Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/453D21F464D311F1A57D2F00CF1D38B0.roa
File:                     453D21F464D311F1A57D2F00CF1D38B0.roa (raw, json)
Hash identifier:          Z8Oxfv1GtVay7gNzpHFibKb+rZnljwSohb3W00xq2Dw=
Subject key identifier:   47:06:1C:C3:05:AF:27:84:E6:FF:4F:82:9F:E0:56:EF:49:F4:0C:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BCDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/453D21F464D311F1A57D2F00CF1D38B0.roa
Signing time:             Wed 10 Jun 2026 13:49:59 +0000
ROA not before:           Wed 10 Jun 2026 13:49:54 +0000
ROA not after:            Fri 17 Jul 2026 13:49:54 +0000
asID:                     139613
IP address blocks:        45.195.199.0/24 maxlen: 24
                          45.197.20.0/24 maxlen: 24
                          45.199.130.0/24 maxlen: 24
                          45.199.131.0/24 maxlen: 24
                          45.199.134.0/24 maxlen: 24
                          45.199.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113882 (0x1bcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 13:49:54 2026 GMT
            Not After : Jul 17 13:49:54 2026 GMT
        Subject: CN=6a296b87-8b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:bc:57:c8:8a:be:56:5d:69:39:21:67:e8:
                    14:84:51:ef:94:9e:67:5d:3b:88:5c:05:d3:9d:41:
                    15:75:1b:be:e7:f7:36:f3:b3:58:09:52:f0:7b:21:
                    aa:69:e5:0e:87:80:65:5f:32:e5:d9:dc:a5:12:1f:
                    d5:04:40:0f:4c:f6:4d:05:f5:82:42:83:12:9e:3c:
                    7c:bf:0b:c5:aa:7e:7a:60:72:10:a6:bb:9e:a1:21:
                    5d:46:c9:83:07:73:0b:17:21:a1:e0:4d:5a:8d:a5:
                    b6:26:22:86:ea:33:8c:21:25:42:50:42:06:11:74:
                    2d:f4:53:ff:89:94:6e:d2:a9:17:66:09:77:04:af:
                    49:59:5a:1d:9b:88:e0:dd:25:f6:24:d4:1d:28:37:
                    99:76:06:37:c5:39:8c:a4:20:4a:67:e4:e2:c9:84:
                    68:6f:66:98:dc:5e:60:62:d9:b0:74:f1:ac:87:f3:
                    fe:8c:44:d3:24:d3:8d:6f:a1:bc:e4:28:9f:84:a4:
                    cf:31:ea:fa:c2:ef:12:d9:20:94:d0:31:0e:e7:79:
                    6e:7e:72:f7:59:99:fc:c9:6e:46:f0:4b:09:d0:b0:
                    09:13:53:6d:1d:0f:5d:6b:30:74:77:20:cd:78:91:
                    ae:40:dd:aa:58:c0:e5:50:6a:53:a1:4c:d6:17:6f:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:1C:C3:05:AF:27:84:E6:FF:4F:82:9F:E0:56:EF:49:F4:0C:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/453D21F464D311F1A57D2F00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.199.0/24
                  45.197.20.0/24
                  45.199.130.0/23
                  45.199.134.0/24
                  45.199.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:81:eb:f7:d5:90:52:86:b7:b3:21:63:ca:1e:df:b2:77:9b:
         ba:a6:33:84:a6:2b:2a:3f:83:68:70:85:e0:48:ef:b8:a7:2f:
         d9:1c:db:ae:e3:ed:c8:c6:80:ec:5d:a9:06:0d:a9:9f:3a:7c:
         98:db:57:e6:35:97:85:b6:cc:13:fc:40:71:c8:9d:df:36:b2:
         b1:ec:a8:36:6b:b1:1f:71:d3:c2:cc:f3:b4:87:72:bd:da:2c:
         78:97:c4:42:37:86:a9:25:54:82:2e:55:0a:12:a1:23:1a:c9:
         7f:bd:a6:be:82:22:32:58:26:05:62:61:c9:7a:3f:f5:43:4e:
         c0:93:08:cb:da:74:95:de:14:d2:54:35:2e:0f:a0:5e:7d:6d:
         fd:a7:2c:b4:15:18:62:a6:23:71:ef:3f:b2:e2:78:94:c3:89:
         0b:06:e1:e8:26:1e:a3:fb:52:7e:8d:18:d7:7c:23:f4:58:2d:
         56:a3:fb:14:f6:b2:32:14:9f:b2:f4:b2:5a:cf:bc:73:a6:db:
         84:dc:f4:5a:5c:67:23:a9:e3:b0:6f:97:51:60:8f:52:46:5e:
         f0:7c:96:d1:68:34:dd:c6:10:fc:29:8b:7e:ba:1a:d2:b2:51:
         33:6f:29:85:7d:0e:2d:16:b0:d0:3f:d6:b2:88:06:f6:a7:0c:
         f3:03:e4:29
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAbzaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMTM0OTU0WhcNMjYwNzE3MTM0OTU0WjAYMRYw
FAYDVQQDEw02YTI5NmI4Ny04YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwvS8V8iKvlZdaTkhZ+gUhFHvlJ5nXTuIXAXTnUEVdRu+5/c287NYCVLw
eyGqaeUOh4BlXzLl2dylEh/VBEAPTPZNBfWCQoMSnjx8vwvFqn56YHIQprueoSFd
RsmDB3MLFyGh4E1ajaW2JiKG6jOMISVCUEIGEXQt9FP/iZRu0qkXZgl3BK9JWVod
m4jg3SX2JNQdKDeZdgY3xTmMpCBKZ+TiyYRob2aY3F5gYtmwdPGsh/P+jETTJNON
b6G85CifhKTPMer6wu8S2SCU0DEO53lufnL3WZn8yW5G8EsJ0LAJE1NtHQ9dazB0
dyDNeJGuQN2qWMDlUGpToUzWF2/tAQIDAQABo4ICujCCArYwHQYDVR0OBBYEFEcG
HMMFryeE5v9Pgp/gVu9J9AxXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTNEMjFGNDY0RDMxMUYxQTU3RDJGMDBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALcPHAwQALcUUAwQBLceCAwQA
LceGAwQALceJMA0GCSqGSIb3DQEBCwUAA4IBAQAIgev31ZBShrezIWPKHt+yd5u6
pjOEpisqP4NocIXgSO+4py/ZHNuu4+3IxoDsXakGDamfOnyY21fmNZeFtswT/EBx
yJ3fNrKx7Kg2a7EfcdPCzPO0h3K92ix4l8RCN4apJVSCLlUKEqEjGsl/vaa+giIy
WCYFYmHJej/1Q07AkwjL2nSV3hTSVDUuD6BefW39pyy0FRhipiNx7z+y4niUw4kL
BuHoJh6j+1J+jRjXfCP0WC1Wo/sU9rIyFJ+y9LJaz7xzptuE3PRaXGcjqeOwb5dR
YI9SRl7wfJbRaDTdxhD8KYt+uhrSslEzbymFfQ4tFrDQP9ayiAb2pwzzA+Qp
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:52:37 2026 by rpki-client