Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32880FB471FE11F18C200AD3CE1D38B0.roa
File:                     32880FB471FE11F18C200AD3CE1D38B0.roa (raw, json)
Hash identifier:          ZaFIuWi85oMSMwybu/6sXUHFyP7fDHpk0YD9A1HTzwU=
Subject key identifier:   54:17:21:11:9D:C9:5D:79:7C:24:99:AD:B1:CD:98:89:D1:7B:B9:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C0CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32880FB471FE11F18C200AD3CE1D38B0.roa
Signing time:             Sat 27 Jun 2026 08:00:01 +0000
ROA not before:           Sat 27 Jun 2026 07:59:56 +0000
ROA not after:            Mon 31 Aug 2026 07:59:56 +0000
asID:                     399077
IP address blocks:        156.251.7.0/24 maxlen: 24
                          156.251.8.0/24 maxlen: 24
                          156.251.9.0/24 maxlen: 24
                          156.251.10.0/24 maxlen: 24
                          156.251.11.0/24 maxlen: 24
                          156.251.12.0/24 maxlen: 24
                          156.251.13.0/24 maxlen: 24
                          156.251.14.0/24 maxlen: 24
                          156.251.15.0/24 maxlen: 24
                          156.251.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114894 (0x1c0ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 27 07:59:56 2026 GMT
            Not After : Aug 31 07:59:56 2026 GMT
        Subject: CN=6a3f8301-5560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:ea:09:8c:ae:13:04:ac:43:d0:9b:5f:4b:
                    6b:91:1c:d4:a2:4d:30:3d:e9:ff:b3:ee:e0:ac:19:
                    da:96:fd:23:0a:0e:7f:9a:07:73:db:68:f7:16:44:
                    16:38:d1:5a:5e:23:5f:b2:10:47:4a:c3:90:fa:c2:
                    9a:d5:c2:5a:85:b7:ee:31:f4:6a:f2:8c:87:38:ad:
                    5f:2e:2f:71:4a:00:31:ea:ff:5c:76:f0:f9:ff:10:
                    17:fc:5e:2f:5e:f9:97:aa:6b:d1:e1:58:06:4a:5e:
                    60:99:5d:9f:5b:7f:75:85:b0:e0:3c:12:0c:75:ee:
                    3b:0f:0b:3b:fc:aa:9b:ec:a8:95:6c:0f:df:86:2c:
                    2e:7f:79:91:b7:3f:9a:c5:87:8b:6a:f1:c7:e7:19:
                    38:94:da:40:31:9d:91:9b:fd:a1:46:23:cf:33:7e:
                    61:e1:55:af:73:a7:bb:2f:1d:f3:f1:fb:59:38:a8:
                    65:dc:62:f2:ea:1f:bf:0d:3c:61:7c:b1:71:8b:d0:
                    6a:1a:fb:8d:d3:a6:29:e2:26:67:7f:eb:15:23:fa:
                    9a:13:b3:54:5f:43:d4:78:b7:1f:6d:48:86:25:c3:
                    2a:e1:7b:db:f5:57:eb:d6:a7:e2:20:b5:86:89:c3:
                    7e:3e:1e:b1:73:c1:d1:92:c8:54:cd:83:24:4d:e1:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:17:21:11:9D:C9:5D:79:7C:24:99:AD:B1:CD:98:89:D1:7B:B9:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32880FB471FE11F18C200AD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.7.0-156.251.16.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:4b:67:28:c0:d5:65:f2:3a:5c:da:bc:84:52:6b:16:d7:
         5c:39:25:34:0b:0f:ac:59:e4:54:94:9c:78:3a:f8:9f:88:2f:
         35:65:42:72:01:bb:07:b3:79:68:8d:9b:31:a9:42:bc:68:42:
         57:6d:4c:8d:e9:37:99:75:3d:52:36:0c:74:eb:d1:3b:f6:01:
         4b:39:76:73:f1:05:0b:1f:a9:5b:c4:53:27:9b:b0:2c:6d:41:
         78:7b:04:b5:92:61:c9:c6:de:35:7f:57:78:c6:c7:be:02:21:
         29:d3:0b:bb:f7:36:46:4f:30:88:fc:64:a9:89:3c:cb:74:e5:
         72:2c:56:94:bb:5a:b3:fe:db:7b:f9:ff:a1:b9:b1:71:ec:ef:
         7c:4f:e8:62:5c:f8:40:88:c7:66:84:06:3b:32:ce:5a:6f:c8:
         32:ed:0e:60:39:b0:b4:98:d4:d8:2b:bf:d2:66:f3:9d:e8:d7:
         ac:5a:58:d3:fc:34:75:77:5e:2d:f4:a2:15:e3:e0:84:e9:ca:
         8a:e7:ea:4c:53:83:cf:98:b3:85:eb:17:ea:c1:c5:dc:e5:fb:
         a8:17:a4:ee:7d:b3:61:8c:c2:12:96:75:5c:ba:a1:55:c8:1c:
         cd:5c:11:44:f4:2b:47:73:ac:ee:39:fd:4b:b6:f3:e0:a4:37:
         17:66:c3:d9
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcDOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI3MDc1OTU2WhcNMjYwODMxMDc1OTU2WjAYMRYw
FAYDVQQDEw02YTNmODMwMS01NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArfTqCYyuEwSsQ9CbX0trkRzUok0wPen/s+7grBnalv0jCg5/mgdz22j3
FkQWONFaXiNfshBHSsOQ+sKa1cJahbfuMfRq8oyHOK1fLi9xSgAx6v9cdvD5/xAX
/F4vXvmXqmvR4VgGSl5gmV2fW391hbDgPBIMde47Dws7/Kqb7KiVbA/fhiwuf3mR
tz+axYeLavHH5xk4lNpAMZ2Rm/2hRiPPM35h4VWvc6e7Lx3z8ftZOKhl3GLy6h+/
DTxhfLFxi9BqGvuN06Yp4iZnf+sVI/qaE7NUX0PUeLcfbUiGJcMq4Xvb9Vfr1qfi
ILWGicN+Ph6xc8HRkshUzYMkTeHWHQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFQX
IRGdyV15fCSZrbHNmInRe7nyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjg4MEZCNDcxRkUxMUYxOEMyMDBBRDNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc+wcDBACc+xAwDQYJKoZI
hvcNAQELBQADggEBAGzzS2cowNVl8jpc2ryEUmsW11w5JTQLD6xZ5FSUnHg6+J+I
LzVlQnIBuwezeWiNmzGpQrxoQldtTI3pN5l1PVI2DHTr0Tv2AUs5dnPxBQsfqVvE
UyebsCxtQXh7BLWSYcnG3jV/V3jGx74CISnTC7v3NkZPMIj8ZKmJPMt05XIsVpS7
WrP+23v5/6G5sXHs73xP6GJc+ECIx2aEBjsyzlpvyDLtDmA5sLSY1Ngrv9Jm853o
16xaWNP8NHV3Xi30ohXj4ITpyorn6kxTg8+Ys4XrF+rBxdzl+6gXpO59s2GMwhKW
dVy6oVXIHM1cEUT0K0dzrO45/Uu28+CkNxdmw9k=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:20 2026 by rpki-client