Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566AF4AE688C11F0AA3391D6DAE4EC9C.roa
File:                     566AF4AE688C11F0AA3391D6DAE4EC9C.roa (raw, json)
Hash identifier:          3XlYoxmcAgN4Zx2xngAHJW19BCeiP2PD/FVkqt4Zty0=
Subject key identifier:   D7:7B:F1:34:B0:8B:71:D0:55:37:93:6F:95:A7:58:DB:A6:D7:E4:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01676F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566AF4AE688C11F0AA3391D6DAE4EC9C.roa
Signing time:             Thu 24 Jul 2025 12:47:21 +0000
ROA not before:           Thu 24 Jul 2025 12:47:16 +0000
ROA not after:            Thu 28 Aug 2025 12:47:16 +0000
asID:                     202656
IP address blocks:        45.200.169.0/24 maxlen: 24
                          45.200.170.0/24 maxlen: 24
                          45.200.171.0/24 maxlen: 24
                          45.200.172.0/24 maxlen: 24
                          45.200.173.0/24 maxlen: 24
                          45.200.174.0/24 maxlen: 24
                          45.200.175.0/24 maxlen: 24
                          45.200.176.0/24 maxlen: 24
                          45.200.177.0/24 maxlen: 24
                          45.200.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92015 (0x1676f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 24 12:47:16 2025 GMT
            Not After : Aug 28 12:47:16 2025 GMT
        Subject: CN=68822b59-3205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:66:3d:b7:36:3a:ee:3d:64:d6:ae:62:35:ce:
                    f7:2c:01:90:d6:87:d9:ba:18:9a:ca:8a:d3:94:4b:
                    42:7c:4b:54:82:07:79:ef:75:4d:b1:03:30:71:d8:
                    e7:7c:38:64:7c:df:2d:a3:aa:66:d2:7c:e8:ad:23:
                    5b:f6:ba:a2:3b:c1:f6:d5:ea:8b:3b:c1:2c:39:93:
                    4f:a4:b5:7e:d6:4e:eb:3b:60:1a:12:ed:48:5a:9b:
                    f9:81:ce:16:e8:97:d2:de:33:ff:42:ac:54:2e:94:
                    32:6b:7c:cd:7f:67:aa:07:98:e4:ed:24:aa:3b:db:
                    b8:3c:33:ed:43:10:51:c9:05:78:1b:65:24:5f:85:
                    62:8f:c8:5a:18:e3:2d:c7:ac:17:1f:3c:bc:f6:ed:
                    13:27:c3:39:88:6d:b4:68:2f:80:95:6c:c2:94:75:
                    bd:2c:7d:59:e7:30:8c:4e:44:b2:bd:b4:c0:33:a6:
                    63:bf:f4:53:51:78:82:10:ca:c0:db:b7:2f:06:f8:
                    ad:97:f9:c4:ce:46:00:d5:f2:a9:de:d8:90:ba:26:
                    88:79:1a:fd:10:be:5a:18:65:24:10:d9:a2:ee:b8:
                    d1:57:82:1c:f0:d2:ba:dd:8b:ff:97:1b:a5:c8:43:
                    0d:2e:4a:3f:0d:7c:03:48:da:fe:5c:a4:9d:8a:98:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:F1:34:B0:8B:71:D0:55:37:93:6F:95:A7:58:DB:A6:D7:E4:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566AF4AE688C11F0AA3391D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.169.0-45.200.178.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:da:5d:1e:a5:25:5f:4a:87:e5:c2:55:d3:f2:ca:4d:7d:
         48:0d:b8:65:ba:70:f1:4f:78:87:76:96:38:76:2e:4a:59:54:
         1c:dd:ce:c0:44:41:0c:81:4a:59:ed:a9:a1:9c:f9:82:c0:f0:
         b9:4f:da:5b:a8:7a:5b:08:50:71:e3:62:82:59:da:e9:7d:dc:
         9b:18:fa:a5:93:2c:f5:31:dc:72:4e:17:61:74:f3:f2:e7:a1:
         1e:e8:06:13:87:bd:27:7d:80:fc:e2:32:75:96:d3:93:4a:aa:
         af:39:09:db:d2:f3:a3:4e:18:4a:32:9e:b2:68:98:28:8a:13:
         99:27:f3:b3:b8:6d:a4:29:15:d4:6a:37:7f:39:07:33:af:56:
         67:48:7e:6b:70:c0:27:34:00:47:95:f6:ce:20:c3:65:c2:52:
         8a:a1:43:61:08:be:5a:8a:17:de:42:76:ca:d9:3a:b2:0f:98:
         8e:16:d6:91:3f:56:a8:0d:aa:97:9e:b1:10:6b:40:cb:45:8b:
         6c:6e:4d:a3:e2:b0:a5:36:dd:f8:77:e8:6d:1d:aa:97:76:2c:
         99:8c:dc:b7:a4:f4:67:54:a1:03:35:c6:33:ff:69:cf:a4:8b:
         83:71:e1:49:2e:1d:de:a9:0a:f8:e4:c4:60:d7:11:12:d8:ce:
         25:89:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:00 2025 by rpki-client