Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122B83D872F611F18A113FB0CE1D38B0.roa
File:                     122B83D872F611F18A113FB0CE1D38B0.roa (raw, json)
Hash identifier:          TxaR+26zHvqvsn1fE2A/S4BzmaoP7EQiLh0aMmCsFjU=
Subject key identifier:   D1:36:75:BE:FF:58:06:53:29:64:51:00:26:CB:5E:FF:37:CA:D7:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C14B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122B83D872F611F18A113FB0CE1D38B0.roa
Signing time:             Sun 28 Jun 2026 13:34:22 +0000
ROA not before:           Sun 28 Jun 2026 13:34:17 +0000
ROA not after:            Tue 04 Aug 2026 13:34:17 +0000
asID:                     151407
IP address blocks:        156.248.8.0/21 maxlen: 24
                          156.248.8.0/22 maxlen: 24
                          156.248.8.0/23 maxlen: 24
                          156.248.8.0/24 maxlen: 24
                          156.248.9.0/24 maxlen: 24
                          156.248.10.0/23 maxlen: 24
                          156.248.10.0/24 maxlen: 24
                          156.248.12.0/22 maxlen: 24
                          156.248.12.0/23 maxlen: 24
                          156.248.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115019 (0x1c14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 13:34:17 2026 GMT
            Not After : Aug  4 13:34:17 2026 GMT
        Subject: CN=6a4122de-77da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:ea:be:bb:dc:ba:c3:6b:b9:2d:8c:f2:4b:
                    8b:ee:45:a7:9e:35:ea:1f:71:a8:1a:be:d1:04:77:
                    15:aa:9b:99:97:5b:ad:1a:85:66:29:6d:a2:f5:19:
                    19:83:59:7b:52:d5:f9:7f:f9:65:f1:cf:1e:c3:76:
                    d0:f7:49:08:03:1b:a2:80:f6:02:56:b7:22:fb:25:
                    cc:1f:29:83:6c:6a:83:bd:21:bd:74:09:9d:1f:52:
                    b0:36:16:47:64:a8:78:49:18:34:5b:e3:71:df:8b:
                    de:a6:ce:ce:b4:e1:b1:f5:20:be:95:f2:e3:32:4b:
                    bf:54:29:31:f4:8b:47:1f:e2:f7:a5:a8:9c:74:d7:
                    cd:76:74:ef:9b:47:ee:08:41:34:1e:55:1d:9c:12:
                    9e:15:94:db:94:63:9f:ad:32:ed:b3:62:96:e9:d2:
                    81:68:58:d5:ab:52:38:0b:c6:ad:36:66:a6:f9:2a:
                    5b:48:98:16:5a:c0:19:dd:c6:f0:fd:70:b7:7c:29:
                    49:59:b3:9d:5a:9a:43:f5:a1:00:19:d4:63:f0:d4:
                    c3:09:01:b8:69:20:22:67:40:b2:71:2a:5b:2a:2a:
                    af:29:d8:40:00:98:7b:75:7a:58:50:a1:10:23:be:
                    1b:d7:34:cf:bb:b8:25:0c:ba:be:a1:bf:3f:6c:bd:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:75:BE:FF:58:06:53:29:64:51:00:26:CB:5E:FF:37:CA:D7:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122B83D872F611F18A113FB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:e0:24:3f:c2:85:92:9a:61:e8:32:e7:a2:98:b4:3c:60:
         4e:27:c2:fd:c2:d0:0d:e1:bb:4c:3a:c2:53:02:97:b3:51:f5:
         ea:0d:e2:f6:d5:1a:6c:31:39:a7:55:c9:95:4c:83:c5:be:50:
         b0:1e:71:eb:1e:2a:58:45:dc:be:99:9b:f7:6f:26:ff:0d:a2:
         fb:aa:21:1c:b5:69:57:52:c1:92:4d:15:55:53:df:03:e0:19:
         fd:f7:a5:94:0c:fc:08:29:f5:a3:06:dc:9d:43:69:a9:40:31:
         1a:20:d4:87:40:58:bf:2f:63:ce:c0:d1:07:cf:85:4e:6f:e2:
         a4:b6:66:37:7e:1e:01:42:f6:37:f5:f8:dc:65:e7:c1:5f:1a:
         ba:60:2c:d1:c1:8c:6e:46:ce:f1:f1:98:15:c7:9b:59:01:b2:
         4b:11:f3:f7:02:47:a5:e0:8e:32:e4:31:e3:b3:6c:96:39:ca:
         f8:3b:19:a9:0e:91:c9:89:5f:f6:20:b1:e1:c3:ed:c7:a2:d8:
         3f:4d:63:06:5b:8a:ce:b7:15:4c:73:65:ba:68:cb:04:bb:d3:
         9b:37:49:14:f0:b8:02:35:81:70:fe:ef:a0:fd:4c:d3:5d:15:
         b0:a2:49:88:6e:cc:b6:8a:c0:57:44:38:67:c2:35:c9:6a:76:
         b5:ad:67:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcFLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI4MTMzNDE3WhcNMjYwODA0MTMzNDE3WjAYMRYw
FAYDVQQDEw02YTQxMjJkZS03N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsgXqvrvcusNruS2M8kuL7kWnnjXqH3GoGr7RBHcVqpuZl1utGoVmKW2i
9RkZg1l7UtX5f/ll8c8ew3bQ90kIAxuigPYCVrci+yXMHymDbGqDvSG9dAmdH1Kw
NhZHZKh4SRg0W+Nx34veps7OtOGx9SC+lfLjMku/VCkx9ItHH+L3paicdNfNdnTv
m0fuCEE0HlUdnBKeFZTblGOfrTLts2KW6dKBaFjVq1I4C8atNmam+SpbSJgWWsAZ
3cbw/XC3fClJWbOdWppD9aEAGdRj8NTDCQG4aSAiZ0CycSpbKiqvKdhAAJh7dXpY
UKEQI74b1zTPu7glDLq+ob8/bL2CXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNE2
db7/WAZTKWRRACbLXv83ytfmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjJCODNEODcyRjYxMUYxOEExMTNGQjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPgIMA0GCSqGSIb3DQEBCwUA
A4IBAQBm+OAkP8KFkpph6DLnopi0PGBOJ8L9wtAN4btMOsJTApezUfXqDeL21Rps
MTmnVcmVTIPFvlCwHnHrHipYRdy+mZv3byb/DaL7qiEctWlXUsGSTRVVU98D4Bn9
96WUDPwIKfWjBtydQ2mpQDEaINSHQFi/L2POwNEHz4VOb+KktmY3fh4BQvY39fjc
ZefBXxq6YCzRwYxuRs7x8ZgVx5tZAbJLEfP3Akel4I4y5DHjs2yWOcr4OxmpDpHJ
iV/2ILHhw+3Hotg/TWMGW4rOtxVMc2W6aMsEu9ObN0kU8LgCNYFw/u+g/UzTXRWw
okmIbsy2isBXRDhnwjXJana1rWfq
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:21 2026 by rpki-client