Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32165F58949B11F1AEF2B2EECE1D38B0.roa
File:                     32165F58949B11F1AEF2B2EECE1D38B0.roa (raw, json)
Hash identifier:          MoAXjAQH3fj2Ly7cPUK7FCTQkP3YpTiDDw4ywZ1xX+0=
Subject key identifier:   DE:A2:DB:B4:BD:4C:FA:A0:21:1F:B6:DC:BB:1B:58:42:67:F4:5B:7E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32165F58949B11F1AEF2B2EECE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:09:31 +0000
ROA not before:           Mon 10 Aug 2026 09:09:27 +0000
ROA not after:            Thu 17 Sep 2026 09:09:27 +0000
asID:                     22773
IP address blocks:        156.238.142.0/24 maxlen: 24
                          156.238.143.0/24 maxlen: 24
                          156.238.145.0/24 maxlen: 24
                          156.238.146.0/24 maxlen: 24
                          156.238.147.0/24 maxlen: 24
                          156.238.148.0/24 maxlen: 24
                          156.238.149.0/24 maxlen: 24
                          156.238.150.0/24 maxlen: 24
                          156.238.151.0/24 maxlen: 24
                          156.238.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117491 (0x1caf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 09:09:27 2026 GMT
            Not After : Sep 17 09:09:27 2026 GMT
        Subject: CN=6a79954b-8abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:0b:2c:f0:8a:20:ad:a1:7b:b9:3e:27:62:
                    71:4f:e7:c6:46:ee:7c:1a:d9:7d:e4:d5:71:6d:63:
                    b9:51:c7:83:05:67:09:e3:cc:9d:dc:9e:0f:5f:8e:
                    59:8e:2d:a3:2e:b7:3a:9d:11:c3:a6:47:34:2c:20:
                    7c:33:b1:0f:5b:ce:ef:fc:da:93:97:be:48:ba:48:
                    69:05:a1:6b:6e:1e:17:ba:d8:7e:16:d2:98:05:20:
                    63:bf:98:ce:9b:b1:df:10:24:c6:c2:61:fb:c6:96:
                    fb:c5:dc:03:21:7c:4f:75:4c:29:fe:0a:42:82:1a:
                    92:d2:97:7b:b2:a8:6a:5e:f5:f6:6a:6a:26:6a:23:
                    e8:4e:16:49:00:ad:04:bf:ac:49:75:55:02:86:dc:
                    92:62:ed:97:42:4d:ab:67:85:4a:e5:78:ff:10:c9:
                    21:77:53:67:3e:df:74:fb:c1:8c:0d:24:70:cb:a1:
                    be:95:bd:aa:f7:52:d1:16:d7:bd:f4:63:aa:25:f7:
                    e8:db:cb:15:0e:61:72:91:82:28:b0:5d:6f:cb:b0:
                    e6:46:61:d4:a3:0d:0a:5b:5b:5c:b3:5f:bf:3a:7e:
                    0f:a6:cd:2d:b0:ca:cb:6c:b3:47:31:54:19:e4:84:
                    5b:e8:c5:a5:2a:1f:69:e3:4e:d0:1d:b2:73:71:70:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A2:DB:B4:BD:4C:FA:A0:21:1F:B6:DC:BB:1B:58:42:67:F4:5B:7E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32165F58949B11F1AEF2B2EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.142.0/23
                  156.238.145.0-156.238.152.255

    Signature Algorithm: sha256WithRSAEncryption
         67:53:80:5f:0a:46:77:82:5a:f0:fb:6f:a4:d4:ce:28:7e:48:
         41:1f:28:c0:fc:55:e6:46:5d:56:cb:01:ab:d7:00:48:04:16:
         0b:79:b8:ca:30:e0:12:c9:df:93:9a:81:19:82:29:df:49:ac:
         ba:56:10:2b:3b:3e:fe:8a:e9:56:f9:33:71:bb:1f:ff:52:e2:
         cb:38:32:a3:a4:35:b9:3d:77:5b:08:4d:9d:8c:3b:41:b4:44:
         7a:76:52:7d:c6:a2:d1:f0:3f:0d:4f:29:2c:44:03:59:a2:c3:
         1f:08:2a:83:a6:b2:fe:8a:bd:f7:9d:4f:12:07:3b:18:a4:43:
         54:30:8c:a2:ca:ef:ee:b3:32:da:98:21:b2:9d:a1:8f:91:5a:
         c3:9f:7b:ca:35:e9:14:5c:ff:d5:6e:3e:00:e8:75:ee:73:a8:
         69:e5:1d:de:c1:71:96:cd:36:b3:73:de:31:f8:ec:e5:71:5f:
         c2:bd:a2:3f:4b:8e:43:2c:57:dc:15:59:da:8f:43:8d:f7:ac:
         18:05:90:18:0d:8a:d2:b6:1d:7b:79:cb:7a:27:82:27:9e:79:
         1b:24:2f:c4:a0:9d:54:5f:0a:51:fa:50:c6:a1:ff:51:64:ff:
         21:77:f6:d7:d4:8c:42:09:5f:19:19:f7:b3:72:fb:28:9a:87:
         ba:60:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:28 2026 by rpki-client