Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B095C78EB37211F0918779B2DAE4EC9C.roa
File:                     B095C78EB37211F0918779B2DAE4EC9C.roa (raw, json)
Hash identifier:          WTxP1UUfv3tULuAjYA5hCvYnf99UxrmqqUSclegXczI=
Subject key identifier:   AB:91:C6:C6:C6:89:6C:43:D4:17:40:FF:7C:C5:CA:4A:7B:4E:B6:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018326
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B095C78EB37211F0918779B2DAE4EC9C.roa
Signing time:             Mon 27 Oct 2025 20:22:42 +0000
ROA not before:           Mon 27 Oct 2025 20:22:37 +0000
ROA not after:            Tue 25 Nov 2025 20:22:37 +0000
asID:                     395793
IP address blocks:        45.192.230.0/24 maxlen: 24
                          45.192.231.0/24 maxlen: 24
                          45.201.16.0/21 maxlen: 24
                          45.201.16.0/24 maxlen: 24
                          45.201.17.0/24 maxlen: 24
                          45.201.18.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99110 (0x18326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 20:22:37 2025 GMT
            Not After : Nov 25 20:22:37 2025 GMT
        Subject: CN=68ffd492-3462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:a1:3c:78:dc:e0:0a:34:ff:6d:1c:a7:7a:
                    1a:7b:85:00:6c:1b:50:17:46:04:58:3e:75:e4:aa:
                    f8:63:94:19:6e:cd:ba:bb:fa:52:80:7a:d4:24:de:
                    3e:4b:2e:ba:93:d6:a6:42:3e:e8:90:b4:f8:66:26:
                    68:91:10:5c:4d:5a:03:21:5b:a1:b5:1d:15:e4:41:
                    20:aa:09:8e:a1:8f:ad:fd:02:56:b7:4b:59:a6:5a:
                    c6:56:4f:55:5f:89:54:57:37:aa:5f:90:9e:38:49:
                    1b:1b:ec:88:2b:33:fe:1f:89:51:a5:06:50:e5:a6:
                    0f:07:5a:5d:dd:35:52:be:0a:d8:2f:0c:0e:61:c9:
                    07:12:5b:83:d2:15:39:46:85:60:d3:b1:e2:98:ef:
                    77:98:40:44:80:ae:cb:52:07:34:86:15:c4:6d:37:
                    3a:cf:04:78:d8:ba:1f:f9:34:54:3b:cc:cb:dc:c0:
                    1b:c9:d0:c8:27:7c:e2:17:59:62:4e:71:26:1b:61:
                    8c:bd:e2:37:d6:ee:9b:8e:46:55:e2:fa:51:87:ac:
                    5e:7d:63:b2:e1:1d:9e:f6:81:a2:02:63:6b:63:a3:
                    1f:e0:bf:36:1e:ab:f9:59:1f:57:c2:60:ff:f2:b4:
                    d8:d3:78:3e:a2:86:f1:b5:e3:a2:07:b8:bd:aa:f9:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:C6:C6:C6:89:6C:43:D4:17:40:FF:7C:C5:CA:4A:7B:4E:B6:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B095C78EB37211F0918779B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.230.0/23
                  45.201.16.0-45.201.26.255

    Signature Algorithm: sha256WithRSAEncryption
         68:85:bb:e4:79:4b:c2:46:c9:ca:3d:ac:40:11:fc:35:ac:5d:
         4a:ba:74:9b:3a:65:b2:45:1b:00:ec:62:6d:eb:ce:fb:15:cd:
         3d:5c:b4:57:4e:d1:61:23:cf:0f:94:b8:bc:ed:be:b1:a3:08:
         9c:51:15:5a:ca:d0:80:ba:56:be:6c:9d:c6:ff:73:10:a7:4e:
         6c:03:55:5b:0b:c2:84:1c:89:48:62:40:25:4c:ce:4e:09:54:
         fc:dc:8b:7f:5c:ce:82:c9:73:13:60:b3:2a:e4:61:5c:c0:21:
         50:8b:89:e1:6f:34:27:98:66:77:73:a4:95:5e:f8:c3:18:25:
         4f:7a:36:b9:7a:e8:71:2c:d4:06:6b:c2:42:40:43:ca:76:9b:
         06:e1:1f:39:50:2f:f4:90:44:f4:a9:97:3c:d7:73:68:46:ae:
         25:6d:a9:ed:aa:8d:a1:5e:a7:59:13:97:9e:71:07:90:fa:92:
         6e:81:43:99:a6:89:b4:a4:38:60:e3:d4:ff:6d:89:68:1e:11:
         46:f9:3e:79:98:11:54:9d:b0:a9:e1:6a:9c:f4:ec:45:7e:5e:
         cd:67:9b:2a:28:c6:2d:34:a2:3b:5a:c9:ee:31:fa:ac:91:8f:
         d9:eb:24:f0:f6:9e:c0:b7:9f:b3:7d:35:84:c5:6d:ef:ff:eb:
         b2:e9:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:29 2025 by rpki-client