Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A913D106E1411F1A6AF0507CF1D38B0.roa
File:                     1A913D106E1411F1A6AF0507CF1D38B0.roa (raw, json)
Hash identifier:          DlF94y6xFO42aUKi4Y86R2F88viEd9AC8aTd6kv3mjU=
Subject key identifier:   93:A8:86:19:F8:F2:E6:C4:D2:18:BB:84:4C:61:A6:2A:F3:03:5D:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A913D106E1411F1A6AF0507CF1D38B0.roa
Signing time:             Mon 22 Jun 2026 08:26:45 +0000
ROA not before:           Mon 22 Jun 2026 08:26:40 +0000
ROA not after:            Tue 28 Jul 2026 08:26:40 +0000
asID:                     44559
IP address blocks:        156.246.166.0/24 maxlen: 24
                          156.246.167.0/24 maxlen: 24
                          156.246.168.0/24 maxlen: 24
                          156.246.169.0/24 maxlen: 24
                          156.246.170.0/24 maxlen: 24
                          156.246.171.0/24 maxlen: 24
                          156.246.172.0/24 maxlen: 24
                          156.246.173.0/24 maxlen: 24
                          156.246.176.0/24 maxlen: 24
                          156.246.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114524 (0x1bf5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 08:26:40 2026 GMT
            Not After : Jul 28 08:26:40 2026 GMT
        Subject: CN=6a38f1c5-cbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:ab:cf:c3:89:48:6b:47:43:d8:44:c0:6a:
                    c8:ef:61:02:aa:20:b9:3e:41:13:06:ab:25:5a:b5:
                    c7:ae:d4:56:0b:e2:a6:5b:00:b5:a1:e9:76:bb:04:
                    85:e5:24:fa:bd:de:4c:34:3c:be:19:a3:7b:89:ec:
                    7d:e4:45:de:8c:b4:c5:33:f8:40:01:79:ab:64:d4:
                    cb:d8:89:f4:6f:91:88:c4:9b:89:0f:78:2e:2c:41:
                    fb:26:63:19:c9:2e:29:65:ff:5f:01:ee:0b:44:cb:
                    f9:01:28:fd:6a:f6:6f:7b:a0:20:35:de:45:7f:ac:
                    8d:59:48:2e:3a:5a:c8:3b:20:a1:bc:b0:e1:c5:14:
                    69:60:eb:3f:16:57:39:9a:79:49:a0:66:d3:76:af:
                    e9:6d:ec:83:c2:56:ee:a2:e3:4f:d6:94:15:dc:48:
                    d3:82:1f:6c:dd:7a:bc:72:ec:05:a3:d6:ab:ec:f6:
                    a7:b8:33:a0:42:b9:34:f3:77:f5:03:50:f4:82:0e:
                    79:08:22:a4:8b:13:0d:28:24:92:a8:f4:23:c4:ff:
                    c6:08:29:20:b7:9f:70:14:74:94:e2:f8:6e:f5:1a:
                    8f:bc:ca:ba:69:78:9f:05:fd:09:9c:40:b9:cd:a5:
                    4e:e1:48:82:fe:9e:b1:e3:b8:1c:6a:66:e9:22:e0:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A8:86:19:F8:F2:E6:C4:D2:18:BB:84:4C:61:A6:2A:F3:03:5D:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A913D106E1411F1A6AF0507CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.166.0-156.246.173.255
                  156.246.176.0/24
                  156.246.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:33:a4:c8:45:63:f8:e2:85:f7:8e:d0:40:55:5e:26:14:f1:
         49:38:0a:8d:de:b9:ff:da:ee:1f:80:d8:24:50:aa:f1:84:d9:
         fb:9d:b1:f8:86:b7:ff:13:51:eb:69:de:b4:9b:20:80:74:99:
         36:3e:91:96:e3:18:c4:3a:23:6f:a1:02:64:ed:15:6f:b8:ae:
         40:be:61:6d:fb:66:b1:55:70:ab:3c:7e:45:d5:e0:54:32:ff:
         51:be:57:ca:77:76:c9:58:32:3d:fd:af:cf:91:95:ac:3f:cf:
         ab:36:6c:a2:0a:47:99:a6:60:f5:47:1f:11:84:e3:88:68:89:
         b5:37:5d:bf:38:ea:c2:6a:e0:47:4d:ab:7e:1e:33:65:3b:b5:
         11:3f:28:89:c6:f2:00:d9:a7:34:bb:8b:88:8a:09:f8:c6:b4:
         de:be:aa:02:20:c5:36:1a:15:76:aa:bb:3e:46:fb:55:53:78:
         10:f2:2a:c2:a4:ed:3c:b3:ba:e9:07:f3:30:e7:b4:85:23:60:
         14:4b:64:18:6a:2d:35:5c:3b:10:62:a1:52:bf:9f:d4:4f:2f:
         46:98:55:d8:9b:90:58:a5:af:07:c3:e6:e3:d1:67:14:61:fb:
         88:d8:e1:04:3c:26:15:65:71:1d:2c:dc:47:be:13:87:81:5f:
         fb:0b:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client