Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF50B864601111F198754D17CF1D38B0.roa
File:                     BF50B864601111F198754D17CF1D38B0.roa (raw, json)
Hash identifier:          I3UYMqduZn+ahOKAxs4RB1TMiXPOfDrlrs6I7rSnH0I=
Subject key identifier:   63:4A:BF:DE:25:6C:9A:94:D8:4B:24:4E:6E:65:00:90:5C:62:91:BE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF50B864601111F198754D17CF1D38B0.roa
Signing time:             Thu 04 Jun 2026 12:34:37 +0000
ROA not before:           Thu 04 Jun 2026 12:34:32 +0000
ROA not after:            Fri 10 Jul 2026 12:34:32 +0000
asID:                     63139
IP address blocks:        45.197.98.0/24 maxlen: 24
                          45.197.99.0/24 maxlen: 24
                          45.197.100.0/24 maxlen: 24
                          45.197.101.0/24 maxlen: 24
                          45.197.102.0/24 maxlen: 24
                          45.197.115.0/24 maxlen: 24
                          45.197.116.0/24 maxlen: 24
                          45.197.117.0/24 maxlen: 24
                          45.197.118.0/24 maxlen: 24
                          45.197.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113614 (0x1bbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 12:34:32 2026 GMT
            Not After : Jul 10 12:34:32 2026 GMT
        Subject: CN=6a2170dd-09ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:07:a3:a6:c5:15:9e:a2:ec:20:a4:86:4b:
                    8a:00:3c:06:f3:2b:e0:d1:12:1c:a9:65:62:9e:2a:
                    f7:02:79:59:89:2d:54:ab:97:76:3b:cc:46:ee:15:
                    0d:03:05:a1:62:ac:70:cb:3b:3e:0f:ca:f6:e1:b8:
                    7f:08:9d:cc:3b:5e:86:c8:94:c7:23:8e:21:6a:0d:
                    10:ed:cd:78:27:db:b6:49:67:36:9c:df:58:e4:8c:
                    44:ae:ef:54:2a:63:1c:6d:49:30:d8:77:a7:12:35:
                    6f:be:b4:c8:f8:53:4e:ee:7e:e9:86:c4:2f:cc:0e:
                    cb:e7:c9:50:84:a8:d4:1e:09:e0:f8:72:68:ed:91:
                    76:25:fe:be:82:49:78:89:aa:7e:83:d5:a4:ef:99:
                    3c:e9:f5:d3:ab:91:61:41:5f:0a:3d:c3:b5:1a:b1:
                    df:6b:85:2c:7e:4e:ed:d9:db:5f:31:a4:c8:7b:80:
                    f2:5b:2e:c8:d8:2f:80:58:b2:18:7c:3c:68:38:53:
                    73:91:f3:b3:0c:55:84:41:95:ec:de:76:66:16:d3:
                    8b:04:73:46:8e:a3:2a:37:ff:1e:2b:4c:b3:f5:86:
                    6d:6c:7f:1b:b5:88:9e:df:75:e0:08:3c:3d:24:8e:
                    b4:7d:c0:97:57:0a:c5:a3:f0:1e:ec:6b:59:48:f3:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:BF:DE:25:6C:9A:94:D8:4B:24:4E:6E:65:00:90:5C:62:91:BE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF50B864601111F198754D17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.98.0-45.197.102.255
                  45.197.115.0-45.197.118.255
                  45.197.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:f2:1d:7a:f8:ba:ca:51:d3:ec:7c:0e:49:47:53:7d:27:
         d6:26:75:5e:d0:34:d0:dc:78:62:77:0c:24:77:58:4e:eb:f0:
         8c:b4:9c:0f:57:21:bb:a8:87:eb:71:76:be:a6:f0:6a:27:00:
         3b:1f:7b:21:b5:c8:fa:59:dd:30:99:e4:2c:18:c8:16:0c:a6:
         ae:8a:15:be:21:60:2c:63:86:f3:1c:e6:15:fc:c3:8c:c8:f3:
         25:e6:ae:d4:4d:9a:2b:c7:1a:d6:aa:55:a6:9c:33:0e:00:90:
         17:28:19:7a:1c:0a:05:f2:b6:a4:e9:41:ff:51:c3:d3:7c:ac:
         09:f0:21:a5:72:f8:14:03:35:2c:95:36:ab:5e:dd:51:53:be:
         5f:78:be:33:d3:73:43:cc:9c:73:1a:7b:b9:17:1c:56:33:34:
         db:b8:82:2e:8a:69:39:46:33:15:b5:85:41:c2:2d:2d:69:10:
         11:26:e1:c9:89:14:8c:e5:51:a9:99:10:06:e6:89:9b:4b:e2:
         05:a1:f0:a8:a2:a1:3f:97:d1:91:73:25:b9:5e:38:4d:63:c9:
         e7:30:04:cc:47:a6:7b:99:be:f2:08:7e:92:a7:55:2d:85:89:
         a3:37:a5:50:d0:e0:0e:07:f3:48:cf:3c:06:26:86:ce:7d:44:
         7d:1b:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:11:49 2026 by rpki-client