Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A5BE2300D6811F1BD8AEF7CDAE4EC9C.roa
File:                     6A5BE2300D6811F1BD8AEF7CDAE4EC9C.roa (raw, json)
Hash identifier:          wjC9d7YIpSpuUjISmIckP4Nk5FbG8kVVQXKWhHXUjjk=
Subject key identifier:   AE:27:87:C8:90:DB:D0:42:92:34:46:A7:5F:65:F8:33:94:15:95:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019EB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A5BE2300D6811F1BD8AEF7CDAE4EC9C.roa
Signing time:             Thu 19 Feb 2026 07:55:55 +0000
ROA not before:           Thu 19 Feb 2026 07:55:49 +0000
ROA not after:            Thu 25 Feb 2027 07:55:49 +0000
asID:                     140641
IP address blocks:        45.195.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106164 (0x19eb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 19 07:55:49 2026 GMT
            Not After : Feb 25 07:55:49 2027 GMT
        Subject: CN=6996c20b-a794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:ac:47:e8:10:0e:04:f3:d9:15:d9:22:ce:
                    91:0c:af:71:6b:9f:ab:18:1d:d8:f7:fc:8d:9a:1b:
                    74:ad:c0:ac:3b:a4:93:aa:13:47:7c:b7:3b:55:94:
                    c4:f2:f9:6f:44:b0:77:13:6b:b7:0e:b2:83:96:cb:
                    f9:cd:70:06:10:bd:4c:94:7b:ca:67:e4:83:1e:3e:
                    04:44:c5:48:cb:02:cc:01:b2:61:1c:90:9f:fb:cc:
                    96:fa:fe:a6:67:a6:4a:59:4d:d3:90:16:7e:e1:f8:
                    7d:ad:98:85:e3:94:4a:53:9a:30:6d:72:80:63:35:
                    80:ff:e8:34:7a:b9:29:1a:a9:b8:ea:b9:ae:6d:f5:
                    a1:3b:04:74:26:c9:29:40:9b:46:cc:61:95:9a:19:
                    21:a9:8b:34:0e:d7:e7:a4:35:83:2c:26:68:38:bb:
                    77:f2:15:1e:c6:c4:61:ec:9e:60:91:5e:c5:12:aa:
                    18:a3:50:c1:1a:24:33:4b:cc:21:e9:7f:cd:6d:9c:
                    ea:30:62:28:2f:85:c1:e2:81:89:51:0c:8e:f5:ba:
                    f6:1e:98:d0:08:6c:50:4e:8e:b1:3a:66:3f:8a:5d:
                    d0:64:cd:f3:f7:1c:ea:a1:b9:12:5a:71:43:3e:e7:
                    9c:d9:1c:e2:3d:f4:a8:53:64:ae:85:14:eb:f7:97:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:27:87:C8:90:DB:D0:42:92:34:46:A7:5F:65:F8:33:94:15:95:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A5BE2300D6811F1BD8AEF7CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:29:05:b4:ee:84:cf:8c:ea:d3:82:3f:33:13:34:7d:91:
         00:b4:06:9b:55:f7:3b:44:11:48:06:e9:3c:49:87:0e:0c:48:
         20:20:0b:c2:ab:a0:54:99:57:91:f0:39:28:0e:d9:ba:e0:a9:
         20:26:fe:30:23:3f:00:4e:a5:86:1a:a6:f2:c7:5a:6a:ce:8e:
         87:0c:1d:67:b3:9e:b2:d2:81:58:a8:4a:7c:49:40:67:9b:2a:
         f2:40:7a:4b:59:76:e0:18:bb:4d:93:5d:81:fa:c8:51:bf:41:
         b2:c4:7e:71:fe:20:48:79:ee:d6:31:ac:64:c0:e1:28:0b:93:
         d2:12:12:96:5e:32:40:0f:4b:37:55:e4:53:5e:17:5f:db:94:
         d4:c1:7b:b8:d1:30:4b:d2:ca:84:67:e6:cb:25:13:57:1d:e9:
         00:4c:1d:d4:68:be:7c:4a:56:90:ad:3e:25:02:b3:fc:44:4a:
         d1:28:c6:f6:87:fd:4f:48:93:0c:b8:ce:8a:92:9e:ec:f0:6d:
         bd:8e:a4:e8:d0:95:55:cc:d4:43:5c:d5:2b:12:c6:ca:d3:e1:
         e5:4a:e0:44:21:c3:61:e9:25:3c:3d:92:cb:20:54:b3:af:97:
         70:ce:df:c2:07:a6:d1:51:13:47:13:9d:50:4a:82:de:2f:dd:
         50:d0:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:41 2026 by rpki-client