Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92440CCA5D8911F18B349BBCCE1D38B0.roa
File:                     92440CCA5D8911F18B349BBCCE1D38B0.roa (raw, json)
Hash identifier:          iWPwoAzI93+fUGg4yU7G8Kg5x2XREQV5B2mqtEiEXNU=
Subject key identifier:   A5:25:BC:AA:6F:1C:C4:BD:6D:CB:8D:FE:59:19:6B:B6:3B:FA:CE:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BB1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92440CCA5D8911F18B349BBCCE1D38B0.roa
Signing time:             Mon 01 Jun 2026 07:14:47 +0000
ROA not before:           Mon 01 Jun 2026 07:14:43 +0000
ROA not after:            Sat 12 Sep 2026 07:14:43 +0000
asID:                     210331
IP address blocks:        156.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113435 (0x1bb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  1 07:14:43 2026 GMT
            Not After : Sep 12 07:14:43 2026 GMT
        Subject: CN=6a1d3167-b731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:f9:70:84:9a:8e:ac:83:5f:66:a0:46:4a:
                    3c:f6:ed:b6:e6:29:f1:59:50:d6:14:1b:46:1f:57:
                    b7:d1:b9:b4:2e:c7:d9:a5:02:84:04:bb:95:78:8f:
                    3a:52:d4:ed:9f:0c:16:57:2b:8d:c2:7b:73:b2:46:
                    2c:4d:39:fa:2e:45:ac:6c:46:57:ca:06:82:da:15:
                    fa:3f:9f:13:ae:8a:54:38:25:0e:db:34:ae:25:20:
                    29:91:c0:b9:1c:04:f8:f5:bf:ba:57:0e:65:f9:23:
                    63:d6:18:ab:69:11:b9:37:26:be:d0:c3:ed:6b:a1:
                    3f:81:95:c2:35:83:29:9e:4e:4c:11:d0:ec:72:e4:
                    c7:44:ca:f6:3c:cf:3e:a4:14:b7:39:3b:3d:3b:68:
                    0a:80:d5:ff:bb:a3:b1:e7:eb:45:8a:01:93:ea:73:
                    14:e1:d0:26:34:cc:ad:d0:ba:53:c1:d1:22:1d:65:
                    f4:95:a0:eb:c9:52:67:9d:72:9c:cf:12:eb:82:21:
                    b4:11:81:35:d7:80:10:c9:fd:41:22:da:b6:1f:c6:
                    1c:13:ac:aa:a7:bc:13:cf:e3:a7:1d:b9:a8:4f:10:
                    34:a7:5f:c9:7a:35:3d:18:75:0b:bf:a6:4b:7e:80:
                    ab:f4:a8:2b:9b:70:36:68:64:9b:ec:9e:3c:84:ef:
                    86:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:25:BC:AA:6F:1C:C4:BD:6D:CB:8D:FE:59:19:6B:B6:3B:FA:CE:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92440CCA5D8911F18B349BBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:36:cc:a9:70:82:34:41:70:5a:d6:41:86:77:52:2c:7f:
         7f:5c:59:7b:d0:1f:d9:7e:0d:a4:19:ec:b5:7e:99:83:df:ea:
         e1:62:62:62:2f:cd:6c:92:d3:aa:65:b2:20:b3:0f:ae:41:19:
         27:ce:ea:9d:9c:e1:78:18:70:c2:22:7e:8a:8e:82:a3:f4:6e:
         f2:34:be:47:fe:4d:57:6b:32:68:6a:39:49:bc:5a:48:d1:55:
         5f:35:3c:0c:07:48:6a:ee:aa:2a:a4:0a:a0:ef:cb:85:72:96:
         81:8d:35:c8:e5:50:34:2b:1a:dd:cb:49:da:7f:5a:2b:81:43:
         7a:d5:db:94:c0:8d:ab:0a:cd:3e:81:6a:6e:fe:81:7f:af:c1:
         cb:e9:6d:29:f3:2f:10:b3:fd:03:af:a2:59:5b:ad:8f:80:7d:
         9e:01:ae:99:e1:62:18:3b:7d:8c:68:6d:bd:5e:fb:6e:e3:93:
         4e:aa:ee:f0:ad:bc:44:18:24:e3:5c:5b:1e:77:94:7d:6d:91:
         8a:79:58:cc:a8:a9:db:c2:f6:0a:d0:ee:8b:bb:c9:60:f8:0d:
         57:d0:b8:8c:cc:2f:85:59:a0:0a:28:93:f8:1a:03:b3:39:1e:
         c5:6e:36:17:d8:90:98:0e:bf:06:0e:24:28:2c:d3:18:e5:d0:
         de:38:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:56 2026 by rpki-client