Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62E0B860135211F1B8AEC9C1DAE4EC9C.roa
File:                     62E0B860135211F1B8AEC9C1DAE4EC9C.roa (raw, json)
Hash identifier:          b7uNbWO2u/z2aAX/e/EvDkyaKKaiLb6LYDydQ9KPrLs=
Subject key identifier:   07:E3:CC:B7:AB:50:3C:50:15:11:CF:58:56:94:11:80:9A:B8:D3:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A0E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62E0B860135211F1B8AEC9C1DAE4EC9C.roa
Signing time:             Thu 26 Feb 2026 20:33:19 +0000
ROA not before:           Thu 26 Feb 2026 20:33:15 +0000
ROA not after:            Mon 30 Mar 2026 20:33:15 +0000
asID:                     401783
IP address blocks:        45.197.3.0/24 maxlen: 24
                          45.197.8.0/24 maxlen: 24
                          45.197.10.0/24 maxlen: 24
                          45.197.11.0/24 maxlen: 24
                          45.198.5.0/24 maxlen: 24
                          45.201.35.0/24 maxlen: 24
                          45.201.41.0/24 maxlen: 24
                          45.201.42.0/24 maxlen: 24
                          45.201.48.0/24 maxlen: 24
                          45.201.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106723 (0x1a0e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 26 20:33:15 2026 GMT
            Not After : Mar 30 20:33:15 2026 GMT
        Subject: CN=69a0ae0f-8cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:71:ec:e8:5d:24:7a:d7:13:9e:c8:e1:06:
                    8a:05:61:3a:e4:99:c3:5f:78:0f:43:71:43:c4:a6:
                    2f:0d:bc:ed:4d:0c:28:fa:2c:8f:53:29:9d:e8:85:
                    f6:67:8e:3e:c3:7f:c9:73:f9:0b:ab:01:20:00:dd:
                    d9:71:75:bd:7d:1f:83:20:64:ff:15:ed:2c:c8:c3:
                    c5:ce:97:ad:4e:97:04:05:e0:91:82:99:1b:41:20:
                    ea:cf:29:2a:f9:40:4a:cc:24:c4:af:4c:ee:bf:76:
                    36:49:b3:3a:2b:aa:99:6d:0f:0a:1a:3e:5b:67:b0:
                    73:20:0a:01:a2:31:7e:45:0c:81:b4:83:43:d6:80:
                    a8:ce:1a:be:80:ad:85:19:c7:c4:17:16:0a:15:a8:
                    dc:27:ba:e7:aa:d6:e8:59:e3:6e:a7:03:87:73:a9:
                    d2:eb:d4:ed:3f:10:53:fe:62:2a:38:6e:79:d5:d4:
                    d1:37:61:44:f6:d4:b0:a6:f3:d1:23:4d:db:4d:79:
                    e9:b7:77:52:7b:59:5d:9b:e3:f3:ca:c5:e4:30:b7:
                    0d:63:aa:a1:32:30:8a:22:96:fa:ff:f8:c7:63:4b:
                    8a:bc:d3:06:cd:0e:18:a6:6c:32:79:48:9e:aa:5a:
                    d6:80:65:84:71:69:b8:b0:e6:bf:fc:f7:a3:eb:7a:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:CC:B7:AB:50:3C:50:15:11:CF:58:56:94:11:80:9A:B8:D3:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62E0B860135211F1B8AEC9C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.3.0/24
                  45.197.8.0/24
                  45.197.10.0/23
                  45.198.5.0/24
                  45.201.35.0/24
                  45.201.41.0-45.201.42.255
                  45.201.48.0/24
                  45.201.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:81:7e:be:3a:1d:f7:37:2b:32:ab:36:1d:7c:56:79:e1:a9:
         3f:63:d1:24:ec:d7:c4:5d:18:28:f1:4e:eb:3a:03:d1:b8:6a:
         36:77:a7:f6:13:42:9b:d7:ed:b1:d3:ad:25:9d:aa:eb:4a:4a:
         94:c3:b8:1d:bd:b6:8e:5e:18:02:73:f8:e2:3c:45:92:9e:87:
         1d:1a:4c:b0:c0:9f:cf:b7:97:2a:14:15:d0:45:32:07:d1:d8:
         9e:2c:b5:d2:b2:76:70:c3:75:5e:6a:e4:fe:6c:18:67:7d:6b:
         7b:c9:18:a8:43:17:2a:8a:23:a0:e6:d3:69:77:2d:34:8e:c9:
         4f:e2:99:36:e2:b2:33:f1:5b:46:c3:5c:02:1f:10:58:78:69:
         ff:78:f0:49:0c:5c:72:82:49:8c:73:80:e8:dd:fd:5d:1f:23:
         0c:6d:76:f2:30:79:72:5e:4e:f5:18:59:2b:22:aa:93:54:5d:
         58:f9:16:23:e6:15:ad:a6:90:56:ba:17:65:19:13:22:6c:b9:
         b3:81:b3:bd:04:6e:a1:93:e8:3b:de:25:d1:60:42:f2:3b:0a:
         d9:ba:25:36:f2:17:e3:d6:49:4a:0b:77:fa:3e:4f:df:fc:25:
         11:54:54:53:36:e9:83:91:8b:fa:81:50:fc:ae:00:d0:f4:82:
         b5:54:d1:e5
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAaDjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI2MjAzMzE1WhcNMjYwMzMwMjAzMzE1WjAYMRYw
FAYDVQQDEw02OWEwYWUwZi04Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm3Nx7OhdJHrXE57I4QaKBWE65JnDX3gPQ3FDxKYvDbztTQwo+iyPUymd
6IX2Z44+w3/Jc/kLqwEgAN3ZcXW9fR+DIGT/Fe0syMPFzpetTpcEBeCRgpkbQSDq
zykq+UBKzCTEr0zuv3Y2SbM6K6qZbQ8KGj5bZ7BzIAoBojF+RQyBtIND1oCozhq+
gK2FGcfEFxYKFajcJ7rnqtboWeNupwOHc6nS69TtPxBT/mIqOG551dTRN2FE9tSw
pvPRI03bTXnpt3dSe1ldm+PzysXkMLcNY6qhMjCKIpb6//jHY0uKvNMGzQ4Ypmwy
eUieqlrWgGWEcWm4sOa//Pej63rNfQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFAfj
zLerUDxQFRHPWFaUEYCauNOeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MkUwQjg2MDEzNTIxMUYxQjhBRUM5QzFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALcUDAwQALcUIAwQBLcUKAwQA
LcYFAwQALckjMAwDBAAtySkDBAAtySoDBAAtyTADBAAtyT0wDQYJKoZIhvcNAQEL
BQADggEBAJGBfr46Hfc3KzKrNh18VnnhqT9j0STs18RdGCjxTus6A9G4ajZ3p/YT
QpvX7bHTrSWdqutKSpTDuB29to5eGAJz+OI8RZKehx0aTLDAn8+3lyoUFdBFMgfR
2J4stdKydnDDdV5q5P5sGGd9a3vJGKhDFyqKI6Dm02l3LTSOyU/imTbisjPxW0bD
XAIfEFh4af948EkMXHKCSYxzgOjd/V0fIwxtdvIweXJeTvUYWSsiqpNUXVj5FiPm
Fa2mkFa6F2UZEyJsubOBs70EbqGT6DveJdFgQvI7Ctm6JTbyF+PWSUoLd/o+T9/8
JRFUVFM26YORi/qBUPyuAND0grVU0eU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:22:59 2026 by rpki-client