Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EE0BC894A311F1B60A8A1ECF1D38B0.roa
File:                     30EE0BC894A311F1B60A8A1ECF1D38B0.roa (raw, json)
Hash identifier:          0kgSyyTUdx1TARpzCrLlNGCgiG+xbpzpKl3E95f/c9g=
Subject key identifier:   CF:01:9E:3C:38:79:55:C1:D3:D6:E3:78:11:71:CF:1B:0C:DB:9C:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EE0BC894A311F1B60A8A1ECF1D38B0.roa
Signing time:             Mon 10 Aug 2026 10:06:45 +0000
ROA not before:           Mon 10 Aug 2026 10:06:41 +0000
ROA not after:            Thu 17 Sep 2026 10:06:41 +0000
asID:                     22773
IP address blocks:        156.238.163.0/24 maxlen: 24
                          156.238.164.0/24 maxlen: 24
                          156.238.165.0/24 maxlen: 24
                          156.238.166.0/24 maxlen: 24
                          156.238.167.0/24 maxlen: 24
                          156.238.168.0/24 maxlen: 24
                          156.242.120.0/24 maxlen: 24
                          156.243.194.0/24 maxlen: 24
                          156.243.195.0/24 maxlen: 24
                          156.248.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117524 (0x1cb14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 10:06:41 2026 GMT
            Not After : Sep 17 10:06:41 2026 GMT
        Subject: CN=6a79a2b5-1dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:ae:63:9a:e9:08:18:9e:48:2c:43:65:00:
                    29:22:97:ce:8c:7e:f2:e7:3c:72:d5:66:e2:f9:04:
                    16:d1:b3:e1:22:d7:a8:9d:55:5e:0a:54:e8:e0:64:
                    49:c0:a3:51:ca:6e:b6:c5:51:58:5b:3e:04:0e:45:
                    bb:de:19:2f:cf:c3:8f:ab:79:91:4c:fc:a0:d5:2c:
                    96:1e:53:77:4d:c0:7b:11:5f:70:d1:73:86:bf:b9:
                    74:f1:68:43:45:c9:3e:bf:c2:36:ef:45:ce:0e:ed:
                    73:5c:b4:d7:64:88:96:ca:62:b1:37:2a:5b:6e:8a:
                    89:5d:6f:6c:54:71:86:9d:1c:f9:e5:55:b2:8c:58:
                    9f:cd:d1:b2:93:42:e7:ce:08:81:40:34:af:7f:0b:
                    07:14:ba:61:05:72:4b:86:82:7b:eb:04:6f:b4:44:
                    61:42:fd:6f:9e:ad:e9:21:ed:1c:1b:cf:91:5c:d3:
                    40:a2:d7:0c:59:3d:8e:f6:a2:62:c5:10:b3:b7:70:
                    b8:b0:93:f9:d0:d4:f8:1b:c7:37:cc:90:27:c3:b4:
                    64:48:a3:49:76:20:ea:d5:04:2e:15:b3:65:b1:b2:
                    49:ea:0e:77:e7:34:d5:24:ae:4b:16:5c:24:54:73:
                    56:8f:5f:ce:9e:ea:5a:1d:ce:0e:90:04:3a:cc:f3:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:9E:3C:38:79:55:C1:D3:D6:E3:78:11:71:CF:1B:0C:DB:9C:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EE0BC894A311F1B60A8A1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.163.0-156.238.168.255
                  156.242.120.0/24
                  156.243.194.0/23
                  156.248.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:21:4f:85:7b:c1:72:d5:f3:5c:b5:04:1a:cb:61:1b:9b:
         bb:c8:44:27:87:09:61:66:1d:15:a5:a1:1a:56:cb:36:91:48:
         04:3d:d3:ff:be:71:ed:49:9e:74:81:0f:c4:83:d8:4e:55:ee:
         be:94:a9:97:51:ef:e2:b6:54:32:92:52:45:36:69:c5:87:b1:
         c0:82:d5:c3:da:aa:f9:2f:7e:8d:24:5a:aa:0e:a2:f2:31:ee:
         9d:a4:f5:d7:b6:ae:2c:4d:18:38:45:03:60:c9:81:f5:64:4d:
         bc:db:06:ff:d1:2f:22:d6:60:db:8a:12:18:18:e0:13:7f:00:
         a2:99:62:c6:ce:2c:73:a5:2c:4b:b8:ea:7a:fd:c5:51:c7:94:
         62:20:6e:a9:79:3c:b7:20:05:b2:ca:59:9d:ed:e8:cf:2b:64:
         72:fd:93:98:f2:a9:91:31:95:2b:f5:2b:26:27:84:d1:30:8c:
         d3:01:f5:b7:4a:74:d7:41:18:91:af:37:05:11:78:47:a8:f2:
         56:ad:9e:bb:a0:d5:91:92:5d:20:e0:10:e5:fa:60:42:74:14:
         47:e7:8c:f4:a7:9a:7f:e3:34:06:6b:7c:7a:1b:77:51:6b:46:
         f1:a9:dd:8a:cb:c5:b5:c4:69:b9:b3:7e:ec:b7:44:06:f8:05:
         ea:ea:b2:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:56 2026 by rpki-client