Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD103A68340911F19AB3F1DDCE1D38B0.roa
File:                     BD103A68340911F19AB3F1DDCE1D38B0.roa (raw, json)
Hash identifier:          GDhFHJR0kOyHjV5MxkQ1hxiKWnytPnhhQiokqfhT9dQ=
Subject key identifier:   DB:D1:67:C4:2B:7A:57:6B:63:CD:F3:FC:F1:0E:CD:8C:B8:CB:02:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD103A68340911F19AB3F1DDCE1D38B0.roa
Signing time:             Thu 09 Apr 2026 11:46:26 +0000
ROA not before:           Thu 09 Apr 2026 11:46:20 +0000
ROA not after:            Sun 19 Apr 2026 11:46:20 +0000
asID:                     401783
IP address blocks:        45.197.3.0/24 maxlen: 24
                          45.197.8.0/24 maxlen: 24
                          45.197.10.0/24 maxlen: 24
                          45.197.11.0/24 maxlen: 24
                          45.197.24.0/24 maxlen: 24
                          45.198.5.0/24 maxlen: 24
                          45.198.16.0/24 maxlen: 24
                          45.198.17.0/24 maxlen: 24
                          45.198.18.0/24 maxlen: 24
                          45.201.35.0/24 maxlen: 24
                          45.201.41.0/24 maxlen: 24
                          45.201.42.0/24 maxlen: 24
                          45.201.48.0/24 maxlen: 24
                          45.201.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109395 (0x1ab53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 11:46:20 2026 GMT
            Not After : Apr 19 11:46:20 2026 GMT
        Subject: CN=69d79192-f1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:95:ae:bd:9a:d9:fb:dc:2f:cd:8f:2e:d0:
                    f6:90:bd:95:f0:7e:6e:d7:b4:a8:d0:32:fd:da:d1:
                    e1:e1:46:00:c2:0f:1d:cd:32:8f:d0:7f:b6:e2:f6:
                    55:93:56:c0:bf:39:f4:a6:81:b4:40:89:42:c8:77:
                    60:99:19:ef:98:6f:11:89:22:10:72:6b:aa:81:af:
                    96:f0:5e:fe:56:c0:88:f4:a7:d2:ba:83:21:5e:6d:
                    4d:e6:2b:d0:83:12:05:76:63:4b:cd:8c:e0:0a:8d:
                    d4:99:81:1a:cd:1a:90:2f:2b:d7:16:4d:37:82:e7:
                    b7:2e:19:a7:46:59:81:21:e4:c3:fb:87:7b:5f:9e:
                    d4:0b:77:3b:6a:48:b9:af:67:e7:6a:a0:7d:dd:2d:
                    22:e5:8c:aa:ca:52:69:8a:c0:85:60:11:2e:f2:0e:
                    f5:d9:f7:4c:80:1a:98:f8:bd:cf:cb:6a:69:8a:e5:
                    d1:2c:5c:e4:21:30:66:6e:84:75:91:6d:9f:32:c1:
                    63:c8:9e:2a:58:1c:49:89:b0:bd:ec:27:fc:92:58:
                    62:73:68:4c:a8:83:a6:eb:c4:c4:39:be:ab:ef:26:
                    b1:7e:c3:6c:92:22:14:fa:b6:12:b8:52:0a:a9:a4:
                    2d:64:7c:7f:08:1a:09:a8:27:90:e0:13:73:3f:f6:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:67:C4:2B:7A:57:6B:63:CD:F3:FC:F1:0E:CD:8C:B8:CB:02:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD103A68340911F19AB3F1DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.3.0/24
                  45.197.8.0/24
                  45.197.10.0/23
                  45.197.24.0/24
                  45.198.5.0/24
                  45.198.16.0-45.198.18.255
                  45.201.35.0/24
                  45.201.41.0-45.201.42.255
                  45.201.48.0/24
                  45.201.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:71:0b:ec:05:2b:f9:56:1f:0f:9d:06:c9:20:c8:ce:90:
         0d:08:3f:13:0e:62:bf:35:ac:57:08:62:ba:18:78:d8:04:6a:
         83:e3:b7:f8:cb:8e:5c:93:0c:0e:89:79:03:74:61:42:7b:6b:
         89:bc:de:ea:ec:09:0a:48:7e:cd:15:de:82:19:8f:a3:76:35:
         06:45:38:a6:d9:00:8e:7c:7d:cb:5f:72:51:d3:4b:c7:e6:1b:
         01:7d:76:d3:e6:14:fc:07:ff:97:9e:ee:5a:4c:77:9f:0d:1f:
         a4:fb:76:47:6a:48:23:51:b2:68:85:ed:a3:e7:cc:08:d0:9c:
         9e:77:0c:56:78:08:d6:1a:18:04:1b:64:3f:59:2d:71:eb:b0:
         b7:5f:23:76:b0:83:96:f7:71:39:4f:9c:20:ca:da:f3:55:78:
         c6:36:87:86:d4:91:1f:85:ec:f0:d0:ae:a7:e4:4d:51:7d:e1:
         37:6b:e5:c4:36:bd:65:b1:88:b8:9a:f7:12:90:92:25:23:f3:
         c6:ef:95:67:b0:76:c1:36:04:45:c9:c8:cb:2d:dd:12:95:77:
         1d:bd:aa:6f:71:d1:72:21:e5:80:4d:e2:ff:24:5a:72:72:f2:
         73:21:8d:23:5d:19:e5:13:e8:b6:a2:a7:6c:dc:8b:45:27:77:
         a2:b4:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:27 2026 by rpki-client