Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/602CF7C80F9711F1BD0A5EE8DAE4EC9C.roa
File:                     602CF7C80F9711F1BD0A5EE8DAE4EC9C.roa (raw, json)
Hash identifier:          WgE7qBAQf2YaxSyVXqEpsJFP2+euL4saeHZxRNH7C0s=
Subject key identifier:   52:C3:45:B6:7D:8D:1B:A5:7E:FB:69:A1:A3:53:15:B6:AB:DD:ED:4A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019FA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/602CF7C80F9711F1BD0A5EE8DAE4EC9C.roa
Signing time:             Sun 22 Feb 2026 02:37:05 +0000
ROA not before:           Sun 22 Feb 2026 02:37:01 +0000
ROA not after:            Sat 28 Mar 2026 02:37:01 +0000
asID:                     395839
IP address blocks:        45.202.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106406 (0x19fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 22 02:37:01 2026 GMT
            Not After : Mar 28 02:37:01 2026 GMT
        Subject: CN=699a6bd1-06eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:af:71:ef:3c:26:9d:f7:25:61:a6:64:bb:
                    82:33:2e:08:36:7b:5a:8e:46:87:e9:0a:fe:a4:1f:
                    26:c9:ea:46:b5:5d:02:ad:f3:28:b1:a4:21:98:f5:
                    be:10:ed:86:1e:81:79:12:c7:4e:b5:ca:7a:c5:8a:
                    a3:a3:d7:13:ed:e5:84:e1:46:46:6b:1d:70:e5:da:
                    16:f7:27:ea:cb:a8:4a:de:6b:b6:cc:af:fe:36:0e:
                    f7:0c:c5:7e:d8:22:b1:0b:c2:97:6f:35:83:8c:18:
                    8c:72:b4:76:70:8a:53:cc:ac:34:0c:b8:b8:4d:6f:
                    9b:da:0f:8d:56:bf:30:25:9d:60:88:1f:5c:7c:77:
                    59:77:0f:52:a9:81:7c:4b:d3:7d:0d:73:1f:20:35:
                    aa:5a:1b:db:ff:21:d7:48:98:c2:0d:72:54:c0:b2:
                    77:c5:3c:70:98:cf:97:ce:dd:e3:3a:31:c9:84:14:
                    0c:a9:76:c8:2b:92:af:1e:72:34:42:dd:e3:84:81:
                    68:b8:13:77:c9:c1:c0:3f:50:5f:1a:8e:ba:61:24:
                    51:54:5e:e3:e7:ae:09:bf:bd:fc:c5:39:06:0e:77:
                    bb:9c:b1:cd:4f:6d:ea:9b:96:86:0f:8d:e5:a5:ed:
                    9a:c1:ce:16:d4:3a:10:2a:30:04:47:06:79:29:d9:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C3:45:B6:7D:8D:1B:A5:7E:FB:69:A1:A3:53:15:B6:AB:DD:ED:4A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/602CF7C80F9711F1BD0A5EE8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:6d:26:c2:d1:bb:30:49:9c:87:01:52:1e:4c:e5:77:0c:
         0e:23:ec:e9:27:06:3b:c1:a7:59:6f:97:5b:ff:2d:c4:14:e0:
         19:15:68:ce:a6:a9:d8:e6:a2:58:92:92:30:a5:9d:ee:c7:43:
         af:a5:e4:7f:ea:35:73:5a:88:53:12:4f:6e:55:ad:90:3c:ed:
         85:f0:54:92:ad:b0:df:fc:e5:3f:e0:13:d1:30:69:5f:09:85:
         7f:6d:b2:be:42:a7:a8:27:70:21:7c:ce:6d:4b:18:5e:88:9d:
         05:f9:b2:8a:0f:3e:bd:51:44:08:27:86:39:46:3a:f9:66:e8:
         f9:da:3f:bf:e9:63:89:0a:0c:61:cb:18:aa:36:ab:e5:03:1a:
         df:4d:9d:b3:51:4d:a0:d8:a1:07:c0:23:28:8a:02:52:75:3c:
         0a:a9:4f:cf:b2:b5:85:f4:2b:03:fb:da:76:8e:db:c7:42:d0:
         18:17:f4:75:9c:35:05:36:92:8e:98:04:7d:a7:bc:33:ff:71:
         12:0d:3b:94:22:9e:ce:93:0f:63:d0:b1:39:25:35:17:2b:d0:
         ea:bb:c9:ef:b4:fd:cb:0a:db:20:39:06:99:6f:7f:ef:d6:7f:
         b9:6d:76:3b:c6:a5:c6:d1:c8:bb:4d:e1:6a:e9:fd:02:21:87:
         a3:3a:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:29:39 2026 by rpki-client