Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195A5AE713D11F1AB6AA4BCCE1D38B0.roa
File:                     0195A5AE713D11F1AB6AA4BCCE1D38B0.roa (raw, json)
Hash identifier:          6fEx6rDQvIJaVwXz2GuzpSx7mdPG9dw7mYTtP1beYLI=
Subject key identifier:   ED:46:DB:DD:34:9B:5D:FB:67:C3:A4:30:8D:C9:09:C8:B5:4B:6F:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C089
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195A5AE713D11F1AB6AA4BCCE1D38B0.roa
Signing time:             Fri 26 Jun 2026 08:57:06 +0000
ROA not before:           Fri 26 Jun 2026 08:57:01 +0000
ROA not after:            Thu 30 Jul 2026 08:57:01 +0000
asID:                     401783
IP address blocks:        156.227.132.0/24 maxlen: 24
                          156.227.136.0/24 maxlen: 24
                          156.227.139.0/24 maxlen: 24
                          156.227.140.0/24 maxlen: 24
                          156.227.159.0/24 maxlen: 24
                          156.231.4.0/24 maxlen: 24
                          156.231.5.0/24 maxlen: 24
                          156.231.6.0/24 maxlen: 24
                          156.231.8.0/24 maxlen: 24
                          156.231.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114825 (0x1c089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 26 08:57:01 2026 GMT
            Not After : Jul 30 08:57:01 2026 GMT
        Subject: CN=6a3e3ee2-bcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:e5:da:62:89:1e:0c:02:be:b8:dc:a5:bf:
                    68:c9:fd:63:c6:5f:03:ae:1d:af:c3:65:e9:00:5c:
                    54:d5:b1:85:bb:f1:1b:0d:0d:47:12:c0:45:a0:4e:
                    2a:26:3d:0e:c1:2a:32:37:1f:2f:25:75:2d:8e:b9:
                    2e:08:f0:74:fc:90:e3:17:ea:15:a5:0c:9e:95:26:
                    db:39:61:e3:6c:2b:87:4d:15:39:03:19:24:b0:95:
                    f7:b8:dd:ed:66:db:60:e5:27:b0:2f:32:4f:15:32:
                    38:7f:4c:d3:ef:58:19:bc:d4:e5:64:f1:41:97:76:
                    16:fc:a6:da:60:f0:3d:9d:e8:35:f4:41:bc:5c:f0:
                    36:cd:21:3e:74:39:50:75:0b:99:91:00:07:48:d0:
                    c4:bf:a7:f0:c6:aa:1c:31:a6:a7:33:56:05:83:1b:
                    42:a5:3d:ec:cf:2e:99:1b:5d:56:54:3c:38:a0:f6:
                    22:3f:bd:f5:93:5d:86:b3:ba:bb:c6:fa:be:67:ef:
                    26:8c:15:38:25:7c:12:69:d4:41:a1:f5:ae:d9:fc:
                    22:b9:91:b7:1d:40:a0:92:35:20:5b:d6:6a:04:42:
                    28:b5:8f:63:b6:11:3b:bc:07:f2:a4:59:c8:b6:27:
                    ad:89:8a:37:0c:30:70:ad:20:b4:b1:69:b4:8e:ce:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:DB:DD:34:9B:5D:FB:67:C3:A4:30:8D:C9:09:C8:B5:4B:6F:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195A5AE713D11F1AB6AA4BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.132.0/24
                  156.227.136.0/24
                  156.227.139.0-156.227.140.255
                  156.227.159.0/24
                  156.231.4.0-156.231.6.255
                  156.231.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:02:d4:8a:c3:48:44:42:63:6c:3a:ee:5e:54:37:50:ca:e6:
         f4:1a:01:c9:be:da:de:d6:76:21:cd:2a:2a:b9:80:63:2b:66:
         84:55:ed:52:e0:18:d7:72:4d:e8:38:29:09:7b:c8:7a:f4:d5:
         a3:64:91:cb:8a:8e:8b:a9:39:58:6e:63:3a:87:f4:d2:d4:f8:
         49:b8:e0:b7:b6:3f:ad:d2:fa:90:d3:d8:09:3c:79:5c:11:bb:
         5d:23:e9:04:03:be:49:b1:96:40:8c:03:62:0e:23:46:0d:d0:
         1c:1e:e1:5a:1a:a9:b2:e8:85:01:34:6d:87:32:fd:b8:19:a0:
         9d:d7:6e:2c:92:58:6c:f2:f8:3d:00:41:a8:b9:04:55:86:47:
         ab:a9:a3:fd:56:f7:b2:41:75:36:43:60:91:9d:41:8f:b4:10:
         c5:31:d0:a0:7d:ff:4b:56:b9:30:20:49:27:8f:fc:2a:ff:68:
         38:25:d9:50:b0:2d:61:68:22:82:70:bc:6e:b7:a6:40:2f:b1:
         1a:95:ae:be:cc:a0:17:ab:db:76:5f:d9:97:a1:28:97:3e:2c:
         4b:e0:ae:a3:ee:6b:ff:e4:d8:0f:28:ca:40:cb:91:9e:fb:e7:
         39:b9:6a:34:79:0f:85:f5:4d:8c:97:e5:65:ff:72:10:af:74:
         6d:92:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:20 2026 by rpki-client