Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F5AE10631A11F181852510CF1D38B0.roa
File:                     49F5AE10631A11F181852510CF1D38B0.roa (raw, json)
Hash identifier:          3s8FiItCoq9Jrg6avy/b9b4+L4KI2YkBb6jGJhrSePE=
Subject key identifier:   6C:BF:14:8B:6F:FB:8F:7E:76:BF:16:BB:0C:11:73:EF:DE:8B:57:78
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F5AE10631A11F181852510CF1D38B0.roa
Signing time:             Mon 08 Jun 2026 09:13:19 +0000
ROA not before:           Mon 08 Jun 2026 09:13:13 +0000
ROA not after:            Sun 12 Jul 2026 09:13:13 +0000
asID:                     40476
IP address blocks:        45.195.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113756 (0x1bc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  8 09:13:13 2026 GMT
            Not After : Jul 12 09:13:13 2026 GMT
        Subject: CN=6a2687af-0109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:77:49:fd:de:01:c4:5c:ed:96:38:61:80:
                    69:a9:6d:55:58:fa:15:21:cb:00:20:27:06:1d:c1:
                    d4:e8:71:c3:8b:ae:5b:5b:a7:0f:d0:b5:07:6f:59:
                    b0:77:2f:48:26:38:e9:34:17:0d:97:14:40:64:3d:
                    ef:02:a6:e8:0d:46:78:e0:8a:df:17:5f:82:ab:5e:
                    76:97:50:de:1c:c0:48:69:ea:f0:af:e7:0d:4d:b9:
                    ad:b0:c5:de:05:0e:af:48:f5:dc:b5:39:e7:86:c3:
                    0b:6c:06:27:ed:c1:e1:e2:95:40:47:d2:57:b7:99:
                    60:8c:f8:b8:04:c0:29:0b:0a:23:c3:42:9c:4f:46:
                    77:c7:10:8a:3c:c9:b9:fb:df:b9:3b:d2:a9:89:25:
                    a0:0e:6b:93:e4:15:28:aa:89:b3:81:c3:ac:3a:94:
                    a4:1c:0b:ea:9d:ee:d8:f1:2e:84:95:9f:67:8a:49:
                    ff:54:75:df:55:86:1c:44:c8:cf:0c:a0:2c:3a:57:
                    b9:3c:dc:91:a3:b2:be:f4:2e:85:bc:e9:8e:28:99:
                    93:6f:e7:ab:74:e4:95:b9:df:1e:07:d9:46:6d:91:
                    c9:3f:d1:8f:69:b1:de:15:d8:65:0d:c0:9b:b4:65:
                    9d:34:04:03:c1:b3:2f:56:c1:fe:a9:9a:d4:d2:af:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:14:8B:6F:FB:8F:7E:76:BF:16:BB:0C:11:73:EF:DE:8B:57:78
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F5AE10631A11F181852510CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:83:f1:94:f0:ee:8d:6e:ab:bf:2e:5a:c4:44:48:85:a7:
         6f:f9:8e:94:a1:6b:00:04:a0:fa:f7:fc:22:0a:78:08:5c:6a:
         83:55:69:42:b6:47:9b:91:da:4b:3f:fa:15:45:7e:f2:3f:2a:
         90:04:1a:f9:0d:32:c8:03:f5:ba:d1:e3:38:88:c0:6e:f0:c2:
         af:b2:bd:65:10:b3:cf:69:07:c6:92:16:4b:a5:b2:47:ba:58:
         2a:24:92:f8:00:39:08:14:24:e1:2c:1d:8c:89:0e:8a:8f:53:
         b0:c0:a1:3f:97:b2:6f:5c:17:a1:a2:5e:10:0e:6b:b0:86:81:
         a8:e9:99:55:0c:4b:bf:ba:51:20:5c:72:e6:bf:5b:b8:bd:f6:
         80:9c:32:d3:67:9f:2f:4f:67:57:3d:b7:aa:c2:d8:9d:24:b3:
         f7:10:ad:e1:70:a9:29:e1:87:a6:ab:1c:2b:92:31:7c:06:e7:
         f2:b8:16:da:9f:f4:63:92:c5:90:9f:c4:94:c7:66:a1:fc:2e:
         61:0e:f4:fd:5f:e3:81:0b:52:66:e3:1c:84:02:4b:ca:c1:6d:
         f0:4f:1b:89:29:d3:87:8b:40:ef:64:83:0c:60:6f:f7:7f:14:
         53:df:b0:2f:c4:3f:d9:d7:ab:cc:77:9e:85:3f:01:a1:da:f3:
         d9:bd:54:9b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbxcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA4MDkxMzEzWhcNMjYwNzEyMDkxMzEzWjAYMRYw
FAYDVQQDEw02YTI2ODdhZi0wMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6st3Sf3eAcRc7ZY4YYBpqW1VWPoVIcsAICcGHcHU6HHDi65bW6cP0LUH
b1mwdy9IJjjpNBcNlxRAZD3vAqboDUZ44IrfF1+Cq152l1DeHMBIaerwr+cNTbmt
sMXeBQ6vSPXctTnnhsMLbAYn7cHh4pVAR9JXt5lgjPi4BMApCwojw0KcT0Z3xxCK
PMm5+9+5O9KpiSWgDmuT5BUoqomzgcOsOpSkHAvqne7Y8S6ElZ9nikn/VHXfVYYc
RMjPDKAsOle5PNyRo7K+9C6FvOmOKJmTb+erdOSVud8eB9lGbZHJP9GPabHeFdhl
DcCbtGWdNAQDwbMvVsH+qZrU0q/XYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGy/
FItv+49+dr8WuwwRc+/ei1d4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OUY1QUUxMDYzMUExMUYxODE4NTI1MTBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPmMA0GCSqGSIb3DQEBCwUA
A4IBAQAlO4PxlPDujW6rvy5axERIhadv+Y6UoWsABKD69/wiCngIXGqDVWlCtkeb
kdpLP/oVRX7yPyqQBBr5DTLIA/W60eM4iMBu8MKvsr1lELPPaQfGkhZLpbJHulgq
JJL4ADkIFCThLB2MiQ6Kj1OwwKE/l7JvXBehol4QDmuwhoGo6ZlVDEu/ulEgXHLm
v1u4vfaAnDLTZ58vT2dXPbeqwtidJLP3EK3hcKkp4YemqxwrkjF8BufyuBban/Rj
ksWQn8SUx2ah/C5hDvT9X+OBC1Jm4xyEAkvKwW3wTxuJKdOHi0DvZIMMYG/3fxRT
37AvxD/Z16vMd56FPwGh2vPZvVSb
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:48 2026 by rpki-client