Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3EC93C0F0311F1A35B45DFDAE4EC9C.roa
File:                     5C3EC93C0F0311F1A35B45DFDAE4EC9C.roa (raw, json)
Hash identifier:          Q6jiii0PR7EOpF0tS7To5y5kOSEoY5gPeOa+VHlEx+s=
Subject key identifier:   E2:9B:71:4A:A4:ED:58:78:8F:E8:66:50:5B:DE:3B:61:7C:18:A1:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019F3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3EC93C0F0311F1A35B45DFDAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 08:57:33 +0000
ROA not before:           Sat 21 Feb 2026 08:57:29 +0000
ROA not after:            Sat 28 Mar 2026 08:57:29 +0000
asID:                     202656
IP address blocks:        45.192.49.0/24 maxlen: 24
                          45.192.50.0/24 maxlen: 24
                          45.192.51.0/24 maxlen: 24
                          45.192.54.0/24 maxlen: 24
                          45.192.55.0/24 maxlen: 24
                          45.192.56.0/24 maxlen: 24
                          45.192.57.0/24 maxlen: 24
                          45.192.58.0/24 maxlen: 24
                          45.192.60.0/24 maxlen: 24
                          45.192.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106300 (0x19f3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 21 08:57:29 2026 GMT
            Not After : Mar 28 08:57:29 2026 GMT
        Subject: CN=6999737d-05ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:8e:7b:36:bf:1b:e3:8c:3f:3e:26:d7:68:
                    51:e8:36:d4:8c:74:41:37:d7:4f:29:df:50:a5:fa:
                    38:5a:4a:a2:6b:0d:b7:ff:d4:b3:7b:16:06:f6:e1:
                    d1:d8:a6:bb:e6:9d:cc:0e:88:fb:44:00:f9:0c:20:
                    c7:b0:5e:d4:0c:fd:23:bb:2e:3d:96:15:5f:e9:48:
                    cd:93:00:7f:f8:cd:a4:24:4a:9a:11:2f:83:c1:a3:
                    30:a3:2b:4e:b5:ae:16:cf:22:24:18:eb:05:41:96:
                    50:6a:34:9d:a9:8e:ff:ce:2a:70:bb:e2:30:f2:32:
                    3a:2b:e4:ea:97:3c:fc:3b:84:a9:e6:9c:0e:ce:7c:
                    32:41:87:9e:d3:86:0d:61:c3:f2:07:b3:a1:7a:a7:
                    f1:d1:9a:2a:30:20:b7:42:80:d2:e1:4d:44:1d:d7:
                    67:4d:97:b5:6a:01:f5:3a:54:04:81:d4:0d:5b:4e:
                    3e:9d:ef:df:7e:1e:c5:63:41:2c:ad:d8:67:0b:16:
                    2b:a3:ed:42:eb:36:4b:37:4d:14:7b:37:f9:99:44:
                    41:8b:ca:40:32:64:00:68:de:2f:6b:ee:c8:55:65:
                    4b:79:c2:57:f9:37:7b:9d:02:cb:b9:64:e9:7d:32:
                    63:1b:b0:f7:f6:3b:1c:f7:f0:0e:16:ab:57:c5:b6:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:71:4A:A4:ED:58:78:8F:E8:66:50:5B:DE:3B:61:7C:18:A1:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3EC93C0F0311F1A35B45DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.49.0-45.192.51.255
                  45.192.54.0-45.192.58.255
                  45.192.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:47:33:45:27:ca:25:15:e8:c2:6f:f0:46:0e:5b:06:fc:21:
         c4:77:20:ea:61:67:34:09:5e:28:4a:7b:e3:d6:f3:39:07:2d:
         48:63:b8:4a:ba:48:de:e3:93:a1:c8:a5:78:fe:4e:4c:78:85:
         77:bc:6f:89:ce:59:00:06:82:88:d3:51:21:54:02:41:d8:07:
         eb:c1:9a:ce:d7:23:1a:53:45:3b:41:bd:f5:51:38:e0:c2:18:
         8a:5c:b3:e8:3e:0e:63:c3:6a:ab:fc:44:fb:df:60:70:1f:04:
         ac:4b:86:14:24:24:08:cc:47:60:ed:c1:1a:4b:8f:9c:d7:4e:
         e0:f0:b5:f2:6d:67:4c:38:72:65:83:5c:bf:11:04:bd:5c:9c:
         2c:3a:12:20:7f:6a:6b:2c:d2:ae:bd:ca:15:51:ac:e5:c9:5c:
         fa:be:d2:9b:b3:d0:8e:3f:b9:8e:5d:06:bd:57:5b:34:7b:69:
         2e:8c:35:ee:79:e4:16:58:a1:f6:49:83:73:de:6f:82:b8:70:
         eb:8a:f9:55:0d:57:c8:72:38:04:87:a6:de:23:ec:97:c8:8d:
         1b:4a:38:34:cb:85:65:09:cf:55:f4:5e:30:38:1c:6f:68:4d:
         8d:82:34:74:a0:6f:dd:7e:56:4c:c1:79:cb:da:0f:12:6c:e0:
         c2:1f:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:06 2026 by rpki-client