Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2158CE63D311F19329B0F8CE1D38B0.roa
File:                     FB2158CE63D311F19329B0F8CE1D38B0.roa (raw, json)
Hash identifier:          ousnWx++fyjZfzoIvxe9iVj8kbYLjRvcfvRh0zZV4Cc=
Subject key identifier:   B3:B3:EF:77:3B:C4:5D:71:20:51:55:AB:04:9C:56:FA:F0:4E:99:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2158CE63D311F19329B0F8CE1D38B0.roa
Signing time:             Tue 09 Jun 2026 07:22:33 +0000
ROA not before:           Tue 09 Jun 2026 07:22:28 +0000
ROA not after:            Thu 16 Jul 2026 07:22:28 +0000
asID:                     211567
IP address blocks:        45.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113783 (0x1bc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  9 07:22:28 2026 GMT
            Not After : Jul 16 07:22:28 2026 GMT
        Subject: CN=6a27bf39-a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:6f:51:87:9a:60:31:7c:eb:a7:4f:4c:ea:
                    b4:b8:9b:cf:a3:dd:86:00:d9:f7:57:df:c7:e8:86:
                    ab:eb:3e:97:7a:5e:73:3e:8a:bf:7e:f6:94:e0:4d:
                    47:1b:c9:b5:ea:30:b7:07:57:6e:9e:c0:a0:72:01:
                    7b:02:0c:ea:cb:c8:6e:53:d4:ea:1f:02:5c:01:32:
                    d2:05:4a:10:0d:dc:39:7a:70:86:9e:e1:57:24:8b:
                    34:b8:ee:7c:e0:02:3e:9a:8a:73:fa:3b:98:94:75:
                    86:30:b4:f2:4f:bb:cb:95:53:a9:94:8c:d5:a0:f2:
                    a7:9a:7d:7c:77:22:eb:22:fc:58:37:18:b2:97:21:
                    cf:e1:06:7a:f3:8e:d8:2a:fc:4b:a7:62:8e:e0:39:
                    4f:22:34:6a:c7:91:44:98:1b:57:b0:d6:26:e6:c4:
                    d5:f8:4c:bf:38:f2:5d:d0:c9:01:e2:c9:3a:b5:a8:
                    8e:f0:e1:1e:4e:45:4e:ee:91:fe:35:6b:87:39:12:
                    71:b7:2f:f9:4d:42:35:cf:9e:cb:40:85:f9:a2:e5:
                    78:a9:48:96:78:15:c2:f6:ab:b7:d3:bb:90:7e:58:
                    a0:b4:e9:1d:9b:c9:bf:d2:56:a4:bf:37:0c:bd:2a:
                    3a:80:64:ad:31:6e:80:da:da:70:b1:a6:d2:d5:ad:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:EF:77:3B:C4:5D:71:20:51:55:AB:04:9C:56:FA:F0:4E:99:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2158CE63D311F19329B0F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:21:dd:48:c5:ed:fc:10:9c:cf:3d:98:ba:69:6f:9e:bf:
         14:fd:6d:31:35:8f:9d:3a:37:e9:d4:4d:ac:24:e3:53:68:f6:
         13:66:2a:d0:13:c2:ba:63:49:b7:cd:c7:b1:c8:b7:9c:48:79:
         5b:e3:3f:94:d1:04:54:4a:39:81:28:5b:cb:38:f6:7d:95:4e:
         44:77:14:0e:d1:82:56:1d:c8:e9:4e:34:7a:0d:18:da:10:3f:
         4a:76:ab:1f:45:e8:5b:eb:65:25:76:49:c6:8d:08:9b:7e:a0:
         d9:f0:55:0c:15:d3:75:fd:c8:99:19:2a:cc:d2:d9:29:0c:78:
         c8:8c:34:91:3b:cd:68:32:83:5d:ee:e9:5b:44:f2:10:c2:fc:
         58:cb:1e:80:ea:1b:8e:6d:bc:1b:02:0a:c3:4a:0b:23:9f:5a:
         01:81:76:bb:30:44:2d:10:a2:c1:07:17:00:23:3a:c4:0b:e3:
         6f:d5:61:bd:8a:18:b2:b1:1f:92:68:20:62:06:ce:eb:3b:ac:
         4b:bc:89:30:8d:6a:8b:6f:87:c1:e6:60:b8:65:b0:69:30:2d:
         73:eb:aa:ff:f5:50:a6:35:0f:08:14:11:68:12:ad:ac:5d:29:
         ee:05:10:c5:61:c1:8a:17:ee:91:9e:2b:07:d5:f5:de:2b:78:
         f5:3b:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:26 2026 by rpki-client