Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94EF8CE064AC11F184D2C91ACF1D38B0.roa
File:                     94EF8CE064AC11F184D2C91ACF1D38B0.roa (raw, json)
Hash identifier:          o9DYxQWKLugzuPa0K8/6CNWZBu5DTDuDtuNeS6rN5BA=
Subject key identifier:   66:E7:1E:F6:F2:9A:E7:9B:6B:06:36:8F:BE:FE:28:64:CA:27:C2:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BCAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94EF8CE064AC11F184D2C91ACF1D38B0.roa
Signing time:             Wed 10 Jun 2026 09:13:03 +0000
ROA not before:           Wed 10 Jun 2026 09:12:58 +0000
ROA not after:            Fri 10 Jul 2026 09:12:58 +0000
asID:                     54801
IP address blocks:        45.200.14.0/23 maxlen: 24
                          45.200.16.0/23 maxlen: 24
                          45.200.18.0/23 maxlen: 24
                          45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.200.49.0/24 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
                          45.207.224.0/19 maxlen: 24
                          45.207.224.0/20 maxlen: 24
                          45.207.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113836 (0x1bcac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 09:12:58 2026 GMT
            Not After : Jul 10 09:12:58 2026 GMT
        Subject: CN=6a292a9e-18bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:a6:23:1e:b9:cb:86:b0:a0:c3:bd:39:6a:
                    76:cf:69:77:8c:fe:83:ab:75:3a:d1:9d:03:e9:45:
                    08:d5:fb:a1:83:11:44:ad:11:51:bf:2f:c8:fe:c6:
                    68:41:bb:34:a0:f4:e2:1c:3f:01:a5:64:88:11:8e:
                    f8:df:83:e3:72:ef:5f:75:40:85:0e:72:0b:2a:32:
                    06:c2:60:85:94:25:f0:c5:33:be:73:93:23:df:0b:
                    05:75:cf:63:23:bd:61:a6:e3:f6:47:77:d9:c7:ed:
                    bc:5b:8c:c2:2d:cd:f5:e9:3b:da:65:bb:31:33:60:
                    0c:e5:d8:c0:f4:aa:d6:6c:d5:f8:57:73:4e:4d:2c:
                    da:ad:34:24:b7:9b:50:f3:b4:09:d6:79:9f:01:8d:
                    4c:09:9f:08:df:6a:81:9e:5b:36:00:6c:84:90:ff:
                    c0:11:0b:dd:f3:72:99:12:c0:47:50:83:43:f7:de:
                    a4:73:7b:97:c3:e7:6c:f6:e6:47:06:75:92:48:e3:
                    d0:20:72:79:1a:d4:8d:bd:54:0b:4d:d1:8a:e7:46:
                    fc:4b:5f:89:42:41:86:20:59:57:49:ef:e3:11:8e:
                    c8:fa:bc:45:95:17:60:63:3a:7b:e9:cf:75:16:c6:
                    05:4b:c0:f7:bb:91:7c:8f:32:c1:4d:ac:23:7f:03:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E7:1E:F6:F2:9A:E7:9B:6B:06:36:8F:BE:FE:28:64:CA:27:C2:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94EF8CE064AC11F184D2C91ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.14.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:79:e0:8b:9c:ed:4b:20:a8:2b:eb:9f:f9:7f:1f:d1:a2:
         30:ed:02:51:90:56:9a:cc:71:4a:5d:3c:a1:1a:df:70:46:21:
         26:df:97:59:2d:29:bf:45:de:35:34:f6:64:15:50:8d:97:b1:
         56:20:db:7d:f1:92:03:e8:c7:c4:ef:f7:f7:f5:b5:b5:97:5c:
         f3:05:54:91:68:e0:be:5b:18:c8:8e:8b:7c:25:c9:41:09:da:
         95:11:09:ec:e5:96:14:3a:ff:69:f6:5e:df:f7:09:d1:cd:de:
         a8:9b:89:64:83:d2:37:21:4b:9d:bd:e5:4c:a0:88:f0:f0:3c:
         bb:1d:48:d7:e4:22:4a:f8:35:89:91:f2:e2:f0:f1:2f:46:d2:
         08:4d:7d:66:1d:29:55:e2:7d:42:77:f3:f2:6a:b8:f3:79:d6:
         dc:d9:0f:d0:20:2a:a1:fd:e2:34:12:d1:bc:c9:82:7f:5f:56:
         3a:2b:4a:aa:e0:ec:e2:b4:79:61:00:6b:ab:2f:c8:5e:84:89:
         a3:5a:7e:92:89:04:23:19:8a:11:19:9b:67:a6:c7:02:bb:75:
         2d:63:a5:ff:23:b5:d2:05:68:47:3e:fd:ed:23:84:90:ab:86:
         c0:35:d1:cf:1f:e6:40:b0:b1:0b:11:ff:41:f8:2d:54:d4:ec:
         27:fa:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:42 2026 by rpki-client