Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3369D26109111F19FEB29EBDAE4EC9C.roa
File:                     A3369D26109111F19FEB29EBDAE4EC9C.roa (raw, json)
Hash identifier:          Oij/VUJfzGBOgAeYj8L7/P3GBOv7k3cBXhSefBMHX4M=
Subject key identifier:   E9:AC:78:20:9E:AB:3F:D1:BC:E8:ED:CE:DD:BA:E7:C6:60:68:D5:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019FEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3369D26109111F19FEB29EBDAE4EC9C.roa
Signing time:             Mon 23 Feb 2026 08:28:32 +0000
ROA not before:           Mon 23 Feb 2026 08:28:28 +0000
ROA not after:            Mon 30 Mar 2026 08:28:28 +0000
asID:                     62468
IP address blocks:        45.204.201.0/24 maxlen: 24
                          45.204.202.0/24 maxlen: 24
                          45.204.203.0/24 maxlen: 24
                          45.204.204.0/24 maxlen: 24
                          45.204.205.0/24 maxlen: 24
                          45.204.206.0/24 maxlen: 24
                          45.204.207.0/24 maxlen: 24
                          45.204.221.0/24 maxlen: 24
                          45.204.222.0/24 maxlen: 24
                          45.204.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106476 (0x19fec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 23 08:28:28 2026 GMT
            Not After : Mar 30 08:28:28 2026 GMT
        Subject: CN=699c0fb0-c3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:89:1d:99:7c:b3:52:d3:2a:47:57:00:8f:
                    2f:4e:0e:a1:75:bd:d2:85:ad:49:26:81:a5:60:db:
                    81:06:af:a4:a5:24:2a:c7:30:a5:28:60:c6:dd:46:
                    78:e6:a0:5e:5b:9a:51:04:bd:b9:35:3b:63:30:32:
                    5e:42:ed:01:3b:ef:3d:90:85:ea:9c:88:34:4c:a8:
                    8d:f1:94:a8:20:44:87:e5:40:35:10:90:7a:d5:3a:
                    18:1e:4e:20:3e:85:50:59:d2:d4:f3:b7:0a:39:27:
                    41:47:02:01:f2:3b:e9:e0:a9:52:28:05:a5:05:fc:
                    02:55:1b:4b:d0:27:5e:8b:f9:7a:f8:4a:80:a2:84:
                    d5:a9:53:fc:2d:d1:2d:36:99:01:86:4d:2b:f8:9d:
                    39:ab:19:09:c6:7a:31:3d:12:37:3c:69:0f:a6:5c:
                    a1:46:cf:d8:62:a0:7d:5f:7c:75:c7:97:5b:13:24:
                    79:92:cc:70:8f:ec:36:f2:0c:07:7f:38:4e:fb:17:
                    b3:c3:6e:9f:a2:8a:80:89:47:fb:bb:94:1c:17:2d:
                    3d:49:b8:ae:3c:3e:5a:55:dc:24:c9:2d:0f:ea:bb:
                    f5:33:04:a8:d4:6f:2a:8a:5b:7b:f4:2b:b0:ff:30:
                    67:d2:62:bb:98:ea:23:fc:36:49:01:e6:b3:87:4d:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:78:20:9E:AB:3F:D1:BC:E8:ED:CE:DD:BA:E7:C6:60:68:D5:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3369D26109111F19FEB29EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.201.0-45.204.207.255
                  45.204.221.0-45.204.223.255

    Signature Algorithm: sha256WithRSAEncryption
         b6:1a:30:c9:05:79:7c:91:57:92:0d:7f:ee:7a:e9:35:31:0f:
         e0:b2:c7:9c:0c:99:ad:66:eb:e9:c2:02:5e:4a:a5:a8:21:03:
         18:c8:c6:16:d2:f9:c5:43:ff:c2:d0:8d:14:b1:72:91:52:39:
         d7:bf:7e:2b:18:63:0e:ff:e0:94:62:db:d9:99:4e:84:75:7b:
         f1:de:2b:35:06:b5:f1:93:7a:36:b9:53:68:93:b0:b9:9c:4a:
         26:36:4f:df:7e:43:34:57:46:96:8d:81:c1:c3:72:48:02:05:
         b3:89:2d:89:f2:0d:00:22:8a:c5:e6:5b:7d:8c:61:8c:16:6e:
         b2:74:d9:85:14:a5:eb:e6:91:91:2b:7f:79:42:49:8d:ae:d9:
         54:a0:71:eb:8c:8e:ad:36:39:f7:7e:52:14:64:98:41:85:46:
         fc:af:5a:83:70:f9:bc:a6:6b:d1:21:95:63:5f:c4:bb:a4:0b:
         c0:a4:b4:8c:8c:ad:3d:c8:be:56:90:3a:64:3f:dc:22:ec:ff:
         de:86:81:b8:34:1d:9c:57:9e:45:07:90:99:66:18:bd:ac:7f:
         2a:f8:cd:6f:9c:b3:f7:e6:cc:f8:bd:f2:64:6e:15:c0:ea:40:
         7f:1b:f1:f2:26:10:45:43:bf:7a:ff:39:6d:c0:d9:bc:56:e1:
         5b:05:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:59 2026 by rpki-client