Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA3786030CA11F1A63DD981DAE4EC9C.roa
File:                     9AA3786030CA11F1A63DD981DAE4EC9C.roa (raw, json)
Hash identifier:          ACHMqRJAunP1qqcVxlllHxt1z+fR68GRmrdkeoGSQc4=
Subject key identifier:   52:F7:B8:35:F2:B5:E6:FD:7F:92:61:FC:0E:15:7E:DE:37:A2:0F:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AA07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA3786030CA11F1A63DD981DAE4EC9C.roa
Signing time:             Sun 05 Apr 2026 08:36:56 +0000
ROA not before:           Sun 05 Apr 2026 08:36:52 +0000
ROA not after:            Tue 28 Apr 2026 08:36:52 +0000
asID:                     213800
IP address blocks:        45.207.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109063 (0x1aa07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  5 08:36:52 2026 GMT
            Not After : Apr 28 08:36:52 2026 GMT
        Subject: CN=69d21f28-68d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:94:8e:73:0e:31:b9:f5:43:36:ee:3f:84:
                    c7:9f:88:9d:c6:ca:35:0c:6f:87:00:de:f8:7a:c9:
                    96:40:71:b9:2c:65:75:66:7e:6a:0f:e5:9d:7b:9f:
                    6e:e5:51:7d:1f:ce:d1:aa:5c:bf:03:f6:94:4e:1b:
                    89:4d:10:82:22:4a:53:9b:0c:ce:5a:78:5b:e9:5a:
                    a3:c8:c7:b2:5c:af:d5:7a:f5:b5:39:d5:81:47:e1:
                    b6:d2:87:63:7c:04:a1:ac:6e:74:96:73:26:d6:fe:
                    64:0f:ae:3a:7a:67:97:09:65:26:a8:1d:56:6a:39:
                    34:c2:73:a0:d2:6f:e9:8c:ce:a1:e6:ee:51:03:ff:
                    c9:86:48:3b:30:44:27:fb:b2:8e:29:5c:7b:ce:ec:
                    4a:1a:24:88:93:e1:4d:e1:90:52:e5:96:13:47:4e:
                    8e:a4:f1:36:b7:34:f5:08:87:d9:5d:31:db:d4:3c:
                    5c:28:fd:39:c9:5d:ab:3f:40:ae:9c:d1:8a:68:04:
                    dc:20:35:f6:12:06:11:94:b9:74:5c:86:a2:bf:e0:
                    a8:79:19:1e:e4:29:00:0b:cf:29:87:73:b3:6c:cf:
                    e8:ae:38:1e:e1:03:4a:51:bb:ce:a4:44:08:a8:bd:
                    4a:44:4d:66:fe:73:c6:b8:5d:80:71:2f:4b:47:6e:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:B8:35:F2:B5:E6:FD:7F:92:61:FC:0E:15:7E:DE:37:A2:0F:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA3786030CA11F1A63DD981DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:50:92:d7:cf:87:6c:54:11:e4:96:a4:5e:0d:bb:d4:35:
         9b:c2:a2:6b:ba:22:e7:9c:7c:eb:28:0b:d8:68:5c:9e:ba:d8:
         c5:99:72:17:83:a2:9e:0b:5b:71:da:ee:e9:71:a0:b2:fd:74:
         0f:c5:cb:42:54:4e:b2:85:b6:b0:ec:60:8e:42:0b:c4:0a:62:
         56:87:fe:e1:2e:7d:80:85:40:8c:71:38:ef:4e:1c:19:26:a7:
         94:36:57:af:e0:f4:fa:34:8d:96:f1:7e:65:06:e5:ba:e7:44:
         65:c2:64:b7:a8:4f:35:99:2e:35:8a:26:ae:56:2a:fb:0a:57:
         15:b0:24:e3:68:f2:23:68:74:70:94:51:74:5a:b8:dc:95:3e:
         9d:46:7d:6e:01:aa:39:f9:23:e0:5d:f6:6f:a8:0c:5f:ef:83:
         8b:ae:e9:54:8f:63:32:9c:1f:4e:70:e6:38:55:77:25:32:3c:
         05:4d:dc:ae:f7:02:c6:fe:fa:f7:b3:b0:94:ab:d8:ce:45:4e:
         44:d2:31:46:00:9a:9f:91:fe:ed:9b:38:85:16:ce:ee:9a:31:
         f8:8b:4e:2b:e2:6d:16:2d:d9:ca:4b:b6:9f:af:ca:a5:80:8e:
         61:4d:b2:0a:92:4d:42:80:3e:17:d2:d5:37:76:ca:ff:a0:56:
         fc:4f:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:36 2026 by rpki-client