Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B61CDE455611F1B69D04FACE1D38B0.roa
File:                     51B61CDE455611F1B69D04FACE1D38B0.roa (raw, json)
Hash identifier:          8Xqry/uclI7iTBuvmZr1P/aw1Qp2sPeWoPCyJ75NFKs=
Subject key identifier:   BF:35:8B:10:09:D1:8A:FD:24:B3:43:4F:35:55:8B:93:76:CC:AE:47
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B090
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B61CDE455611F1B69D04FACE1D38B0.roa
Signing time:             Fri 01 May 2026 12:07:27 +0000
ROA not before:           Fri 01 May 2026 12:07:22 +0000
ROA not after:            Mon 11 May 2026 12:07:22 +0000
asID:                     136907
IP address blocks:        156.227.22.0/23 maxlen: 24
                          156.230.32.0/21 maxlen: 24
                          156.230.40.0/21 maxlen: 24
                          156.230.64.0/18 maxlen: 24
                          156.232.16.0/20 maxlen: 24
                          156.240.128.0/18 maxlen: 24
                          156.249.32.0/20 maxlen: 24
                          156.253.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110736 (0x1b090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  1 12:07:22 2026 GMT
            Not After : May 11 12:07:22 2026 GMT
        Subject: CN=69f4977f-0e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:0f:2f:6f:81:7e:84:58:ac:58:86:7d:16:
                    c6:65:85:27:a9:88:5e:9f:15:cc:cf:2d:f5:e4:2d:
                    4f:7e:22:ea:df:51:70:9f:a8:10:d2:c3:f7:fc:c8:
                    87:4f:7a:70:bd:f4:2d:6b:eb:4c:9d:8a:4f:e4:27:
                    81:19:dc:ca:2a:2c:6d:f7:11:13:42:39:4e:4c:13:
                    e1:d5:6a:31:04:56:48:d0:d0:63:c6:90:4a:77:ea:
                    47:84:c6:10:3d:1c:2b:47:81:16:a4:b4:51:0d:8d:
                    cc:64:76:b9:23:15:69:e2:2a:b9:00:51:03:d0:48:
                    a9:9d:90:ac:a6:ed:e3:69:b5:f2:57:f8:2f:e1:02:
                    e5:ca:9e:f7:d7:e8:b2:29:0d:ac:6b:ed:54:3e:07:
                    a9:89:1d:a4:8c:b2:76:3a:b3:2a:5c:48:54:e1:9b:
                    c0:a5:19:1c:43:85:c6:61:8f:ff:0b:0b:ed:64:3b:
                    68:9a:ce:41:73:39:bf:17:30:77:1f:22:86:7d:4d:
                    04:20:d5:14:44:dd:a7:d2:6c:41:c1:1d:69:01:0c:
                    91:e0:ed:5f:86:95:e1:54:5c:ae:87:1a:98:5d:8e:
                    38:ab:a3:56:bf:48:0a:33:cb:1d:af:37:ec:04:5a:
                    cb:4e:ea:67:c1:98:c2:50:06:3f:f8:74:28:37:f8:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:8B:10:09:D1:8A:FD:24:B3:43:4F:35:55:8B:93:76:CC:AE:47
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B61CDE455611F1B69D04FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.22.0/23
                  156.230.32.0/20
                  156.230.64.0/18
                  156.232.16.0/20
                  156.240.128.0/18
                  156.249.32.0/20
                  156.253.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:4c:53:1f:f0:c0:2d:fa:d0:81:17:7a:3a:42:fe:97:b4:
         1d:f4:b1:fe:48:0a:66:7d:65:bd:92:ef:5f:29:0b:70:c6:fc:
         0d:f4:e5:b8:55:9f:e7:77:e5:59:17:2f:ec:87:d7:af:df:bd:
         ee:d3:85:fb:ae:dc:4f:89:09:84:cb:6c:ca:59:da:f7:e5:33:
         71:7a:fa:1a:da:5d:3d:07:33:0d:ca:6d:19:9e:29:af:36:e1:
         7f:cb:67:af:99:0a:d9:b6:da:0d:15:eb:b7:68:01:54:76:0a:
         e3:de:4a:32:8a:97:18:a8:94:12:a1:40:c2:1e:39:33:fd:a9:
         51:d6:8a:50:35:d2:79:9a:2c:13:24:db:4d:e3:74:d7:6a:1d:
         e1:14:4c:4c:13:db:54:b0:38:ab:90:6b:33:73:b7:9a:51:1e:
         c1:f8:4f:cb:d2:72:f0:f9:38:3e:79:0f:f0:7a:13:58:96:91:
         d0:57:23:65:6b:85:66:b9:7a:c8:47:c7:b2:ed:6d:ed:ce:fe:
         34:ed:bb:f9:ee:31:d6:38:4b:30:01:ba:eb:b6:7b:fb:61:a5:
         90:76:e4:dc:83:be:50:4d:81:6e:2b:fd:6f:4e:43:6d:82:72:
         82:27:d0:d0:07:8f:5c:8b:3d:e2:51:67:74:6e:93:72:c8:7e:
         6a:ad:19:82
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAbCQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMTIwNzIyWhcNMjYwNTExMTIwNzIyWjAYMRYw
FAYDVQQDEw02OWY0OTc3Zi0wZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4uwPL2+BfoRYrFiGfRbGZYUnqYhenxXMzy315C1PfiLq31Fwn6gQ0sP3
/MiHT3pwvfQta+tMnYpP5CeBGdzKKixt9xETQjlOTBPh1WoxBFZI0NBjxpBKd+pH
hMYQPRwrR4EWpLRRDY3MZHa5IxVp4iq5AFED0EipnZCspu3jabXyV/gv4QLlyp73
1+iyKQ2sa+1UPgepiR2kjLJ2OrMqXEhU4ZvApRkcQ4XGYY//CwvtZDtoms5Bczm/
FzB3HyKGfU0EINUURN2n0mxBwR1pAQyR4O1fhpXhVFyuhxqYXY44q6NWv0gKM8sd
rzfsBFrLTupnwZjCUAY/+HQoN/hDtwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFL81
ixAJ0Yr9JLNDTzVVi5N2zK5HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MUI2MUNERTQ1NTYxMUYxQjY5RDA0RkFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBnOMWAwQEnOYgAwQGnOZAAwQE
nOgQAwQGnPCAAwQEnPkgAwQEnP0QMA0GCSqGSIb3DQEBCwUAA4IBAQCGLkxTH/DA
LfrQgRd6OkL+l7Qd9LH+SApmfWW9ku9fKQtwxvwN9OW4VZ/nd+VZFy/sh9ev373u
04X7rtxPiQmEy2zKWdr35TNxevoa2l09BzMNym0ZnimvNuF/y2evmQrZttoNFeu3
aAFUdgrj3koyipcYqJQSoUDCHjkz/alR1opQNdJ5miwTJNtN43TXah3hFExME9tU
sDirkGszc7eaUR7B+E/L0nLw+Tg+eQ/wehNYlpHQVyNla4VmuXrIR8ey7W3tzv40
7bv57jHWOEswAbrrtnv7YaWQduTcg75QTYFuK/1vTkNtgnKCJ9DQB49ciz3iUWd0
bpNyyH5qrRmC
-----END CERTIFICATE-----
Generated at Sat May 9 12:31:59 2026 by rpki-client