Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4313674340111F1B25CA3ADCE1D38B0.roa
File:                     C4313674340111F1B25CA3ADCE1D38B0.roa (raw, json)
Hash identifier:          9d26+rgZyuVJ7rUKRpsmUXHRa3Qdy4KKSrYCEY4a24Q=
Subject key identifier:   6C:7B:D9:1C:85:B8:26:22:40:6A:7A:9E:95:FF:BD:24:AF:86:82:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4313674340111F1B25CA3ADCE1D38B0.roa
Signing time:             Thu 09 Apr 2026 10:49:22 +0000
ROA not before:           Thu 09 Apr 2026 10:49:17 +0000
ROA not after:            Sat 23 May 2026 10:49:17 +0000
asID:                     214025
IP address blocks:        45.202.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109382 (0x1ab46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 10:49:17 2026 GMT
            Not After : May 23 10:49:17 2026 GMT
        Subject: CN=69d78432-6e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:90:41:65:14:4b:a4:08:28:31:9d:93:db:
                    ad:0e:9a:77:e5:76:6a:04:10:e0:30:47:fb:f6:2b:
                    22:06:95:fd:ce:01:a0:01:14:5d:fe:19:ee:51:cf:
                    cf:49:64:c5:b7:13:19:0c:3f:1d:2f:b5:d8:62:b6:
                    72:ee:24:a5:f2:9c:f0:a3:0c:67:0f:ba:7b:96:6b:
                    41:db:01:1f:13:09:15:66:8d:e6:7b:01:a8:90:27:
                    1c:d6:a5:f0:22:4a:51:34:56:6a:c8:86:8e:29:5a:
                    89:a8:4b:41:84:8a:9c:9c:b1:b3:23:8d:8f:90:4e:
                    39:e5:9b:39:7b:b3:93:40:73:ab:1c:5d:dc:84:8f:
                    64:27:24:8b:63:76:c6:7a:a7:d5:ab:a5:b0:2e:67:
                    79:f3:09:54:00:3a:e4:75:7b:a9:ae:af:65:25:2c:
                    f3:71:ac:94:cd:00:a9:2f:a5:84:40:1b:d9:06:0a:
                    53:97:53:c5:cd:da:5f:e1:3f:82:ea:55:45:6a:bf:
                    fc:61:f2:85:23:12:21:27:9e:c1:23:f2:3d:eb:30:
                    81:10:e5:11:de:de:98:b7:fb:4e:57:e2:c4:cf:04:
                    13:e2:bc:51:bd:1f:2f:b4:ee:84:e4:b0:b5:3f:dc:
                    b8:0d:c8:58:28:0b:0e:c3:7f:5f:41:a5:96:c7:b5:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:D9:1C:85:B8:26:22:40:6A:7A:9E:95:FF:BD:24:AF:86:82:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4313674340111F1B25CA3ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:5e:40:e6:aa:c9:4c:f6:90:d6:ac:b4:4f:f6:36:79:df:
         9c:49:98:72:b1:3e:61:3a:8d:c4:e0:fe:16:ad:99:43:6a:25:
         50:99:51:41:61:0e:23:bb:d6:3f:4f:22:77:3b:d5:cd:9f:e7:
         4e:32:b6:bb:7a:b5:c6:fd:d8:89:4b:67:ca:c6:1a:7a:7f:8a:
         1e:a3:e4:35:31:d0:e9:5e:72:59:4e:45:6b:d4:6a:7f:a5:fc:
         07:67:6d:d7:84:18:a7:c4:f9:75:69:04:10:74:36:9b:7f:9b:
         bf:97:25:04:2e:65:bb:5e:5d:a8:82:25:8a:22:71:56:54:ef:
         8d:62:af:a3:e3:e7:25:f9:b3:6a:7e:0d:d0:e4:04:10:5d:bb:
         a3:4c:4e:10:07:16:6f:a9:03:06:14:aa:01:57:51:44:d3:d3:
         59:71:28:f0:25:48:c3:cb:75:77:82:23:03:da:44:a0:4f:c7:
         e8:4b:4a:95:f3:7f:39:3b:2d:61:20:bc:60:13:64:84:04:bb:
         e8:67:9b:f2:2a:c7:89:97:23:0e:cd:25:94:cf:a8:af:97:ab:
         84:cb:9b:0b:53:2b:60:c6:c2:36:a3:f9:ef:cd:29:e9:c5:e0:
         2e:4d:b6:ff:fa:2b:65:c2:1a:ee:9c:0b:19:2c:6b:e2:0d:ae:
         f9:5a:cc:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAatGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA5MTA0OTE3WhcNMjYwNTIzMTA0OTE3WjAYMRYw
FAYDVQQDEw02OWQ3ODQzMi02ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzvqQQWUUS6QIKDGdk9utDpp35XZqBBDgMEf79isiBpX9zgGgARRd/hnu
Uc/PSWTFtxMZDD8dL7XYYrZy7iSl8pzwowxnD7p7lmtB2wEfEwkVZo3mewGokCcc
1qXwIkpRNFZqyIaOKVqJqEtBhIqcnLGzI42PkE455Zs5e7OTQHOrHF3chI9kJySL
Y3bGeqfVq6WwLmd58wlUADrkdXuprq9lJSzzcayUzQCpL6WEQBvZBgpTl1PFzdpf
4T+C6lVFar/8YfKFIxIhJ57BI/I96zCBEOUR3t6Yt/tOV+LEzwQT4rxRvR8vtO6E
5LC1P9y4DchYKAsOw39fQaWWx7XyKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGx7
2RyFuCYiQGp6npX/vSSvhoKUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNDMxMzY3NDM0MDExMUYxQjI1Q0EzQURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpsMA0GCSqGSIb3DQEBCwUA
A4IBAQBT4l5A5qrJTPaQ1qy0T/Y2ed+cSZhysT5hOo3E4P4WrZlDaiVQmVFBYQ4j
u9Y/TyJ3O9XNn+dOMra7erXG/diJS2fKxhp6f4oeo+Q1MdDpXnJZTkVr1Gp/pfwH
Z23XhBinxPl1aQQQdDabf5u/lyUELmW7Xl2ogiWKInFWVO+NYq+j4+cl+bNqfg3Q
5AQQXbujTE4QBxZvqQMGFKoBV1FE09NZcSjwJUjDy3V3giMD2kSgT8foS0qV8385
Oy1hILxgE2SEBLvoZ5vyKseJlyMOzSWUz6ivl6uEy5sLUytgxsI2o/nvzSnpxeAu
Tbb/+itlwhrunAsZLGviDa75WszA
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:45 2026 by rpki-client