Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7690B1D0341811F1AE1BBEB5CE1D38B0.roa
File:                     7690B1D0341811F1AE1BBEB5CE1D38B0.roa (raw, json)
Hash identifier:          k4sr+L8HMojg8IhbSvrQapsMMjQt3IGHSib598ZofSU=
Subject key identifier:   88:94:A0:E7:47:9F:D7:7A:05:8F:36:D2:9F:10:CD:4A:ED:F9:FA:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7690B1D0341811F1AE1BBEB5CE1D38B0.roa
Signing time:             Thu 09 Apr 2026 13:31:50 +0000
ROA not before:           Thu 09 Apr 2026 13:31:45 +0000
ROA not after:            Tue 07 Jul 2026 13:31:45 +0000
asID:                     328608
IP address blocks:        45.205.67.0/24 maxlen: 24
                          45.205.72.0/24 maxlen: 24
                          45.205.73.0/24 maxlen: 24
                          45.205.74.0/24 maxlen: 24
                          45.205.75.0/24 maxlen: 24
                          45.205.82.0/24 maxlen: 24
                          45.205.83.0/24 maxlen: 24
                          45.205.84.0/24 maxlen: 24
                          45.205.104.0/24 maxlen: 24
                          45.205.105.0/24 maxlen: 24
                          45.205.106.0/24 maxlen: 24
                          45.205.107.0/24 maxlen: 24
                          45.205.108.0/24 maxlen: 24
                          45.205.109.0/24 maxlen: 24
                          45.205.112.0/24 maxlen: 24
                          45.205.113.0/24 maxlen: 24
                          45.205.114.0/24 maxlen: 24
                          45.205.115.0/24 maxlen: 24
                          45.205.116.0/24 maxlen: 24
                          45.205.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109403 (0x1ab5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 13:31:45 2026 GMT
            Not After : Jul  7 13:31:45 2026 GMT
        Subject: CN=69d7aa46-b427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:7b:c0:7f:40:0b:9f:fc:73:90:a5:0f:fd:
                    76:b9:c4:4f:2c:5d:a8:03:ed:ee:0b:61:78:4d:b8:
                    01:c9:eb:ca:21:43:93:1d:ee:1d:da:74:d1:b5:9d:
                    4e:b1:b6:b7:4c:74:94:ec:44:b0:4e:b6:2a:1a:28:
                    89:8b:88:7d:cb:7a:f6:87:3a:b8:af:3a:e8:bb:1c:
                    7c:82:a8:35:b7:e6:e1:64:6b:25:2d:a0:4e:db:01:
                    8f:64:96:b7:1c:29:4a:36:bd:fe:30:69:29:92:07:
                    7e:ac:a4:7c:ae:3d:1b:e6:05:18:10:a6:6e:06:cf:
                    c1:f4:eb:ca:2b:d3:fe:e4:24:19:7b:49:ea:09:9a:
                    9e:e3:c7:c1:2c:82:8d:6c:19:ea:62:65:25:6d:ed:
                    c9:47:ef:65:39:ad:66:95:70:ed:55:f3:e5:40:fc:
                    d3:ab:dc:ca:50:90:cf:36:3f:8c:ec:3e:5e:c1:82:
                    4e:bb:5c:59:c2:bd:c4:90:fa:02:08:d6:22:f1:00:
                    dd:da:ac:88:69:81:1e:e7:94:50:bf:35:00:03:6b:
                    3b:79:98:c7:07:1c:0d:3a:d6:79:14:66:99:59:79:
                    53:f0:2b:65:e0:5f:e1:69:80:23:41:1e:03:87:79:
                    1a:60:b9:62:b2:fa:fe:cc:02:8e:6d:fc:9b:e6:bf:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:A0:E7:47:9F:D7:7A:05:8F:36:D2:9F:10:CD:4A:ED:F9:FA:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7690B1D0341811F1AE1BBEB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.67.0/24
                  45.205.72.0/22
                  45.205.82.0-45.205.84.255
                  45.205.104.0-45.205.109.255
                  45.205.112.0-45.205.117.255

    Signature Algorithm: sha256WithRSAEncryption
         67:a3:e9:09:24:87:3d:75:b1:ce:8f:99:3a:71:6e:eb:62:a6:
         99:89:c8:fb:ed:37:ef:0b:9f:88:cf:04:3e:f0:00:4c:ac:08:
         4b:41:22:d6:a9:b8:2d:0d:8f:ad:a2:f3:03:f5:4b:7e:25:81:
         4b:1e:c0:b9:18:1a:e8:fd:67:be:93:55:99:1a:66:b0:24:08:
         a3:a5:ab:5b:32:27:14:b3:04:b0:62:91:2b:85:6d:75:30:cd:
         bc:6a:cc:cf:c7:1d:73:b1:d5:be:3e:d1:28:64:01:75:40:75:
         8d:1e:6e:b1:d1:08:9a:bc:f4:56:f1:c5:32:0f:36:ad:42:9a:
         20:22:32:98:45:74:48:07:be:a4:50:c3:57:50:f5:f1:c8:97:
         a3:2a:7e:f6:e3:30:20:04:62:52:53:b0:76:13:4c:4c:4f:4c:
         39:09:20:02:d4:95:27:89:6c:59:d4:8f:80:3a:27:6d:cf:81:
         80:de:99:6f:7d:8c:8d:d2:d5:4c:42:35:51:5c:66:fe:41:c5:
         14:6a:1b:1f:af:6a:7e:83:e4:4e:d9:45:01:2b:34:00:d4:c1:
         e5:df:08:ec:a8:ff:c4:67:64:0b:ea:1e:2e:c3:4b:3a:f3:6a:
         4c:11:b1:ab:67:4c:18:4e:d7:82:c4:9d:16:9b:38:25:29:d2:
         82:e6:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:56 2026 by rpki-client