Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCCD2B80F1211F1810589BBDAE4EC9C.roa
File:                     ACCCD2B80F1211F1810589BBDAE4EC9C.roa (raw, json)
Hash identifier:          etL8/Gd0n7vgVANmCEm5h2f0PT5vnVLeYAR1PyT6Fsg=
Subject key identifier:   7D:A2:7C:5D:14:46:EF:BA:1B:37:D4:D5:64:4E:B6:41:5E:E5:D9:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019F6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCCD2B80F1211F1810589BBDAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 10:47:11 +0000
ROA not before:           Sat 21 Feb 2026 10:47:07 +0000
ROA not after:            Sat 28 Mar 2026 10:47:07 +0000
asID:                     44559
IP address blocks:        45.199.211.0/24 maxlen: 24
                          45.199.212.0/24 maxlen: 24
                          45.199.213.0/24 maxlen: 24
                          45.199.214.0/24 maxlen: 24
                          45.199.215.0/24 maxlen: 24
                          45.199.216.0/24 maxlen: 24
                          45.199.217.0/24 maxlen: 24
                          45.199.218.0/24 maxlen: 24
                          45.199.219.0/24 maxlen: 24
                          45.199.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106351 (0x19f6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 21 10:47:07 2026 GMT
            Not After : Mar 28 10:47:07 2026 GMT
        Subject: CN=69998d2f-2390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:24:e4:eb:01:45:64:af:12:af:d6:0a:78:
                    cd:b7:e8:75:87:c6:f2:e7:c2:57:54:b0:29:89:b1:
                    17:af:7b:68:a5:dd:b1:93:c0:05:bb:05:ca:f9:b2:
                    5c:86:fc:65:6f:4c:8a:c6:aa:0f:60:a8:7c:34:26:
                    cb:92:39:4c:c5:45:f5:8f:8e:17:5a:72:0f:2e:7e:
                    74:98:fe:9a:04:92:4a:f9:16:6c:7c:5c:5e:79:8f:
                    15:47:02:c4:2e:5b:21:36:d0:58:5d:1d:61:a7:f3:
                    25:80:d1:4f:59:79:19:b9:b2:bf:55:b9:54:14:7a:
                    92:a0:b5:23:d9:d0:0b:44:7b:1a:b4:30:5e:01:8d:
                    c0:a6:d8:df:a9:86:90:3f:bf:b5:e2:7f:38:e8:8b:
                    ce:de:cb:c6:8c:8b:49:1a:07:a7:92:81:36:1a:d6:
                    bb:b1:a1:06:39:e9:61:67:29:32:03:47:6f:9d:aa:
                    2b:8e:b7:b2:29:93:90:65:d0:03:a1:e5:3e:36:ef:
                    28:0b:4a:61:13:a9:24:04:8f:d5:bc:9c:1b:fb:ff:
                    a3:db:14:9f:34:d1:91:93:d9:c3:8d:14:ad:5d:0a:
                    18:02:bd:5b:8a:f0:5a:4d:84:c4:33:cc:2c:90:db:
                    9b:b0:a6:b0:25:bb:23:93:6b:8e:09:60:17:e9:8c:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A2:7C:5D:14:46:EF:BA:1B:37:D4:D5:64:4E:B6:41:5E:E5:D9:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCCD2B80F1211F1810589BBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.211.0-45.199.220.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:7c:af:e0:ef:2a:eb:13:ea:28:c8:37:d3:b4:c3:b3:ad:10:
         4b:08:fd:aa:d2:ab:73:29:af:d0:24:fd:ae:dd:d9:68:c8:28:
         da:9a:27:a9:60:a5:af:4a:b2:84:b3:9e:df:55:66:c7:bd:9b:
         6c:f3:cb:df:38:14:2b:ea:1c:4a:07:c2:fa:30:9d:77:9b:49:
         1b:56:10:d7:c6:18:52:b0:88:25:0a:e2:cd:ee:12:58:53:7c:
         de:a8:67:62:b2:1a:51:34:b5:31:3a:06:0f:1d:a0:3d:a6:e8:
         10:11:14:75:a7:14:6b:e5:93:02:c0:f5:3e:92:4b:33:02:94:
         b5:ce:f4:f0:e5:26:be:3c:0e:a2:f7:e8:57:1f:da:93:8d:11:
         61:5d:fa:6e:f6:7e:69:e8:d7:82:66:97:0c:c9:67:8a:11:83:
         fc:7d:66:11:3c:3b:69:7d:8d:d3:ab:8c:87:9b:17:38:31:26:
         bb:51:9d:c2:92:53:12:b9:86:df:f0:17:22:60:be:56:68:4f:
         91:f4:79:d4:e9:fa:af:1c:77:89:bf:c5:fe:b1:4b:8c:1c:7f:
         de:c8:f8:92:92:c9:1b:c0:ab:52:18:29:59:cb:b3:c2:de:15:
         10:02:86:ea:62:9e:4e:c0:05:94:3d:6d:61:99:f1:8a:9f:c4:
         d7:75:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:38 2026 by rpki-client