Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A26FD8542A11F189DE1CACCE1D38B0.roa
File:                     62A26FD8542A11F189DE1CACCE1D38B0.roa (raw, json)
Hash identifier:          VdlzFCyNls6HszyxM4DShRF6qRbIGJ8Np5LWtBkzAYU=
Subject key identifier:   DC:89:8F:3D:3F:B9:5D:16:51:36:DE:AE:E4:BA:C2:63:F5:F4:88:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B61D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A26FD8542A11F189DE1CACCE1D38B0.roa
Signing time:             Wed 20 May 2026 09:00:45 +0000
ROA not before:           Wed 20 May 2026 09:00:40 +0000
ROA not after:            Mon 06 Nov 2028 09:00:40 +0000
asID:                     17561
IP address blocks:        156.235.34.0/24 maxlen: 24
                          156.235.35.0/24 maxlen: 24
                          156.235.36.0/24 maxlen: 24
                          156.235.37.0/24 maxlen: 24
                          156.235.38.0/24 maxlen: 24
                          156.235.39.0/24 maxlen: 24
                          156.235.40.0/24 maxlen: 24
                          156.235.41.0/24 maxlen: 24
                          156.235.42.0/24 maxlen: 24
                          156.235.43.0/24 maxlen: 24
                          156.235.44.0/24 maxlen: 24
                          156.235.45.0/24 maxlen: 24
                          156.235.46.0/24 maxlen: 24
                          156.235.47.0/24 maxlen: 24
                          156.235.64.0/24 maxlen: 24
                          156.235.65.0/24 maxlen: 24
                          156.235.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112157 (0x1b61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 20 09:00:40 2026 GMT
            Not After : Nov  6 09:00:40 2028 GMT
        Subject: CN=6a0d783d-ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:4c:43:ee:fd:d5:7b:1c:be:d0:70:2d:6d:
                    df:de:ae:e9:aa:42:49:1a:4b:3f:fe:43:a2:a3:6c:
                    58:8e:22:04:b2:ee:dd:8d:f9:04:b8:8b:38:99:89:
                    f2:2f:ca:47:a1:0c:2b:50:b2:53:30:3e:b7:00:21:
                    f2:22:7a:39:5b:a8:b4:c2:21:7c:0e:8d:e6:61:b1:
                    76:c2:66:74:b5:d0:e1:d5:eb:84:6d:5d:57:50:cf:
                    9d:0f:42:ee:aa:f2:4d:5b:f7:e6:92:d5:11:da:bb:
                    3e:3d:42:54:5c:8e:fc:0d:d4:c4:9a:65:b7:bc:31:
                    e9:6c:36:e6:81:ff:c6:cb:db:e7:5b:c0:06:5f:bf:
                    80:b8:94:b1:37:75:f8:ce:07:50:95:7a:c4:30:28:
                    e6:e0:db:33:c8:aa:28:f4:e3:bc:22:32:38:e9:b6:
                    a8:75:95:1b:13:16:e9:f5:fb:41:c0:0f:43:56:0b:
                    b8:58:63:ef:7f:39:28:2a:cd:55:82:4c:43:04:db:
                    02:34:9d:82:1f:92:97:c5:06:5b:a6:89:ec:12:00:
                    ad:a2:d9:8c:3c:aa:73:1b:8f:03:cf:68:e4:26:d5:
                    29:35:7f:76:4e:d9:2b:58:ad:c2:e2:33:42:61:5e:
                    9b:75:2b:c9:cc:2c:07:ce:23:49:69:15:e8:9c:9e:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:8F:3D:3F:B9:5D:16:51:36:DE:AE:E4:BA:C2:63:F5:F4:88:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A26FD8542A11F189DE1CACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.34.0-156.235.47.255
                  156.235.64.0-156.235.66.255

    Signature Algorithm: sha256WithRSAEncryption
         74:24:b6:59:fa:6a:ac:47:46:ca:57:73:1f:4d:a6:f3:6d:a7:
         f4:58:21:8b:0d:eb:bd:f9:7d:4b:bf:60:2a:42:be:51:42:57:
         0e:62:3e:2a:5f:59:be:a3:8d:cc:4e:3f:bc:af:72:c4:66:0f:
         c4:52:0f:2d:a3:6a:2e:0f:a2:db:f5:a7:eb:e4:b1:31:6a:1a:
         f0:70:0c:87:a2:dc:47:69:eb:3e:6c:bd:4f:03:68:7d:ca:82:
         9a:5e:90:bc:f7:7c:d5:53:36:a4:2d:92:68:bb:89:b3:d2:7a:
         f0:a3:36:dd:3b:db:6e:89:f4:20:c1:88:70:80:01:18:df:9d:
         80:b7:a1:c5:a3:a0:80:1e:67:5f:4f:4c:82:eb:41:34:1b:fe:
         ee:5b:43:a5:ef:2c:56:39:bd:8e:42:d1:8c:41:af:fe:35:f5:
         0a:aa:3c:2c:a8:b1:d6:26:f7:6f:7d:46:b0:88:5e:15:72:fb:
         af:d8:2a:26:27:31:ef:fb:e9:01:e8:1b:96:5c:8f:ba:d8:3b:
         06:64:19:f5:5a:9c:14:c6:f2:c7:0e:b6:dd:55:2d:67:8e:b2:
         a2:47:d7:57:ae:ed:2c:ad:b9:53:d8:a8:67:e6:78:b5:53:d5:
         09:66:82:78:06:ea:75:75:a4:37:27:7a:95:ae:70:04:67:20:
         ff:c0:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:35 2026 by rpki-client