Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B6BC34E71FA11F18480A5BDCE1D38B0.roa
File:                     9B6BC34E71FA11F18480A5BDCE1D38B0.roa (raw, json)
Hash identifier:          j4mv8yxZIYDKhPtbAEWRP/XISiDmFe1vvCype99dhUk=
Subject key identifier:   A6:6B:C1:8F:94:23:58:91:A5:59:38:C8:2A:BF:5B:93:97:F8:0C:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C0C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B6BC34E71FA11F18480A5BDCE1D38B0.roa
Signing time:             Sat 27 Jun 2026 07:34:19 +0000
ROA not before:           Sat 27 Jun 2026 07:34:14 +0000
ROA not after:            Mon 31 Aug 2026 07:34:14 +0000
asID:                     399077
IP address blocks:        156.251.47.0/24 maxlen: 24
                          156.251.50.0/24 maxlen: 24
                          156.251.51.0/24 maxlen: 24
                          156.251.52.0/24 maxlen: 24
                          156.251.53.0/24 maxlen: 24
                          156.251.54.0/24 maxlen: 24
                          156.251.55.0/24 maxlen: 24
                          156.251.56.0/24 maxlen: 24
                          156.251.57.0/24 maxlen: 24
                          156.251.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114886 (0x1c0c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 27 07:34:14 2026 GMT
            Not After : Aug 31 07:34:14 2026 GMT
        Subject: CN=6a3f7cfb-cb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:73:36:6a:3f:3e:a5:eb:7e:36:61:5a:73:
                    7a:65:d8:15:80:5b:4b:f6:16:8a:87:f9:b8:e1:d6:
                    42:46:5b:fa:fa:80:57:43:91:74:95:5c:da:d2:59:
                    e5:75:27:94:dd:cd:58:f5:da:25:d1:ad:73:3a:3a:
                    ea:a9:fa:e9:a2:cf:8a:ad:83:97:f8:ed:9d:e1:59:
                    6b:39:2c:b7:f0:88:99:74:33:de:73:2b:e2:78:e8:
                    23:10:4d:82:8d:80:03:27:5c:59:ef:76:b0:ab:6d:
                    6e:3d:05:01:9f:8c:69:02:ee:3e:f3:e0:0a:72:58:
                    be:2e:af:0e:cb:71:e3:62:30:52:ce:9c:95:22:bf:
                    5d:36:4c:ff:a7:9c:08:3a:8c:78:84:33:31:9e:b5:
                    e7:ee:7a:8f:83:cc:a8:2a:b2:4a:15:c7:eb:db:a4:
                    24:24:da:79:ec:7b:08:a2:45:bb:0a:8f:a6:11:e3:
                    2f:ce:13:39:60:73:d2:94:e7:7b:60:0e:4d:63:97:
                    04:30:ae:e3:dc:09:1a:85:51:01:bb:b7:89:dd:52:
                    c2:ec:60:2f:bb:4d:9c:7f:29:bf:45:f2:7c:69:c4:
                    fe:63:d8:2b:a2:2e:79:45:19:8b:74:0e:e6:7d:f4:
                    b9:fa:6f:bc:60:a7:6e:a9:7a:2f:e5:eb:a9:ce:fc:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:C1:8F:94:23:58:91:A5:59:38:C8:2A:BF:5B:93:97:F8:0C:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B6BC34E71FA11F18480A5BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.47.0/24
                  156.251.50.0-156.251.58.255

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:4f:a6:a1:26:d8:15:be:84:e3:c7:1b:e5:fa:af:88:70:
         fe:a7:e8:0f:88:7e:dc:80:2c:2d:ef:cf:cc:0c:37:8d:f7:be:
         d5:b4:80:89:42:d7:35:8e:6a:13:40:83:96:d7:31:27:e7:95:
         07:78:23:bb:04:55:12:8f:88:5e:ab:65:3d:26:e1:0c:96:1c:
         83:80:10:0c:49:46:50:29:1a:47:47:60:9f:e5:b0:18:ab:fa:
         23:04:20:eb:f3:50:98:6b:fd:a3:9f:0b:c3:1b:eb:b5:3c:a1:
         0c:66:4d:7d:1b:6b:cd:a6:b7:a3:26:d0:c1:da:21:67:72:38:
         c7:68:74:b6:47:c8:e3:a1:e8:58:a7:f4:fb:02:2c:9f:65:9f:
         44:96:7c:1a:8c:04:d4:18:e6:91:09:77:2b:ac:98:08:bf:83:
         23:fe:99:0a:64:09:c1:df:ae:a2:03:5d:48:63:65:54:68:3e:
         04:f4:76:2f:96:f2:60:9a:c1:53:01:ce:1d:bb:fd:d3:04:86:
         39:c5:4d:48:69:e5:4f:7b:36:71:c1:fa:1a:61:33:5e:e3:e6:
         ae:20:da:85:d6:58:80:8c:b4:cf:bd:73:af:2e:69:b8:92:98:
         bb:e9:01:56:d3:88:8d:71:56:9b:70:6a:c9:ee:23:5e:5a:d8:
         e0:b0:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:41 2026 by rpki-client