Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E13F04B8954E11F1AE1408B4CE1D38B0.roa
File:                     E13F04B8954E11F1AE1408B4CE1D38B0.roa (raw, json)
Hash identifier:          EFYiN9CYxzo1RdY4f/GsyJe5ejnBQ57YgGCb2lC8MAA=
Subject key identifier:   A4:34:CB:5A:2A:F4:D5:54:A7:C6:48:4E:19:BB:3E:7F:40:33:05:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E13F04B8954E11F1AE1408B4CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 06:35:45 +0000
ROA not before:           Tue 11 Aug 2026 06:35:41 +0000
ROA not after:            Fri 18 Sep 2026 06:35:41 +0000
asID:                     22773
IP address blocks:        156.229.63.0/24 maxlen: 24
                          156.233.63.0/24 maxlen: 24
                          156.233.126.0/24 maxlen: 24
                          156.238.188.0/24 maxlen: 24
                          156.238.190.0/23 maxlen: 24
                          156.239.57.0/24 maxlen: 24
                          156.239.58.0/23 maxlen: 24
                          156.239.61.0/24 maxlen: 24
                          156.239.62.0/23 maxlen: 24
                          156.239.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117564 (0x1cb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 06:35:41 2026 GMT
            Not After : Sep 18 06:35:41 2026 GMT
        Subject: CN=6a7ac2c1-96f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:b2:c6:cb:68:fb:35:85:61:48:4f:c6:60:
                    eb:01:ff:fb:a3:c5:bd:08:28:86:d4:b3:60:b0:b4:
                    61:54:ea:e4:c2:91:31:2c:c7:0c:0d:6a:82:8e:f6:
                    b7:ef:76:79:58:1c:eb:b4:b7:66:5b:d5:33:58:6c:
                    b2:05:05:70:d8:59:d9:d0:d9:73:76:fa:5b:6b:ab:
                    bc:8b:2b:3c:1c:25:93:34:86:5c:43:a7:6c:67:ea:
                    96:b4:ed:77:16:62:cd:76:14:6d:a7:b6:aa:ad:2d:
                    bd:2a:5e:13:a1:e9:5b:9a:4f:1b:07:29:88:fa:82:
                    9a:6b:ce:2f:12:c3:0f:44:d5:08:1d:b3:43:de:ce:
                    e1:e7:2f:74:8f:67:fe:1f:16:08:33:9b:8a:4c:cd:
                    44:b4:ab:66:38:33:69:e3:e7:e7:e4:49:53:51:6b:
                    b9:55:45:b9:c6:38:42:82:93:05:ed:f1:10:fa:0f:
                    18:af:7e:0c:76:e0:b9:cd:f8:30:6b:97:12:84:c2:
                    48:f1:e5:40:32:65:ec:a0:11:1b:89:cf:05:2e:8a:
                    a2:29:eb:87:5f:c9:15:98:e5:e4:ef:0f:fc:fa:41:
                    bb:bb:c8:6b:46:3b:89:14:a7:e3:39:96:db:09:e1:
                    f2:70:50:9b:82:91:c4:dc:24:cb:ff:f0:b1:3e:d4:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:CB:5A:2A:F4:D5:54:A7:C6:48:4E:19:BB:3E:7F:40:33:05:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E13F04B8954E11F1AE1408B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.63.0/24
                  156.233.63.0/24
                  156.233.126.0/24
                  156.238.188.0/24
                  156.238.190.0/23
                  156.239.57.0-156.239.59.255
                  156.239.61.0-156.239.63.255
                  156.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:50:44:27:11:da:10:ad:32:eb:57:e8:e2:13:6e:db:94:ca:
         2a:16:f2:2f:36:86:e1:1a:7c:df:34:19:5e:4d:c2:15:f6:2a:
         ad:74:f3:a5:e1:00:f8:06:e4:1a:29:5a:0f:c2:f6:fb:96:92:
         03:c3:88:f3:33:32:19:d3:97:07:04:90:ef:f9:ae:75:f8:ad:
         25:36:fc:ff:6e:4d:c5:0d:f1:09:ff:50:a7:64:54:60:17:da:
         bb:35:84:02:77:80:ba:de:e8:6a:b3:46:a8:14:5b:f4:b1:73:
         8d:55:1c:65:66:5b:89:d6:32:b3:3d:53:5a:a5:f8:66:df:10:
         86:a1:ae:0b:d4:75:a3:de:e6:91:c3:08:24:73:bb:4a:8b:dd:
         51:95:87:e3:a3:00:3b:ec:e7:60:bf:3c:23:f8:eb:6a:ef:c0:
         fe:d5:bc:e8:97:f6:f8:94:04:b1:bd:30:29:2b:d0:69:be:5b:
         89:99:9f:26:20:1d:f0:21:57:1d:a7:cd:bb:ea:dc:76:b8:5a:
         a6:f4:8c:e7:1d:23:06:23:b7:0d:cb:34:a4:5d:87:20:48:36:
         fb:92:1b:98:df:eb:3a:79:60:06:29:b1:a6:89:21:8e:ef:a8:
         0d:f7:d8:ac:e0:a5:72:59:d5:32:4b:9b:49:5a:31:4c:79:00:
         fd:bb:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:20 2026 by rpki-client