Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA86AE0034F211F18AB0C1C5CE1D38B0.roa
File:                     BA86AE0034F211F18AB0C1C5CE1D38B0.roa (raw, json)
Hash identifier:          EDHUak8bddeIe77HBEIxHKO0LOdq7P4pvJ7NaUS4Ukk=
Subject key identifier:   D3:26:FA:3C:2F:2A:B8:86:A1:39:1E:F8:7F:E9:4E:F5:9B:5A:C6:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01ABCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA86AE0034F211F18AB0C1C5CE1D38B0.roa
Signing time:             Fri 10 Apr 2026 15:34:14 +0000
ROA not before:           Fri 10 Apr 2026 15:34:09 +0000
ROA not after:            Sat 10 Jul 2027 15:34:09 +0000
asID:                     328608
IP address blocks:        45.205.231.0/24 maxlen: 24
                          45.205.232.0/24 maxlen: 24
                          45.205.233.0/24 maxlen: 24
                          45.205.234.0/24 maxlen: 24
                          45.205.235.0/24 maxlen: 24
                          45.205.236.0/24 maxlen: 24
                          45.205.237.0/24 maxlen: 24
                          45.205.238.0/24 maxlen: 24
                          45.205.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109514 (0x1abca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 10 15:34:09 2026 GMT
            Not After : Jul 10 15:34:09 2027 GMT
        Subject: CN=69d91876-0420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:54:b3:f1:8b:33:f3:47:01:fc:93:14:15:
                    39:a6:95:ba:0c:4a:36:82:82:1e:90:db:80:ec:ca:
                    c2:51:ca:d5:16:ba:70:9b:0a:67:46:c3:8c:7a:3f:
                    27:23:16:dd:d3:40:71:a2:5b:2f:b5:97:49:83:04:
                    5b:14:7b:99:29:cf:9d:8c:17:1a:c2:4f:8c:db:e7:
                    b5:99:8d:cd:6a:dd:d1:87:22:6f:a3:22:c1:bf:e5:
                    a4:43:d1:38:56:dc:71:fc:2d:48:a5:6d:67:cd:1b:
                    8d:dc:8a:a0:37:9e:19:27:bc:86:18:0f:a1:52:5f:
                    26:77:fd:b0:f8:b6:f6:b8:03:30:bf:ca:1c:5d:cd:
                    6d:56:8b:2b:a4:c6:45:1e:b0:bf:3e:16:e8:cd:f9:
                    18:89:d9:54:31:44:06:72:cb:b5:e1:11:58:9b:48:
                    65:d5:df:1b:59:27:6f:18:32:59:fa:59:4f:32:42:
                    9c:32:6d:86:02:b0:3d:fd:c4:39:6d:97:71:74:f5:
                    0d:6c:08:e5:c8:37:b4:62:f6:76:6f:e3:be:60:c4:
                    bf:f5:39:44:59:16:4e:33:1f:28:e9:39:55:8b:9f:
                    4e:be:2a:1d:5c:49:28:85:9b:82:46:7b:8e:d1:d2:
                    3e:b5:f7:bc:e2:e3:22:fb:28:5a:35:38:c8:c7:ea:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:26:FA:3C:2F:2A:B8:86:A1:39:1E:F8:7F:E9:4E:F5:9B:5A:C6:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA86AE0034F211F18AB0C1C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.231.0-45.205.239.255

    Signature Algorithm: sha256WithRSAEncryption
         b5:9a:c9:f3:8f:d1:ed:e4:a6:ce:56:91:a0:56:38:28:e6:81:
         0a:9a:a3:a0:7e:54:41:89:28:02:dc:e6:a7:23:d7:7a:86:fc:
         ad:f2:11:13:8c:73:9b:ad:78:5b:02:b0:b7:30:ee:2b:2f:02:
         0d:74:e2:21:ed:f4:9b:b4:91:8c:2e:a9:ac:9b:68:98:48:65:
         35:ef:22:26:de:41:8f:73:93:65:c0:1b:4e:dd:a5:e3:23:00:
         21:88:3c:33:55:a5:ff:88:09:c6:6b:5b:79:29:cf:3e:a8:a2:
         a3:dc:93:d0:42:e3:03:3b:e9:db:8d:6f:8a:76:25:85:81:51:
         46:db:67:77:4e:82:b7:a7:17:3a:0a:ff:82:70:4b:f6:89:7c:
         ef:54:0f:88:7c:46:87:be:ae:8d:b7:0b:e0:09:40:33:c3:d4:
         85:20:f2:49:67:7c:5a:6c:80:66:93:b6:88:53:a6:60:eb:4b:
         2e:fa:cd:61:01:91:97:0a:21:6a:1b:c7:90:da:0e:fe:82:54:
         ff:2c:e4:5e:b3:43:12:bf:48:27:6c:6b:ec:b9:62:bd:0f:ce:
         92:65:9c:25:b5:23:5d:ee:44:95:cd:65:54:4c:3b:73:6d:88:
         9e:8a:da:05:a5:fc:bc:bd:aa:31:9b:47:b8:96:1a:08:be:ee:
         44:e7:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:20 2026 by rpki-client