Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0F3D446AEB11F1B9D15910CF1D38B0.roa
File:                     3F0F3D446AEB11F1B9D15910CF1D38B0.roa (raw, json)
Hash identifier:          xIS6sSuWSGqy2CCbzdKSE/VOUFjrM8ZkW0Zs80ELXsw=
Subject key identifier:   8A:95:49:7A:2C:D7:FA:39:A1:19:7D:23:A0:1C:42:78:72:30:22:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BEF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0F3D446AEB11F1B9D15910CF1D38B0.roa
Signing time:             Thu 18 Jun 2026 07:56:43 +0000
ROA not before:           Thu 18 Jun 2026 07:56:39 +0000
ROA not after:            Sat 25 Jul 2026 07:56:39 +0000
asID:                     271355
IP address blocks:        156.236.239.0/24 maxlen: 24
                          156.236.240.0/24 maxlen: 24
                          156.236.241.0/24 maxlen: 24
                          156.236.242.0/24 maxlen: 24
                          156.236.243.0/24 maxlen: 24
                          156.236.244.0/24 maxlen: 24
                          156.236.245.0/24 maxlen: 24
                          156.236.246.0/24 maxlen: 24
                          156.236.247.0/24 maxlen: 24
                          156.236.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114418 (0x1bef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 18 07:56:39 2026 GMT
            Not After : Jul 25 07:56:39 2026 GMT
        Subject: CN=6a33a4bb-e677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:26:dd:75:78:a1:d5:29:f6:3d:01:da:2b:
                    3a:f3:5e:61:c6:f4:0a:ab:e9:ec:71:43:f6:bd:88:
                    f0:7d:5e:d4:74:10:c5:d4:96:ee:04:d6:96:f7:02:
                    2a:56:68:f4:74:81:84:96:55:5c:48:1b:b3:66:d2:
                    a7:3d:44:e5:57:40:1e:f3:05:00:03:30:07:17:00:
                    84:9f:cd:fc:47:b0:67:5e:d5:49:49:c8:86:ea:4a:
                    ec:03:ab:43:08:f6:05:00:bc:55:e1:7f:41:8f:2c:
                    81:b2:de:19:4a:d4:97:cc:df:98:5c:b5:7c:41:cd:
                    73:af:a8:36:12:40:46:67:11:05:37:91:b8:7e:43:
                    39:2c:d8:4b:d6:ff:6d:3e:3d:c4:c5:7b:36:eb:78:
                    60:ae:73:7d:24:fb:69:fc:c4:0c:7a:14:81:34:07:
                    f0:e8:b9:d3:12:92:87:c4:42:ba:81:73:5e:6d:82:
                    16:19:6b:4b:b7:8f:8a:59:ec:86:29:0f:c7:6e:5c:
                    61:d7:c5:0c:58:1a:03:c7:56:bc:7e:74:d7:ce:74:
                    68:8d:b8:13:30:00:c6:b0:78:3e:75:b8:ab:91:d2:
                    68:f0:91:b0:a5:73:ca:73:87:e0:b5:98:e4:b2:ac:
                    4b:7e:79:77:ec:4d:a1:ce:2e:1c:82:3e:b3:cf:f9:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:49:7A:2C:D7:FA:39:A1:19:7D:23:A0:1C:42:78:72:30:22:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0F3D446AEB11F1B9D15910CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.239.0-156.236.248.255

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:ea:1e:b5:d0:e8:70:fa:0e:40:09:fb:ef:b0:cb:73:17:
         28:c2:0d:3a:ba:9f:7a:60:49:6e:7c:05:c1:94:08:c7:c6:3c:
         9f:09:d3:4c:04:83:d5:db:b9:bb:62:c8:fe:bc:87:fd:f2:4c:
         73:ba:78:24:60:cc:57:1f:57:23:9a:21:b2:14:c4:02:af:bc:
         e6:30:5a:ac:13:6e:d4:b7:d3:14:95:d7:d5:fb:21:8b:99:90:
         c0:aa:b4:73:4c:ac:bc:ad:25:bd:d5:6d:f1:3b:58:da:11:b6:
         47:4c:9a:c3:2d:26:c7:a6:45:45:d3:0f:f7:03:b3:6b:61:85:
         da:35:a4:c7:6d:67:cf:7f:71:95:30:66:1f:a3:52:ca:82:52:
         5d:b9:f9:e8:4d:b8:d7:18:5f:47:a4:df:b5:1c:56:31:a8:f9:
         e9:49:e2:bd:7d:19:e0:f1:43:b9:2a:c5:bf:40:10:25:d4:48:
         cd:bc:35:f7:62:3f:d3:da:c3:93:e4:7e:ba:e5:75:58:5a:8b:
         cd:fa:7f:f9:78:9d:85:97:ce:a7:8e:9f:d3:c2:52:e5:aa:b0:
         f6:97:9e:f1:04:88:f7:58:c5:cf:21:e0:1b:b6:cc:eb:55:a0:
         23:21:7d:f4:84:d9:55:4c:e8:ff:1a:3e:c9:c7:3e:af:b1:90:
         1b:d2:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:34 2026 by rpki-client