Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C43FCEE60BD11F186CB5EB1CE1D38B0.roa
File:                     4C43FCEE60BD11F186CB5EB1CE1D38B0.roa (raw, json)
Hash identifier:          MHm/ARbCEaOafEPKDQVbsgmUK8Bcfn+Rsphf/VosK4o=
Subject key identifier:   81:3F:D4:B9:5A:D9:68:F9:80:01:DB:9A:3E:2E:BA:B7:0E:68:F7:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C43FCEE60BD11F186CB5EB1CE1D38B0.roa
Signing time:             Fri 05 Jun 2026 09:02:37 +0000
ROA not before:           Fri 05 Jun 2026 09:02:33 +0000
ROA not after:            Mon 03 Aug 2026 09:02:33 +0000
asID:                     140224
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113653 (0x1bbf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  5 09:02:33 2026 GMT
            Not After : Aug  3 09:02:33 2026 GMT
        Subject: CN=6a2290ad-b94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:49:3c:6c:76:18:e2:bb:e6:a6:54:16:78:
                    1f:57:bc:45:a4:f7:39:0d:ab:b4:fd:bd:b0:0e:59:
                    af:32:71:8a:a4:38:dc:62:4d:93:69:d1:b5:f7:7f:
                    63:f4:aa:90:3a:15:fc:42:c9:6a:57:b1:e4:53:9f:
                    b8:f2:5a:62:19:6e:9f:99:0d:a4:ae:95:b1:6f:44:
                    de:d1:d2:b0:3b:cb:51:5e:cf:30:a6:cf:99:ce:21:
                    29:77:b0:15:ae:f1:1e:e3:0b:96:a9:15:dd:fd:ed:
                    2d:d6:c2:cc:72:ec:ce:90:2b:26:58:ca:26:20:a4:
                    8e:00:6f:1c:61:bb:ad:18:d9:58:71:5c:72:2a:0a:
                    e7:7c:cd:7a:db:f3:3b:ce:44:4c:7b:6e:cd:0a:6a:
                    66:4c:32:0d:f7:5c:5e:0d:62:a5:63:81:b2:b5:0e:
                    d9:4d:b7:f3:e5:97:d6:e1:f7:97:03:43:25:a1:6b:
                    33:f9:5f:a4:6e:53:a4:05:3a:b3:19:b9:88:6d:a7:
                    fe:48:7e:c6:c1:6e:2b:89:eb:8c:06:70:b4:e1:1d:
                    32:bd:f9:93:4b:71:6f:b6:b7:31:cf:49:48:fb:b5:
                    12:76:94:47:79:d4:9e:47:37:ad:75:a9:7a:ce:55:
                    e1:d3:26:d0:29:d8:f3:4c:43:7b:1c:68:a8:cf:0f:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3F:D4:B9:5A:D9:68:F9:80:01:DB:9A:3E:2E:BA:B7:0E:68:F7:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C43FCEE60BD11F186CB5EB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0-45.207.13.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:d1:af:7b:29:67:e1:f4:49:a2:05:91:e1:20:43:b5:d6:08:
         69:b4:ff:25:d7:87:50:18:fa:c4:23:60:0a:27:30:e0:8a:cc:
         37:98:a9:25:76:7e:dd:fb:be:c5:83:7a:a3:cb:76:8f:5b:b6:
         6c:de:76:eb:d6:8e:d5:67:93:b8:90:aa:47:b0:e3:a4:54:93:
         c5:8f:7a:a5:6a:b2:e5:fa:b2:d9:3c:19:44:8c:2f:f8:7c:3c:
         2b:3e:4e:a3:ed:77:f6:28:5c:25:7e:1a:d9:4a:2f:88:ed:25:
         8b:e6:f4:80:f1:58:21:14:1f:17:82:3b:91:97:fd:db:dc:96:
         d8:f5:e8:a5:6d:b7:58:de:b1:15:d7:c6:36:57:86:98:da:3d:
         2c:3c:8b:8d:93:bb:dc:46:e8:d6:ac:06:24:b8:b7:dc:63:8c:
         ff:64:41:38:61:72:7f:cc:84:77:d3:e3:23:e7:fb:8a:f8:85:
         12:85:ce:fe:01:c1:2f:18:04:cf:27:29:22:d6:da:e8:47:fb:
         e2:4b:da:e8:80:26:89:26:b7:96:29:81:6d:8e:2d:f4:98:b5:
         aa:21:ab:b9:7f:be:df:aa:e0:ab:e9:b9:96:b5:c2:00:06:91:
         3e:b6:32:28:19:32:45:43:1c:ee:ac:6e:ce:08:39:5f:3a:b3:
         9e:be:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:46 2026 by rpki-client