Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C9CEEC864D411F1975F5406CF1D38B0.roa
File:                     5C9CEEC864D411F1975F5406CF1D38B0.roa (raw, json)
Hash identifier:          3fT4JGA7vLHRAXR71CC1XpRkc/Z0trDq4K8bADpSpRo=
Subject key identifier:   91:C4:64:FB:65:B8:FB:94:5B:E7:34:2D:E7:87:FF:60:D4:11:18:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BCDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C9CEEC864D411F1975F5406CF1D38B0.roa
Signing time:             Wed 10 Jun 2026 13:57:48 +0000
ROA not before:           Wed 10 Jun 2026 13:57:43 +0000
ROA not after:            Fri 17 Jul 2026 13:57:43 +0000
asID:                     22773
IP address blocks:        45.192.4.0/22 maxlen: 24
                          45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.194.76.0/23 maxlen: 24
                          45.194.78.0/24 maxlen: 24
                          45.194.82.0/24 maxlen: 24
                          45.194.84.0/24 maxlen: 24
                          45.194.121.0/24 maxlen: 24
                          45.196.116.0/22 maxlen: 24
                          45.197.28.0/22 maxlen: 24
                          45.202.106.0/24 maxlen: 24
                          45.204.80.0/20 maxlen: 24
                          45.206.80.0/20 maxlen: 24
                          45.206.96.0/19 maxlen: 24
                          45.207.27.0/24 maxlen: 24
                          45.207.29.0/24 maxlen: 24
                          45.207.31.0/24 maxlen: 24
                          45.207.45.0/24 maxlen: 24
                          45.207.166.0/24 maxlen: 24
                          45.207.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 14:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113884 (0x1bcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 13:57:43 2026 GMT
            Not After : Jul 17 13:57:43 2026 GMT
        Subject: CN=6a296d5c-19fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:b4:75:d4:08:02:1b:2c:f2:1c:a9:e8:d3:
                    09:4c:a0:97:09:03:2c:4c:1b:38:f7:4a:d6:a7:78:
                    85:ce:94:5c:be:90:8d:5d:d0:7c:8e:61:6a:2c:b8:
                    ee:f5:b1:12:ba:e6:1e:a5:c5:10:a0:10:64:d6:c3:
                    18:43:48:3c:3b:dd:9d:23:4c:6a:1c:c2:ff:cd:27:
                    48:88:eb:6e:06:08:ed:8e:7e:a6:5a:03:86:10:40:
                    98:12:cd:07:18:19:01:ce:8a:0e:31:53:ca:f4:ed:
                    5d:14:ee:57:24:f7:b2:61:8e:76:74:4c:74:09:07:
                    ba:09:e0:43:e3:84:9d:8f:f8:97:16:0b:da:7e:a8:
                    c6:a5:fc:46:11:ca:1a:32:00:3a:fd:b4:74:90:5f:
                    00:2e:e8:bb:bf:70:d8:95:21:52:b8:ab:3c:2d:86:
                    ca:0c:5c:21:91:d3:49:4f:2c:cb:6c:39:3d:7d:7b:
                    03:0e:63:86:29:00:b3:f8:8a:2f:6a:af:f2:5e:be:
                    f8:a6:cd:05:d9:19:d5:b0:e8:6f:2e:d7:e8:e1:c7:
                    74:ee:05:b1:48:e8:57:54:5b:dd:01:e2:12:08:b6:
                    36:bb:8f:99:7a:56:46:7a:11:69:90:63:a7:34:23:
                    7d:27:05:2e:ee:2e:44:47:43:6b:e0:79:56:16:54:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:64:FB:65:B8:FB:94:5B:E7:34:2D:E7:87:FF:60:D4:11:18:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C9CEEC864D411F1975F5406CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.192.24.0/21
                  45.194.72.0/23
                  45.194.76.0-45.194.78.255
                  45.194.82.0/24
                  45.194.84.0/24
                  45.194.121.0/24
                  45.196.116.0/22
                  45.197.28.0/22
                  45.202.106.0/24
                  45.204.80.0/20
                  45.206.80.0-45.206.127.255
                  45.207.27.0/24
                  45.207.29.0/24
                  45.207.31.0/24
                  45.207.45.0/24
                  45.207.166.0/24
                  45.207.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:77:2f:2f:8f:3d:29:93:b3:a8:8c:95:ce:ae:3e:4f:fa:eb:
         aa:c1:18:9d:90:68:8b:23:e8:4a:e3:04:0d:8d:d4:7d:b3:a4:
         e8:11:c1:93:69:fe:c8:bb:88:73:8d:dd:cc:29:4f:db:cc:20:
         21:00:b6:5b:09:da:9f:5b:9f:87:a2:7d:c1:65:6e:84:52:87:
         93:88:d2:0c:66:df:27:05:9b:50:0c:0b:95:58:dc:2c:31:59:
         e5:ca:e0:b8:f4:05:e0:51:74:b3:ae:a5:ee:10:20:1d:13:e9:
         bc:61:ba:5a:33:49:66:a1:27:a1:bd:f3:1e:0a:71:2f:19:89:
         c4:31:63:1a:70:6a:f2:cf:0c:b6:cb:98:7f:e4:a3:d9:3d:05:
         0e:5e:6a:09:f6:23:0f:c4:b2:24:76:42:69:39:a7:28:b6:78:
         f0:93:fc:55:f2:c6:df:e8:c2:84:42:c6:56:1a:be:4c:83:3b:
         2a:3c:01:5e:70:ae:4b:e2:12:be:58:ff:0f:a3:3a:bb:79:fc:
         4b:8f:77:5f:ed:ed:16:dc:be:35:f0:64:79:c0:98:9d:2b:c2:
         31:35:fa:16:6e:fb:7b:01:20:be:a0:f2:e8:05:c0:9e:9e:52:
         17:2e:0c:ec:3f:5f:94:08:bb:a8:9e:25:73:26:d4:14:1f:be:
         97:75:c7:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:25:31 2026 by rpki-client