Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F84F87276E411F18C3F9B18CF1D38B0.roa
File:                     8F84F87276E411F18C3F9B18CF1D38B0.roa (raw, json)
Hash identifier:          om2gYrMopKmkt+uck033HT9/7NVXd7MU7/g26nzs7Rk=
Subject key identifier:   F5:F6:F9:C1:B2:A3:A2:65:1B:C4:03:90:68:40:80:09:13:D9:88:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C288
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F84F87276E411F18C3F9B18CF1D38B0.roa
Signing time:             Fri 03 Jul 2026 13:39:06 +0000
ROA not before:           Fri 03 Jul 2026 13:39:01 +0000
ROA not after:            Mon 10 Aug 2026 13:39:01 +0000
asID:                     154177
IP address blocks:        156.244.13.0/24 maxlen: 24
                          156.244.14.0/24 maxlen: 24
                          156.244.15.0/24 maxlen: 24
                          156.244.23.0/24 maxlen: 24
                          156.244.24.0/24 maxlen: 24
                          156.244.44.0/24 maxlen: 24
                          156.244.45.0/24 maxlen: 24
                          156.244.46.0/24 maxlen: 24
                          156.244.47.0/24 maxlen: 24
                          156.244.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115336 (0x1c288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  3 13:39:01 2026 GMT
            Not After : Aug 10 13:39:01 2026 GMT
        Subject: CN=6a47bb7a-81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:e1:6a:40:6b:91:b1:3c:e9:e4:a4:77:9f:
                    50:f4:08:7b:6d:ca:26:3d:12:56:9d:de:bf:0b:fc:
                    b7:7d:84:b8:f3:ce:7e:31:e0:2c:af:ca:f6:24:3a:
                    9e:2f:50:68:48:58:8f:03:4b:6e:51:5f:a0:a4:7a:
                    61:fb:eb:a1:4b:d0:82:98:04:ef:cc:30:2e:dd:a2:
                    f7:a3:a7:83:d2:dd:55:22:50:4d:f0:1e:76:55:45:
                    53:ac:55:39:5e:2e:c4:0b:89:4d:95:00:e8:be:a4:
                    96:20:81:89:59:14:5d:a6:57:76:76:9b:a7:3b:27:
                    5c:aa:6c:1c:9b:51:65:1b:51:7a:ca:27:36:0c:7b:
                    bc:2e:8b:23:7d:44:61:99:94:ba:ee:3a:66:f7:64:
                    de:d3:14:23:d6:a2:77:19:23:59:f8:63:dc:4e:1f:
                    9f:2d:30:05:c4:5d:0b:8d:64:51:4e:79:74:c0:21:
                    1b:44:ac:32:42:6d:6f:f8:cf:f0:86:7c:9b:06:51:
                    b4:39:65:ae:70:a6:70:50:44:b0:f9:bc:ef:be:9f:
                    55:f8:94:7d:53:ab:18:58:d1:f8:97:3c:f4:ba:c5:
                    37:e0:fe:47:44:99:82:f0:ef:c0:75:54:6d:4c:34:
                    21:76:19:ec:fe:a7:4d:29:d7:92:c5:8f:59:5e:c0:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:F9:C1:B2:A3:A2:65:1B:C4:03:90:68:40:80:09:13:D9:88:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F84F87276E411F18C3F9B18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.13.0-156.244.15.255
                  156.244.23.0-156.244.24.255
                  156.244.44.0-156.244.48.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:8c:6b:b9:05:b4:c4:ca:af:18:3d:3a:0d:6a:2b:cd:12:
         4f:2d:2f:89:32:4c:ec:39:0e:3d:86:33:72:60:da:f9:54:5a:
         55:4d:dc:d0:63:f0:37:e3:09:29:3c:94:1d:06:12:fb:25:d9:
         6b:d4:14:eb:2d:43:1b:91:0a:0a:f7:55:cd:81:41:aa:7a:b2:
         5e:be:37:c3:7c:c1:f6:44:9e:26:02:96:c5:65:cd:88:28:48:
         0d:a6:ee:d5:f7:9a:82:ce:8a:e6:1d:25:65:93:8e:6c:24:cb:
         7f:e7:88:c9:8b:65:2c:81:e9:c9:af:63:1d:d0:4f:72:66:fb:
         cc:97:dd:8b:e1:0d:88:d0:7b:66:22:9a:ff:d9:66:1b:67:8f:
         db:e5:af:a9:13:cf:f9:a7:4c:dc:26:d4:82:36:53:b9:ae:f9:
         5b:80:57:bb:78:2c:75:cc:6c:7c:29:39:f6:77:08:30:72:fa:
         eb:75:6a:1b:6b:73:c0:3e:d1:40:f2:9b:ad:7e:1d:ed:35:dc:
         7f:c0:a7:22:28:f3:49:0d:0f:53:2c:9b:25:97:c4:5a:ba:00:
         ca:fd:19:8c:65:2d:ba:39:ed:b4:e8:9d:dd:d8:4c:32:11:6d:
         ba:13:e2:8e:8d:89:01:78:4f:c3:4e:ab:53:20:ea:81:bf:14:
         5b:80:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:41 2026 by rpki-client