Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DADCD0FB5811F08CD0BB78DAE4EC9C.roa
File:                     13DADCD0FB5811F08CD0BB78DAE4EC9C.roa (raw, json)
Hash identifier:          TDRg7ow5r3TMB2dKA8p6IF3gYUIoExJnDnbU1ADMaXs=
Subject key identifier:   8B:39:0E:F7:0D:C8:46:4F:24:EE:31:20:B7:70:68:FD:BE:41:C2:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019A1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DADCD0FB5811F08CD0BB78DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 08:13:36 +0000
ROA not before:           Tue 27 Jan 2026 08:13:31 +0000
ROA not after:            Mon 04 May 2026 08:13:31 +0000
asID:                     133748
IP address blocks:        156.225.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Feb 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104991 (0x19a1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 27 08:13:31 2026 GMT
            Not After : May  4 08:13:31 2026 GMT
        Subject: CN=697873b0-9900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:ee:d2:e1:3c:58:7a:88:45:35:df:47:ff:
                    bd:74:fa:45:0b:6a:82:d2:59:fd:cd:10:e7:9e:07:
                    d5:34:c0:08:3a:fa:21:3a:02:f5:4c:0b:9b:f8:d3:
                    95:19:78:2e:47:0c:b5:04:69:7e:3d:e9:8e:c1:44:
                    1c:7b:b2:54:d7:6b:d2:40:57:99:db:d1:77:68:0a:
                    66:63:ab:38:50:c6:5e:94:1c:54:4e:c3:19:10:b9:
                    75:b7:ea:b9:a4:c2:a9:5f:81:4a:c9:0e:ca:c5:f9:
                    d4:e2:36:77:97:29:9c:91:39:7d:8a:82:10:0b:90:
                    c3:51:a9:b9:c7:10:af:a8:d0:05:76:96:60:ca:40:
                    0c:06:89:f7:e7:6f:e5:6f:18:8d:d8:d7:43:29:f4:
                    87:25:d7:54:f0:47:b3:00:a7:67:9f:8d:ad:10:25:
                    8c:c4:45:03:99:f1:1e:d6:36:bd:ff:44:5d:ea:39:
                    71:ba:7e:2c:29:ef:f8:c1:06:57:e3:df:4a:b6:79:
                    a5:4c:b4:41:5b:20:a5:d2:93:76:c4:fe:c4:d3:12:
                    e2:c2:a7:59:14:f0:75:45:a1:54:3b:e7:69:16:f3:
                    b8:5a:76:50:45:d8:67:ba:36:31:bf:52:e2:35:df:
                    24:a2:aa:67:8d:b0:90:35:2b:4a:60:1c:63:66:8a:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:0E:F7:0D:C8:46:4F:24:EE:31:20:B7:70:68:FD:BE:41:C2:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DADCD0FB5811F08CD0BB78DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:b3:53:92:b3:67:8a:88:4e:dd:48:dc:b7:24:f8:e5:80:
         5c:15:77:dd:d2:89:3f:6c:0f:77:e8:5f:53:02:29:30:56:50:
         f1:62:85:62:67:72:75:5a:22:3b:ed:b4:21:3d:99:fe:dc:1a:
         97:ef:6d:e5:e6:b3:a2:7a:93:4f:20:cc:5f:8c:aa:1e:1c:c6:
         bf:f1:df:44:07:23:94:ad:f0:92:15:0e:10:e0:a3:78:85:47:
         62:71:86:cd:69:f2:4c:15:7f:d0:ee:14:dc:71:b0:39:b4:d3:
         5e:98:32:de:48:9d:d1:5a:9c:ef:c9:d6:fa:a3:68:7d:a0:a2:
         37:57:6c:88:0b:85:d0:26:7c:70:27:0e:3a:7d:2a:99:5a:49:
         6a:5f:5f:96:6b:70:3d:73:ec:4e:c8:c2:f8:c5:13:6b:f5:b4:
         14:71:7c:19:11:cd:e5:ed:d4:f8:d5:17:a1:ec:63:80:be:57:
         e7:77:5d:06:6b:de:9d:87:9b:ac:fd:b8:20:c6:9c:6b:8a:b3:
         e4:18:77:c3:08:fa:e8:82:8f:ba:9d:1b:99:91:d3:37:10:fe:
         7a:30:fb:2c:2c:d9:55:80:fb:8b:1f:15:2e:90:f9:93:65:a1:
         a6:d8:25:a2:62:27:7d:cb:d2:07:f1:50:05:92:a4:3c:a3:cb:
         ed:80:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:40 2026 by rpki-client