Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59A09CC356311F19A464C03CF1D38B0.roa
File:                     E59A09CC356311F19A464C03CF1D38B0.roa (raw, json)
Hash identifier:          pGcPbTQnJQFn0rlvJAvU5qLuE4VoD+h5aCjxkFfAZw8=
Subject key identifier:   92:80:86:FB:D4:A5:35:F8:5D:0A:D9:D7:3E:9B:1D:69:61:56:3B:69
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01ABE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59A09CC356311F19A464C03CF1D38B0.roa
Signing time:             Sat 11 Apr 2026 05:04:20 +0000
ROA not before:           Sat 11 Apr 2026 05:04:15 +0000
ROA not after:            Sun 17 May 2026 05:04:15 +0000
asID:                     54801
IP address blocks:        45.194.85.0/24 maxlen: 24
                          45.195.60.0/24 maxlen: 24
                          45.195.192.0/24 maxlen: 24
                          45.195.196.0/24 maxlen: 24
                          45.195.197.0/24 maxlen: 24
                          45.202.8.0/24 maxlen: 24
                          45.202.9.0/24 maxlen: 24
                          45.202.10.0/24 maxlen: 24
                          45.202.11.0/24 maxlen: 24
                          45.202.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109537 (0x1abe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 11 05:04:15 2026 GMT
            Not After : May 17 05:04:15 2026 GMT
        Subject: CN=69d9d654-5f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:f9:18:3e:fc:c2:9f:e5:4c:35:7e:95:3a:
                    eb:80:a3:b8:b3:11:b9:a5:1e:79:21:18:a3:78:ae:
                    18:ea:a7:59:59:11:cf:95:b6:9b:2f:ac:04:5a:6f:
                    19:33:5c:9c:87:66:d7:09:60:9a:fe:2a:2d:71:2d:
                    1d:77:b7:8f:8e:74:43:f3:93:91:6a:ae:8d:83:1e:
                    83:04:61:8b:98:ff:f5:13:21:77:ba:08:2a:3e:97:
                    28:6c:98:f8:2f:db:4e:c0:3d:e5:66:ca:4f:78:6b:
                    e8:1c:0d:7f:3e:ed:2b:dc:a6:2e:4f:66:ac:8e:db:
                    df:66:ad:ae:e1:41:74:ae:fd:94:54:66:1d:dc:50:
                    b9:95:e0:9a:46:67:6d:d7:cc:45:d4:c9:70:1e:9b:
                    cb:86:dc:c3:63:4d:bb:32:b3:49:8a:41:31:35:80:
                    bf:fd:84:be:21:78:16:47:c0:d3:c3:27:5a:76:db:
                    c9:db:60:2e:64:92:ab:7a:82:c9:28:fb:c7:35:f0:
                    eb:a7:7f:13:46:0e:9d:de:69:cb:6f:e1:51:51:bf:
                    95:35:ba:e0:ef:03:e3:ad:c4:73:0f:33:01:5d:21:
                    70:21:b6:a6:92:02:29:56:1c:14:46:29:1f:44:4a:
                    6e:27:7e:c0:4b:50:4d:9f:b3:bd:9a:b1:52:9d:42:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:86:FB:D4:A5:35:F8:5D:0A:D9:D7:3E:9B:1D:69:61:56:3B:69
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59A09CC356311F19A464C03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.85.0/24
                  45.195.60.0/24
                  45.195.192.0/24
                  45.195.196.0/23
                  45.202.8.0/22
                  45.202.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:64:92:05:41:f2:c2:55:4b:cf:60:5e:bd:15:13:82:01:e8:
         06:67:28:e0:7d:9a:e1:43:71:d7:34:4a:b8:0d:f4:ad:3c:95:
         c3:ef:b9:ce:62:1e:2f:0b:8f:27:c7:64:71:85:57:e5:17:b7:
         db:91:8d:25:89:37:c8:8b:3a:58:ba:81:16:ff:b3:83:b5:51:
         0a:09:41:6a:a4:62:61:fc:45:74:1c:86:18:6c:00:3e:af:a7:
         8a:20:20:9f:36:5f:c2:fe:47:29:45:04:b3:a7:57:fd:8a:e5:
         f8:e1:ce:08:5b:0c:c2:2b:26:72:e6:40:a0:ab:a9:3c:b3:26:
         36:3e:7d:8c:3f:d8:6f:d2:7d:67:8f:81:c1:6b:7b:8d:f9:2c:
         8a:9e:7d:5f:48:e2:51:c2:42:d0:09:bc:0b:28:c0:0a:03:15:
         bd:47:ac:73:a6:b9:8b:53:c4:ca:cf:dd:fd:07:82:55:4c:b0:
         33:96:14:19:55:6c:c7:6e:05:c1:1e:a1:6c:a5:99:ef:70:2a:
         df:2c:88:ca:c7:66:a3:5a:5a:9e:9e:da:c1:54:9d:57:30:8e:
         d3:9a:7f:e9:b8:d2:5d:81:ce:d2:2f:00:96:64:06:6e:3a:c3:
         4b:13:08:ae:8d:9b:bb:ef:e7:9a:d5:89:7f:ab:5d:05:32:92:
         24:dd:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:24 2026 by rpki-client