Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6A9AF0E071F11F1A4291ADEDAE4EC9C.roa
File:                     B6A9AF0E071F11F1A4291ADEDAE4EC9C.roa (raw, json)
Hash identifier:          urXfzYCQcWAl52UpsK2BNpH6FOyEe7W3aq57RSsoHWU=
Subject key identifier:   16:A9:B3:16:61:F9:82:63:0A:48:F5:FC:0E:27:50:A9:F6:C3:00:32
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019CE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6A9AF0E071F11F1A4291ADEDAE4EC9C.roa
Signing time:             Wed 11 Feb 2026 08:00:22 +0000
ROA not before:           Wed 11 Feb 2026 08:00:17 +0000
ROA not after:            Wed 18 Mar 2026 08:00:17 +0000
asID:                     215925
IP address blocks:        45.194.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105705 (0x19ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 11 08:00:17 2026 GMT
            Not After : Mar 18 08:00:17 2026 GMT
        Subject: CN=698c3716-b747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:a5:11:61:00:40:6c:f0:92:7b:1d:ea:8c:
                    42:2e:54:07:b1:61:60:0a:4f:4d:a4:e5:b9:10:fd:
                    79:6b:79:02:b5:c0:5a:48:cf:08:08:72:bd:5c:c3:
                    d9:d5:da:9d:8b:5f:14:1e:45:a6:f0:1b:30:07:9a:
                    69:fb:e0:47:97:d2:fe:44:26:21:51:19:e3:27:16:
                    b2:8e:16:32:95:5e:6c:f8:5a:ad:ee:c0:d8:58:8e:
                    de:54:20:c6:72:5e:50:c0:62:6f:d5:b2:31:17:20:
                    40:26:63:5b:ed:28:f8:46:48:60:a3:5c:a4:9e:e9:
                    57:89:a4:a5:94:14:3e:ef:4e:4e:ac:7c:fe:c4:0e:
                    9b:dc:5c:0d:08:6a:a1:b4:ff:ab:55:b4:b8:12:fe:
                    16:9b:bd:a9:50:79:27:38:19:a5:9d:ba:51:fe:86:
                    4a:05:b1:4d:01:61:86:45:71:f4:62:43:35:fc:03:
                    12:06:0c:b4:d7:7d:26:8c:5c:58:01:09:4b:b9:78:
                    d2:98:63:d2:1b:e4:b2:e3:56:ca:91:e7:f2:1b:c8:
                    95:eb:bd:68:4b:2f:9d:a3:1c:dd:74:ed:7f:8c:86:
                    ac:bc:79:99:7a:6c:49:47:9b:2d:d8:61:35:c9:1b:
                    33:33:ca:e2:2f:7c:63:ae:e7:94:94:c3:a2:77:8a:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:B3:16:61:F9:82:63:0A:48:F5:FC:0E:27:50:A9:F6:C3:00:32
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6A9AF0E071F11F1A4291ADEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:1e:86:2f:ce:ee:52:29:cc:54:f2:d4:f7:ca:e6:84:b8:
         42:9e:07:d6:24:31:86:ad:39:c6:53:79:b6:3a:38:6d:ba:96:
         b6:1a:fa:aa:af:00:c9:07:64:72:17:20:7d:b0:68:ff:9c:e6:
         6d:0a:4c:a9:13:12:5a:22:fe:75:9a:aa:1f:80:15:e5:ce:38:
         90:64:ff:56:f7:28:bd:e2:a4:77:5f:e9:17:85:2c:40:95:5a:
         99:e5:46:fd:db:ba:03:94:c2:58:97:54:97:46:74:87:4d:be:
         00:d1:57:9a:f3:d9:c5:8c:ea:2c:37:37:d3:11:e5:01:cb:d7:
         23:30:d7:f7:52:1c:36:c0:c0:e3:11:2e:95:ec:07:3b:5c:e6:
         43:0e:e2:56:43:e1:b7:6d:f1:9f:11:f8:36:d3:99:70:22:91:
         fb:bf:60:d0:b7:7e:fd:38:99:c9:df:12:3b:46:6f:b5:65:34:
         33:ce:bd:67:61:16:54:4e:21:47:5d:9e:4c:85:8d:54:a4:d4:
         a8:3e:7b:67:8c:b1:6b:11:1c:01:d0:a3:7b:20:e0:31:fc:c5:
         7a:93:12:74:6f:ed:e7:a9:d4:7c:96:c3:78:d3:18:c1:ee:f6:
         17:36:32:8b:7b:bf:51:08:65:a7:39:b7:94:c5:ab:9a:4c:6f:
         e5:bf:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:34 2026 by rpki-client