Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5830B26955811F18F4FA5ECCE1D38B0.roa
File:                     B5830B26955811F18F4FA5ECCE1D38B0.roa (raw, json)
Hash identifier:          gCPt9ciY5NFyPRYQx9UhR9V1cN8Khfp+07Sh+8lG82A=
Subject key identifier:   4F:6E:DB:2B:FD:1D:11:F2:84:27:20:B1:CB:42:77:C6:90:30:48:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5830B26955811F18F4FA5ECCE1D38B0.roa
Signing time:             Tue 11 Aug 2026 07:46:06 +0000
ROA not before:           Tue 11 Aug 2026 07:46:02 +0000
ROA not after:            Thu 20 Aug 2026 07:46:02 +0000
asID:                     54801
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.225.79.0/24 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117601 (0x1cb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 07:46:02 2026 GMT
            Not After : Aug 20 07:46:02 2026 GMT
        Subject: CN=6a7ad33e-e790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:db:90:50:4f:7b:16:65:56:69:e7:9e:5b:
                    73:5e:c3:2e:7c:9d:79:4c:84:96:c7:85:f1:3a:ee:
                    75:31:ad:df:3c:c7:a1:40:d0:ce:39:2c:d1:ea:9f:
                    c7:c1:72:c9:e4:e2:b2:5e:49:d9:4d:3f:f5:6c:77:
                    df:2a:79:63:aa:61:01:20:c7:ae:12:80:ab:a0:9b:
                    1e:06:e3:5c:03:ef:d2:7c:5b:a9:ba:f3:65:cd:d0:
                    2a:c9:44:27:60:24:02:bd:60:e5:47:a0:5e:30:a3:
                    43:69:25:af:ee:8d:cc:00:b9:f5:ed:d0:98:73:98:
                    a9:de:2c:6b:a8:1c:a8:47:69:0a:5c:53:19:e0:61:
                    e8:90:8a:a9:e4:da:6f:4f:d6:6e:08:90:97:dd:3c:
                    55:cd:21:fb:4c:1d:56:28:09:2f:d7:fe:7e:d9:09:
                    fc:39:b6:47:0c:36:e0:20:4b:34:eb:f8:20:56:ab:
                    30:d3:4f:e9:d8:4b:a6:52:0f:4a:e9:e2:20:70:c6:
                    64:06:38:6f:a9:b9:c6:3d:ae:c7:da:75:59:7a:f4:
                    0b:15:7d:87:0a:f1:62:c5:af:a1:d1:db:e6:b3:2a:
                    2a:5e:e3:ab:8c:4e:b3:4a:d0:ac:9a:fd:9c:eb:9e:
                    7e:d1:c6:e7:a1:64:ca:bb:f9:0e:0b:8a:70:22:b0:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6E:DB:2B:FD:1D:11:F2:84:27:20:B1:CB:42:77:C6:90:30:48:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5830B26955811F18F4FA5ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:ab:5f:21:f9:89:b2:e4:d1:68:80:80:f0:b8:60:19:42:
         40:9d:09:e2:f5:e2:6c:91:bd:5a:f1:f9:5b:c9:91:a0:13:ec:
         c0:71:29:a6:fc:6d:c9:8a:3a:aa:5c:93:fd:f1:f0:1d:c0:aa:
         c4:cf:3a:91:98:a1:71:ca:bb:0d:01:05:ba:3d:bf:38:27:dd:
         26:7f:51:fa:fd:a7:d8:f9:2e:ad:b7:25:65:f0:a6:36:53:e9:
         26:76:34:33:3e:fc:bc:b7:ad:d6:5c:90:a5:c9:c5:27:13:f9:
         81:82:15:e8:40:14:10:66:45:35:9b:85:c2:4e:20:13:17:d8:
         5c:7b:18:1c:66:3e:54:78:7b:de:8e:e6:ff:af:91:2d:cc:95:
         ae:be:c1:19:ed:a8:cc:98:dc:cc:06:23:a0:cb:07:24:1b:ae:
         03:fd:1e:55:2d:83:5e:fc:f6:90:4a:c8:69:1f:42:07:c6:e9:
         b7:79:94:ab:4f:51:0b:ea:e7:96:7e:de:b2:6f:a7:b7:d5:d2:
         22:8c:16:c1:83:45:ca:2a:bf:c8:d3:9d:d0:f2:71:49:4f:a5:
         d5:eb:3b:cb:dc:ff:3d:23:61:62:ae:e8:fc:82:d3:95:25:b8:
         7e:0b:49:6c:f9:5f:61:cf:75:00:94:99:9a:cd:0f:3d:93:66:
         a5:61:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:33 2026 by rpki-client