Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9CD5FA0F0211F1ADA300DBDAE4EC9C.roa
File:                     7A9CD5FA0F0211F1ADA300DBDAE4EC9C.roa (raw, json)
Hash identifier:          LgLDdcg1NbM+DIJNJBdYtRJyE9/BZbYqQcJPeTtj7AQ=
Subject key identifier:   35:C7:B6:21:96:40:5D:51:96:3C:92:02:E1:9B:79:46:D6:88:0D:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019F38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9CD5FA0F0211F1ADA300DBDAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 08:51:15 +0000
ROA not before:           Sat 21 Feb 2026 08:51:10 +0000
ROA not after:            Sat 28 Mar 2026 08:51:10 +0000
asID:                     202656
IP address blocks:        45.192.48.0/24 maxlen: 24
                          45.199.192.0/24 maxlen: 24
                          45.199.193.0/24 maxlen: 24
                          45.199.194.0/24 maxlen: 24
                          45.199.195.0/24 maxlen: 24
                          45.199.196.0/24 maxlen: 24
                          45.199.197.0/24 maxlen: 24
                          45.199.198.0/24 maxlen: 24
                          45.199.199.0/24 maxlen: 24
                          45.199.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106296 (0x19f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 21 08:51:10 2026 GMT
            Not After : Mar 28 08:51:10 2026 GMT
        Subject: CN=69997203-5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:ec:9a:76:de:7b:84:34:b7:e1:73:7d:0e:
                    44:f0:38:74:5d:47:7d:b7:4e:f2:3f:58:88:24:86:
                    84:c8:17:8f:98:39:f7:30:d6:8d:07:fe:58:69:eb:
                    e6:38:8b:64:42:2d:6c:d6:dd:3e:19:c0:40:e7:e1:
                    50:84:0b:96:d0:be:01:e5:da:1a:35:5c:3d:ec:dd:
                    b0:88:30:d2:81:17:02:6f:b1:1a:ba:e5:f0:1d:a1:
                    bc:5a:fc:23:1f:44:64:91:41:3c:8b:11:d4:aa:da:
                    3e:d0:c9:30:94:61:27:84:25:66:0b:36:7d:f2:cc:
                    4b:64:2a:53:c9:b8:07:b5:bf:ad:c0:62:0a:e2:3c:
                    54:29:3c:86:93:35:fe:2e:ac:94:19:56:b5:f9:10:
                    46:3c:8a:b0:db:d8:02:a1:4c:e9:53:e2:47:f3:79:
                    68:55:56:3a:49:41:c5:a1:c7:bd:fa:7e:b6:b1:b0:
                    1e:f1:b3:20:50:61:1e:f4:6a:a5:1e:ef:63:2f:53:
                    95:87:fb:f6:51:39:9e:05:d8:5d:02:af:eb:12:bc:
                    32:88:6d:44:bf:98:b6:ee:f5:89:e5:f9:ce:f5:0f:
                    6e:bd:55:4a:85:f8:4f:ad:3c:67:7d:25:cb:57:8e:
                    0c:b3:19:3a:a3:ce:cf:3b:f2:d3:28:0c:94:a2:33:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:B6:21:96:40:5D:51:96:3C:92:02:E1:9B:79:46:D6:88:0D:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9CD5FA0F0211F1ADA300DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.48.0/24
                  45.199.192.0-45.199.200.255

    Signature Algorithm: sha256WithRSAEncryption
         53:20:3e:2c:16:05:da:e3:ca:28:41:0b:c8:37:2f:63:64:44:
         3d:ac:30:bf:e8:b3:3c:90:72:ab:ea:67:2e:6a:dc:68:27:5b:
         93:62:6b:f5:1e:16:46:0b:05:3c:24:c3:ce:30:11:7f:5f:13:
         37:8b:90:23:57:15:76:f9:be:01:1a:29:5e:50:2b:4b:f1:50:
         32:52:5b:7f:31:d3:cf:a8:f6:57:e8:60:54:7a:f7:c7:c7:02:
         f6:06:03:08:2c:fd:b8:42:2f:34:ec:90:82:4d:e0:9b:bc:79:
         cc:71:f1:e9:2b:aa:c0:bb:40:93:da:00:c1:45:c5:87:b2:88:
         04:d2:7d:7d:b0:d2:5b:b4:52:54:9e:bf:ac:64:0e:75:7f:f0:
         d9:51:48:1e:09:76:b6:81:98:e4:87:19:09:9c:cd:3c:ae:48:
         d3:ea:9c:e5:7e:0c:da:83:40:3d:33:25:5f:c2:70:56:19:d7:
         62:8f:a0:ff:18:1a:b4:f3:f3:f4:6d:77:9a:78:24:83:78:81:
         ed:fe:5d:61:dc:97:94:77:d2:51:d5:48:ee:d1:74:7d:5f:bf:
         79:e0:bb:5d:53:99:58:bd:9c:a5:32:b5:bf:31:66:22:fd:ed:
         55:6e:6d:28:31:6f:0c:3e:5c:04:5e:0b:38:6a:ad:26:12:0c:
         c8:92:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:45 2026 by rpki-client