Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E348C960BDC11F1A03A667BDAE4EC9C.roa
File:                     6E348C960BDC11F1A03A667BDAE4EC9C.roa (raw, json)
Hash identifier:          Qt/OD9ZVaaqqEvWkkWJV2zFHIK1U1fLjt7E3GS5Crw4=
Subject key identifier:   81:8E:27:7E:87:4B:69:00:F7:F0:DF:53:AF:5C:AD:9A:D1:1F:CF:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019E82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E348C960BDC11F1A03A667BDAE4EC9C.roa
Signing time:             Tue 17 Feb 2026 08:41:20 +0000
ROA not before:           Tue 17 Feb 2026 08:41:15 +0000
ROA not after:            Thu 02 Apr 2026 08:41:15 +0000
asID:                     48678
IP address blocks:        45.192.133.0/24 maxlen: 24
                          45.195.105.0/24 maxlen: 24
                          45.195.110.0/24 maxlen: 24
                          45.195.137.0/24 maxlen: 24
                          45.195.153.0/24 maxlen: 24
                          45.196.193.0/24 maxlen: 24
                          45.196.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106114 (0x19e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 17 08:41:15 2026 GMT
            Not After : Apr  2 08:41:15 2026 GMT
        Subject: CN=699429b0-5a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:b2:e5:d0:1f:20:d4:af:5a:2d:bb:d0:64:
                    8a:35:c4:67:5f:49:25:a6:b6:ac:bf:3a:41:c2:20:
                    c7:3a:19:90:5d:5c:40:b5:2f:29:ed:16:0b:6a:2a:
                    fb:e6:4d:0b:99:9f:ab:a5:b3:cd:2c:5f:43:d6:fc:
                    d0:2b:ab:45:4f:0f:16:93:6a:ec:46:7c:51:c5:ea:
                    eb:c4:43:65:df:ee:1f:e1:a1:12:58:24:88:c9:39:
                    00:92:9e:05:f7:44:50:7b:3a:16:8d:b2:8b:f9:be:
                    ee:3b:3c:48:27:5c:85:a3:2a:5c:06:16:26:01:1b:
                    9a:31:12:4e:8e:dd:54:87:37:5a:c8:42:37:b1:b0:
                    58:a0:ea:26:f0:dd:de:4c:ec:de:d1:5b:47:67:e8:
                    cc:6e:2e:7c:07:36:90:69:41:cb:c9:67:9c:9e:15:
                    63:5c:01:92:4d:1a:7a:e6:77:f2:79:d6:61:05:b6:
                    e4:7f:e3:d1:07:3b:e0:3e:9d:f0:ee:78:a2:66:64:
                    e1:01:38:33:6d:ba:7d:c7:ea:d4:35:79:a3:ec:61:
                    08:8c:cf:d7:f5:4e:1d:07:87:c5:87:52:b4:f5:6f:
                    a7:72:33:10:d0:d0:ec:04:91:21:af:f6:a5:ce:ae:
                    94:ce:d0:2f:50:fb:31:18:f1:ba:d3:dd:3d:d8:1d:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:27:7E:87:4B:69:00:F7:F0:DF:53:AF:5C:AD:9A:D1:1F:CF:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E348C960BDC11F1A03A667BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.133.0/24
                  45.195.105.0/24
                  45.195.110.0/24
                  45.195.137.0/24
                  45.195.153.0/24
                  45.196.193.0/24
                  45.196.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:cc:38:ee:ef:47:f6:ec:f8:08:c8:3a:29:dd:6f:8b:bb:d7:
         ef:9d:cf:46:01:ee:db:b4:f0:4b:2b:59:24:ac:39:02:c3:5b:
         3c:b9:03:1f:d6:73:da:39:ac:e7:40:e3:00:81:41:40:0a:42:
         75:a7:e4:4f:80:09:5a:32:21:91:8e:c9:67:05:fa:84:97:69:
         a6:ee:f9:01:c7:c2:62:cb:52:28:00:7e:cb:c8:e3:c4:b5:e4:
         1b:45:5f:b3:c4:59:3b:d4:24:59:42:1d:d8:e4:d1:f2:b0:14:
         4d:b9:b7:a9:71:29:99:dc:80:9c:4b:6a:36:a9:9a:34:00:9b:
         30:30:20:19:86:44:e8:41:ba:01:a9:4f:47:a8:ba:db:84:58:
         ed:c2:de:86:36:a1:5e:ff:4d:cf:16:24:e2:74:e5:9f:40:7f:
         6e:e8:2c:ee:8e:66:68:e1:a7:e2:a3:38:13:1a:40:9d:04:3d:
         48:27:7a:2a:f7:ce:a5:a7:ad:a5:75:a1:3b:ce:a2:2c:73:48:
         8e:77:6b:cc:7d:3c:d2:b0:15:ae:04:b2:12:38:2d:84:ab:f4:
         d0:74:a5:7c:25:52:87:50:00:ed:ee:63:98:04:59:13:94:58:
         0c:b8:d0:3b:3a:58:96:24:14:ad:47:25:a0:79:0f:10:ef:b4:
         ed:fc:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:30 2026 by rpki-client