d:
                    c8:2b:16:31:f4:63:2e:5b:97:52:24:ce:e6:42:79:
                    f6:fa:4f:ff:0d:de:fe:d6:5c:05:64:fd:87:7e:7f:
                    39:3a:99:ff:08:6a:32:c9:6a:eb:12:16:fb:4d:df:
                    f6:79:3f:40:bf:d0:94:21:64:ea:c8:d6:da:28:5a:
                    60:0c:bb:29:f6:1a:43:45:a9:c5:4a:a9:65:fc:0f:
                    94:17:c6:92:d6:f4:75:45:6d:ee:e7:30:c1:54:1a:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:A0:32:75:07:B0:FB:6D:69:45:BE:55:1F:77:11:28:A0:7F:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290F8A485FED11F1A062EABDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.93.0-45.197.94.255
                  45.197.105.0-45.197.112.255

    Signature Algorithm: sha256WithRSAEncryption
         47:60:bb:17:13:c4:a9:c5:a0:ac:f1:bd:88:87:f0:dc:a3:d2:
         02:a7:9c:32:4e:73:42:87:a3:0b:26:99:a7:47:43:b0:b6:16:
         67:6f:e3:10:9a:37:2b:8f:fe:75:cc:26:c0:91:51:4f:da:85:
         88:2d:0a:88:8c:c2:b3:78:f5:88:3b:ca:81:f7:34:27:fd:b8:
         78:2e:3f:ff:f6:9a:1e:4d:e6:51:a4:e0:03:f5:7f:42:18:4e:
         59:14:1c:2f:5e:0a:b2:eb:e0:25:0e:16:d7:96:40:b2:80:92:
         6c:8b:00:5e:1a:bc:84:00:64:dc:19:0b:da:17:17:64:a4:1d:
         a8:3e:ec:0d:e1:8f:3a:74:aa:8f:b0:dc:db:10:19:a7:dd:41:
         4a:06:78:3b:86:62:f7:89:33:59:a9:b1:f3:61:8e:fe:89:44:
         6b:2b:d9:4e:43:28:9e:39:84:5e:6c:93:00:c8:9f:ed:48:6f:
         fb:9f:48:5c:ed:95:3b:c8:f7:41:a0:74:ed:e4:92:16:ef:84:
         39:7b:04:74:a3:30:9a:f7:3b:5d:b6:0a:2a:ca:02:13:7c:cc:
         ab:2f:2e:4a:2d:7a:df:10:c7:f8:9d:9c:fe:74:dc:03:96:22:
         c6:18:05:1b:b5:ec:09:34:60:8b:cc:03:67:0c:af:d8:07:f7:
         3d:3a:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:42:22 2026 by rpki-client