Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5636DC7AA111F1B93B8FD4CE1D38B0.roa
File:                     9B5636DC7AA111F1B93B8FD4CE1D38B0.roa (raw, json)
Hash identifier:          TYJ6qxuh3Qg03kAam+Cmnvl1ESuXtAYw3BwPa7L0wpY=
Subject key identifier:   C1:2F:04:D7:8D:9E:48:91:80:40:27:C3:BF:C2:DB:9C:DD:DC:65:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C386
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5636DC7AA111F1B93B8FD4CE1D38B0.roa
Signing time:             Wed 08 Jul 2026 07:49:54 +0000
ROA not before:           Wed 08 Jul 2026 07:49:50 +0000
ROA not after:            Sat 15 Aug 2026 07:49:50 +0000
asID:                     135377
IP address blocks:        156.229.16.0/24 maxlen: 24
                          156.229.17.0/24 maxlen: 24
                          156.229.18.0/24 maxlen: 24
                          156.229.19.0/24 maxlen: 24
                          156.229.20.0/24 maxlen: 24
                          156.229.21.0/24 maxlen: 24
                          156.229.22.0/24 maxlen: 24
                          156.229.23.0/24 maxlen: 24
                          156.229.24.0/23 maxlen: 24
                          156.229.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115590 (0x1c386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  8 07:49:50 2026 GMT
            Not After : Aug 15 07:49:50 2026 GMT
        Subject: CN=6a4e0122-70f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:08:10:65:b8:a7:33:d8:11:1c:a1:52:8e:
                    10:30:40:00:6d:27:f3:5a:eb:b9:3d:23:23:d4:5b:
                    d2:84:1a:f4:8d:1e:2a:87:a4:ed:97:d5:66:a0:b1:
                    14:ae:55:a0:73:2a:65:14:0f:c7:ee:e9:5d:d5:ba:
                    97:80:c8:3b:c2:5f:40:b0:f5:72:5a:7d:29:c9:6b:
                    70:76:45:e0:80:53:4f:66:a2:d9:2a:09:9b:68:ad:
                    00:20:34:ef:02:c3:8c:f4:4f:4f:ae:08:85:19:22:
                    2e:e3:32:4e:41:a2:1a:97:d9:f8:48:e5:31:44:c7:
                    96:cb:3b:36:bb:8e:ff:4c:92:e1:60:af:b6:6a:f1:
                    00:7c:05:98:20:2b:58:9d:fa:23:8e:e9:df:62:70:
                    3d:8e:36:0b:86:51:b9:1b:59:01:88:1c:eb:52:02:
                    5f:fa:38:9d:5a:0f:6d:ea:f8:fb:e9:5d:88:35:2b:
                    9e:b0:dd:cc:3a:ff:d7:c4:95:f7:11:5b:75:7f:22:
                    dd:d0:7b:00:b9:7e:62:f0:a4:95:bd:8b:a5:32:f9:
                    7a:ae:d9:f3:f3:b2:c0:bb:5e:82:ec:3d:6b:db:31:
                    a0:14:61:2d:33:62:00:24:6c:44:28:3a:ba:b3:a0:
                    9f:bf:f5:34:05:95:7b:2d:be:b5:a1:cb:b6:99:da:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2F:04:D7:8D:9E:48:91:80:40:27:C3:BF:C2:DB:9C:DD:DC:65:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5636DC7AA111F1B93B8FD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.16.0-156.229.25.255

    Signature Algorithm: sha256WithRSAEncryption
         ab:10:e7:f1:03:7f:fe:96:9d:ef:ba:9b:bc:49:e4:0b:92:e8:
         49:78:e0:88:56:d5:c2:b1:e8:41:65:98:ce:58:c8:1f:dc:eb:
         64:bf:19:21:c9:dc:c7:ed:19:c8:7e:79:70:0c:19:e1:91:0c:
         19:e9:5f:6c:cf:6e:07:a0:a3:57:7a:ac:89:4a:13:71:29:37:
         5a:8b:b1:9c:23:50:c5:ec:bc:46:a1:4e:f3:da:d8:0a:bc:9d:
         73:6a:e5:e6:1a:36:60:9b:a1:27:1c:ac:fd:50:c1:74:ea:4c:
         4c:50:c6:39:94:8f:20:57:7d:2e:a9:ea:84:f3:7d:b5:d3:03:
         fa:37:1a:8b:54:c4:86:aa:61:5e:e0:0f:10:70:39:df:42:d0:
         62:d6:87:24:f3:76:ef:75:2a:e2:78:6a:fb:a5:f1:21:01:d5:
         2f:20:28:85:1a:92:b7:20:98:13:08:f9:d7:b5:17:04:32:4c:
         01:ca:e8:87:fb:d2:c7:fb:58:4a:a8:08:1e:cb:54:63:91:fa:
         c0:9d:e2:67:34:64:ee:3a:94:74:ae:63:9e:2a:79:d0:1a:4b:
         71:70:f5:85:75:35:06:dd:45:bb:9a:07:b4:a0:2a:67:2a:26:
         0c:22:0f:9c:d8:fc:1c:92:a2:e8:c2:4f:55:ff:46:85:bb:5c:
         b0:ef:4a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:45 2026 by rpki-client